Yea, the process overall has a fairly cool name as well “de-fang”. Overall it helps security teams share these indicators safely without having to worry about Slack or any other tool hyperlinking them automatically.
There are tools online to help you do this as well
Typically we see it when the US comes online, we’ll see 500s on availability across all of GitHub — either corroborated by number of active users, number of updates GitHub is pushing (being a mainly US company), or a combination of both.
Except to me, the argument is like a customer bringing their own plate to eat off of, and the restaurant then sues the customer and demands that no restaurant can ever be allowed to use that customers plate.
Opencode to a lot of people is a nicer and more feature rich harness than CC, it doesn’t consume any more tokens than CC, and if it did, the bounds of how many tokens each account is allowed to use is tied to the users payment and rate limits.
Amazing, I was searching for something like this the other day. My one recommendation is to please use a virtual table and pagination / infinite scrolling instead of loading all the data into memory. It’s takes around 20sec to sort by one column on an iPhone 15 Pro
It’s more like “can you design something with the JWT flow” and the candidates scramble to learn what JWT is in the interview to impress us, instead of asking us to remind them on the specifics on JWT. They then get it wrong, and waste the interviewers time.
Right now there’s a lot of engineering that falls outside SWE — think datacenter architecture or integrations, or security operations, or designing automotive assemblies. There are also dozens of components of a job that require context windows measured in the _years_ of experience — knowing what will work at scale and what won’t, client interfacing, communicating decisions down inside organisations through to customer support networks about how they are required to operate.
When we’re hiring for my role, Security Operations, I can’t have someone googling or asking AI what to do during an cyber security incident, but they can certainly use AI as much as they want when writing automations.
I reject candidates at all stages for all sorts of reasons, but more and more candidates believe the job can be done with AI. If we wanted AI, we will probably go wholesale and not include the person asking for the job to do the typing for us.
We’re not crying due to AI, we’re crying over the dozens of lost hours of interviews we’re having to conduct where it’s business critical that people know their stuff — engineering positions with consequences (banks, infrastructure, automotive). There isn’t space for “well I didn’t write the code”.
Because as someone who’s interviewing, I know you can use AI — anyone can. It likely obscures me from judging the pitfalls, and design and architecture decisions that are required in proper engineering roles. Especially for senior and above applications, I want to make an assessment of how you think about problems, where it gives a chance for the candidate to show their experience, their technical understanding, and their communication skills.
We don’t want to work with AI, we are going to pay the person for the persons time, and we want to employ someone who isn’t switching off half their cognition when a hard problem approaches.
I'm currently finalising a Security Operations app that centralises triage for security alerts (North / https://north.sh) into an intuitive interface that better helps Security Operations teams, MSSPs & SOCs.
It tries to deal with alert fatigue via some nice de-duplication techniques (via customisable aggregation and correlation rules), manages and runs detection rules against different logging platforms (Elastic, Splunk and ALA/Azure) with Validation and Simulation testing, and will lower the time that it takes to determine malicious activity by presenting as much relevant information per security alert as possible.
Hopefully to launch sometime before end-of-year. If you're interested, I'm always free to talk via [email protected], or sign up to the newsletter.
Hey Team, the SigmaHQ team and I have been working over the last 11 months & we're finally happy to release a brand new documentation suite and website to try and bring more Security & Detection engineers to adopt Sigma and enjoy the benefits around the ecosystem.
Please let us know what you think & feel free to ask any questions!
Australia based community-focused platform SaaS to deal with sports teams, communities and societies. Looking for a co-founder in business/marketing or PHP/Vue development - Email [email protected] for more info.
https://willbrownsberger.com/wp-content/uploads/2017/02/Gile...