Off the Wire: A Play by Play on Cybersecurity and Technology Issues

Critical Alerts in Cybersecurity: Best Practices to Avoid Alert Fatigue | Off The Wire Podcast

Welcome to Off The Wire, the podcast that helps you curb cybersecurity risks and tackle technology challenges. In this episode, IT executives Tanner and Anthony share insights on effective alert systems in cybersecurity. Drawing from their combined 35 years of experience, they discuss real-life scenarios, types of alerts crucial for situational awareness, and strategies to prevent alert fatigue. They also explore alert sources, essential configurations, and future considerations for OT environments. Join us to better understand how to tailor your alert system for optimal performance and security.

 

Remove info from Zoom Info Trust Center | ZoomInfo

 

00:00 Introduction to Off The Wire Podcast

00:24 A Real-World Cybersecurity Incident

01:11 Understanding and Managing Alerts

03:50 Endpoint Detection and Response (EDR) Alerts

07:21 Domain and Firewall Alerts

12:58 Multi-Factor Authentication (MFA) and Network Activity Alerts

20:19 Situational Awareness and Account Hygiene

23:06 Environment Hygiene and Group Policy Changes

23:54 Firewall Commit Alerts and Protocols

25:32 Backup Alerts: Successes and Failures

27:11 Endpoint Monitoring and USB Drive Policies

28:39 Misconfigurations and VM Backups

29:22 MFA Bypass and Snapshot Alerts

31:41 Application Installations and Phishing Attacks

35:00 Physical Security and Surveillance

36:34 Future Alerts and Vulnerability Tools

37:57 Alert Sources and SIEM Alternatives

39:20 Managing Alert Fatigue

46:05 Final Thoughts and Listener Engagement

Mastering Microsoft 365: Tips, Tricks, and Best Practices

In Episode 28 of the 'Off the Wire' podcast, hosts Tanner and Anthony delve into Microsoft 365 (Office 365), offering a comprehensive guide on migrating, optimizing, and securing the suite. The episode covers essential aspects like hybrid architecture configurations, licensing tiers, and the importance of 2FA and logging for security. They also explore tools like Outlook, Teams, OneDrive, and SharePoint, providing actionable insights on feature utilization, retention policies, and efficient file sharing. Along with personal anecdotes and practical tips, this episode is a must-listen for IT professionals looking to maximize their organization's use of Microsoft 365.

00:00 Introduction and Episode Overview

00:49 Thanksgiving Recap and Personal Stories

01:37 General Tips for Microsoft 365 Migration

03:02 Licensing and Vendor Recommendations

05:33 Retention Policies and Legal Holds

07:11 Training and Continuous Learning

09:50 Backup Solutions and Internet Redundancy

13:42 Automation and Efficiency in Microsoft 365

15:57 Security Best Practices

20:47 Outlook and Exchange Tips

24:52 Microsoft Teams Tips

29:59 OneDrive Tips

35:11 SharePoint Tips

41:57 Conclusion and Final Thoughts

Cloud Dreams vs. On-Prem Realities | Episode 27

In this episode of 'Off The Wire,' hosts Anthony and Tanner tackle the ongoing debate between cloud and on-premise solutions: 'Cloud Dreams vs. On-Prem Realities.' They discuss myths, pros, and cons of each, share their experiences, and delve into specific scenarios and examples, such as cost implications, security considerations, and integration challenges. They also explore the future of hybrid environments and how businesses can navigate these choices effectively. Tune in to gain insights and practical advice on making the best decisions for your IT infrastructure.

00:00 Introduction and Episode Overview

01:34 Cloud vs On-Premise: Personal Experiences

02:57 First Steps into the Cloud

04:30 The Ongoing Debate: Cloud or On-Premise?

09:22 Advantages of Cloud Solutions

17:51 On-Premise Benefits and Cost Considerations

25:22 Real-World Scenarios and Lessons Learned

27:15 Second Guessing Decisions During the Storm

27:43 Inherited Cloud Solutions and Their Challenges

29:05 On-Premise Phone System Issues

29:43 Deciding Between Cloud and On-Premise Solutions

31:20 Surprises and Costs in Cloud Services

33:27 Security Concerns in Cloud vs. On-Premise

42:41 Building IT Infrastructure from Scratch

46:09 Future Plans and Final Advice

52:41 Closing Remarks and Listener Engagement

Mastering Customer Service in IT: Strategies and Best Practices

In this episode, we dive into the importance of customer service within IT departments, emphasizing its crucial role in driving innovation and improving user satisfaction. We discuss how IT professionals can develop and hone their customer service skills, the importance of effective hiring practices, and the benefits of using tools like ticketing systems to manage and resolve issues efficiently. We also touch on the significance of empathy, building trust and credibility, and maintaining good relations with other departments. Tune in for valuable tips and insights on enhancing customer service in your IT organization.

