ESW #301 - David Hunt, Jerry Bell

<p>If you’ve ever worked on a red or purple team, you know scaling engagements to production is an intensive, unwieldy process. Technology pitfalls may exist, but the fundamental problem is this: the process of writing, testing, deploying, and verifying the efficacy of TTPs is highly flawed and inconsistent. This conversation will focus on applying a scientific process to security testing in order to achieve production scale.</p> <p>Segment Resources:</p> <p>Prelude Build GitHub: <a href= "https://github.com/preludeorg/build">https://github.com/preludeorg/build</a></p> <p>Prelude Docs: <a href= "https://docs.prelude.org/docs">https://docs.prelude.org/docs</a></p> <p>Introducing Prelude Build: An Open Source IDE Purpose Built for Security Engineers: <a href= "https://www.preludesecurity.com/blog/introducing-prelude-build-an-ide-purpose-built-for-security-engineers"> https://www.preludesecurity.com/blog/introducing-prelude-build-an-ide-purpose-built-for-security-engineers</a></p> <p>A Practical Guide for Scaling Continuous Security Testing: <a href= "https://www.preludesecurity.com/blog/scaled-security-testing-a-practical-guide"> https://www.preludesecurity.com/blog/scaled-security-testing-a-practical-guide</a></p> <p>Prelude Build: <a href= "https://www.preludesecurity.com/products/build">https://www.preludesecurity.com/products/build</a></p> <p> </p> <p>We will discuss the migration of the security community from Twitter to Mastodon, logistical challenges, and related matters of managing the community.</p> <p> </p> <p>Finally, in the enterprise security news, Security funding is back, baby! Security Unicorn layoffs continue though! We talk Zombiecorns, IronNet struggles, Netwrix acquires Remediant, We talk breaches: Lastpass, Rackspace, Okta via Github, Slack via Github, Github announces 2FA improvements, AI generates insecure code, Cyberinsurance challenges, Fyre Festival Fraudster Funding more Frauds All that and more, on this episode of Enterprise Security Weekly.</p> <p> </p> <p>Visit <a href= "https://www.se