Shield

The GTIA Communities & Councils Forum is open to highly engaged members and those new to the GTIA community. It's a great way to meet peers and engage with your trade association. Registration, agenda and more information links are in the comments. #WeAreGTIA

Calling all SOC Managers and SOC Directors! Are you open to a conversation about your stack, specifically as it pertains to identity? No sales pitch—this is strictly for research! I just want to ask questions and listen. We’ve already gathered some amazing insights but are looking to dive even deeper to understand the challenges and tools in play when it comes to managing identity in the SOC. Your input would be invaluable, and I’d love the opportunity to hear about what’s working (and what’s not) in your current stack. If you’re open to a quick chat, drop me a message Special thanks Joe Morin, Jacob Bice, Dustin Hutchison, PhD, Joshua Copeland, Jeff Hill-MBA who have added invaluable input and introductions so far.

Your business’s biggest cybersecurity threats come down to one thing: identity permissions. Most cyber-attacks happen when malicious actors exploit existing identity permissions, but there are a few simple things you can do to protect your organization. Here are my top three:

Traditional vulnerability management focuses on initial access points, but what happens next in the attack lifecycle? We've all heard the phrase, "???????? ?????????????? ???????? ???? ????? ??????????????, ????'?? ???????? ????????." But what if I told you it doesn’t have to be? No matter how an malicious actor gets in—whether through phishing, exploiting a vulnerability, or another method—the real question is: What do they do next? Malicious actors don’t continue exploiting vulnerabilities as they move through an environment. It’s too noisy and takes too long. Even a poorly configured EDR could catch them. Instead, attackers often "drop" to the identity layer and move quietly. This hidden identity layer, typically Active Directory or EntraID (AzureAD), becomes the highway for lateral movement. It’s how ransomware and other threats propagate across networks. But this can be avoided. A properly configured identity layer can stop an attacker in their tracks, shutting them down before they can move laterally. Now, imagine a solution that tracks vulnerabilities and misconfigurations across the entire attack lifecycle, pinpointing exactly how an attacker could move through your environment without creating extra noise. #exposuremanagement #identitysecurity #vulnerabilitymanagement