Jason Wood

Over the years, I’ve noticed that having standard operating procedures (SOPs) consistently makes things go better. Writing them isn’t the most exciting part of security, but if done well they continue to pay off over time. Let’s consider the use of SOPs in threat hunting.

I’m always on the lookout for good reports or articles about intrusions to evaluate defenses. They can be extremely useful in overlaying what adversaries are doing to a network.

I’ve told myself for years that I’m not an ideas guy. This is really frustrating when I try to figure out a topic for a presentation at security conferences. It takes hours just come up with an idea. Last week I stumbled into a way to find topics in just a few minutes.

Threat hunting is challenging to take on when you are the only security person, but it can be done. It takes some heavy lifting in the beginning, then you are able to put it to work and make improvements over time.

Speaking in public makes a number of folks extremely nervous, but it's one of the best ways I've seen and experienced to build your reputation.

If you are the sole security person at your employer, you have lots of competing demands for your attention. Here are a few observations that may help you from the hundreds of intrusions that I’ve analyzed.