Presentation for IntroSec Con

1. BuildingYour BlueTeam
Arsenal
IntroSec Con
25 April 2020
Glitch

2. Quick Disclaimer
Views expressed in this talk are mine and do not
represent my employer or organization in any way

3. $whoami
INCIDENT RESPONSE
ANALYST
RECENT COLLEGE
GRADUATE
CCNACYBER OPS &
COMPTIA SECURITY+
TWITTER: _GLITCHXR

4. Today’s Lesson
Jobs
Discuss job requirements
Tools
Discuss security tools
Experience
Discuss ways to get experience
before you have experience

5. Job Requirements
• Be honest….who reads the entire job posting?
• Capitalize on both job requirements and job
description!
• Take note of security tools used by company

7. What is a SOC?
Source: https://www.rapid7.com/fundamentals/security-operations-center/

8. Security Tools: SIEMs
Source: https://www.forcepoint.com/cyber-edu/siem

9. SecurityTools: SIEMs
• Free versions/open source
• Understanding the basics
• Using data feeds to ingest data

10. SecurityTools: Intrusion Detection/Intrusion Prevention
Source: https://www.paloaltonetworks.com/cyberpedia/what-is-an-intrusion-detection-system-ids

11. SecurityTools: Intrusion Detection System
• Host-based and Network-based
• Familiarity on use cases in an
organization

12. SecurityTools: Intrusion Prevention System
• Prevents malicious
activity
• Some are free while
others include free
trials

13. SecurityTools:Vulnerability Scanners
Source: https://www.rapid7.com/fundamentals/vulnerability-management-and-scanning/

14. SecurityTools:Vulnerability Scanners
• Use Cases:
• Identify vulnerabilities –
Reporting on vulnerabilities in
order to evaluate risks
• Evaluate risks – Accept,
Mitigate,Transfer
• Types of Scans:
• Internal
• External

15. SecurityTools: Firewalls
Source: https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-firewall.html

16. SecurityTools: Firewalls
• Usually placed between areas of low and
high trust
• Manages traffic using filters or lists
• Web Application Firewalls

17. Third Party Resources

18. Experience before Experience
• Set up a home lab
• Familiarize yourself with these
security tools
• Practice, Practice, PRACTICE!
• Volunteer

19. Home Lab
• Virtual Machines
• Not as complicated as it
seems
• Tutorials available

20. Questions?