Season 1 · Episode 248
EP248 Cloud IR Tabletop Wins: How to Stop Playing Security Theater and Start Practicing
Cloud Security Podcast by Google · Anton A Chuvakin
October 20, 202532m 42s
Audio is streamed directly from the publisher (traffic.libsyn.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
Guest:
- Jibran Ilyas, Director for Incident Response at Google Cloud
Topics:
- What is this tabletop thing, please tell us about running a good security incident tabletop?
- Why are tabletops for incident response preparedness so amazingly effective yet rarely done well?
- This is cheap/easy/useful so why do so many fail to do it? Why are tabletops seen as kind of like elite pursuit?
- What's your favorite Cloud-centric scenario for tabletop exercises? Ransomware? But there is little ransomware in the cloud, no?
- What are other good cloud tabletop scenarios?
Resources:
- EP60 Impersonating Service Accounts in GCP and Beyond: Cloud Security Is About IAM?
- EP179 Teamwork Under Stress: Expedition Behavior in Cybersecurity Incident Response
- EP222 From Post-IR Lessons to Proactive Security: Deconstructing Mandiant M-Trends
- EP177 Cloud Incident Confessions: Top 5 Mistakes Leading to Breaches from Mandiant
- EP158 Ghostbusters for the Cloud: Who You Gonna Call for Cloud Forensics
- EP98 How to Cloud IR or Why Attackers Become Cloud Native Faster?