00:00 Introduction to Customer Service in IT

01:17 Challenges IT Professionals Face with Customer Service

02:38 The Importance of Hiring the Right People

04:50 Key Attributes for Customer Service Excellence

07:57 The Role of IT in Enhancing Business Efficiency

15:34 Proactive vs. Reactive IT Support

20:25 Implementing Effective Ticketing Systems

28:14 Building Relationships and Empathy

39:46 Maintaining High Morale for Better Service

40:38 Final Thoughts and Encouragement

In this comprehensive episode, we explore critical aspects of managing IT security, focusing on Active Directory audits, password hygiene, and privilege management. We share practical strategies for conducting thorough security audits, managing group policies, and ensuring effective password practices using tools like CrowdStrike and Microsoft Azure.

Emphasis is placed on minimizing over-privileged accounts, leveraging secure remote access tools, and implementing Multi-Factor Authentication (MFA) to enhance security. The discussion extends to the importance of dynamic employee groups, regular auditing of both AD and non-AD integrated systems, and the necessity of maintaining detailed documentation for enhanced cybersecurity. Real-life examples and practical advice underscore the importance of curiosity and constant improvement in IT security practices, with regular reviews and a proactive approach to identifying and mitigating risks.

 

Microsoft Entra Password Protection - Microsoft Entra ID | Microsoft Learn https://learn.microsoft.com/en-us/entra/identity/authentication/concept-password-ban-bad-on-premises

Group Policy: Automatically Delete User Profiles Older Than Certain Number of Days Win 10 not working. - Microsoft Q&A https://learn.microsoft.com/en-us/answers/questions/441800/group-policy-automatically-delete-user-profiles-ol

 

00:00 Introduction and Episode Overview

00:04 Listener's Request: Active Directory Audit

02:14 Account Hygiene Tips and Auditing Processes

02:36 Handling Stale Accounts and Group Policies

04:48 Group Memberships and Elevated Access

09:35 Password Management and Security

16:41 Auditing GPOs and Password Expirations

19:56 Dynamic Groups and Documentation

29:34 File Sharing and Ransomware Stories

31:38 The Dangers of Open Shares

32:37 The Importance of Regular Audits

32:55 Onboarding and Job Role Audits

33:49 Offboarding and Permission Management

34:48 Curiosity in Cybersecurity

35:40 Overprovisioning Security Permissions

41:12 Vendor Access and Security Tools

46:30 Monitoring and Auditing Best Practices

47:57 Tools and Techniques for Better Security

51:36 The Importance of Continuous Improvement

01:01:52 Final Thoughts and Listener Engagement

Crisis Management: Lessons from Hurricane Helene In this episode of Off the Wire, hosts Anthony and Tanner discuss the impact of Hurricane Helene on regions like Western North Carolina and Eastern Tennessee, focusing on technological challenges and solutions. Tanner, from Blue Ridge Energy, shares insights into infrastructure resilience and the importance of multiple internet connections during disasters. They explore the role of alternative internet sources like Starlink, and highlight the value of having redundant systems and communicating with service vendors during crises. The episode also delves into challenges with cellular networks, emergency power setups, and the need for maintaining cybersecurity protocols during disasters. They emphasize the importance of supporting relief efforts and the psychological impact of witnessing such devastation.

00:00 Introduction and Welcome

00:09 Impact of Hurricane Helene

01:17 Devastation and Recovery Efforts

02:21 Technology Challenges During the Disaster

02:37 Internet Connectivity Issues

04:08 Starlink as a Backup Solution

10:09 Cellular Connectivity During the Crisis

18:53 Burnout and Mental Health

 

Please feel free to contact us at show@offtheirepodcast.com

In Episode 23 of Off The Wire, Tanner and Anthony, two seasoned IT executives, delve into IT budgeting. They discuss their experiences, tips, and strategies for creating effective technology budgets, emphasizing the importance of aligning budgets with strategic plans. The episode covers auditing existing technology stacks, communicating with stakeholders, leveraging automation, and investing in staff training. Tanner and Anthony also explore future technology trends for 2025, such as AI, project management tools, and enhanced cybersecurity measures. Listeners are invited to contribute their thoughts on 2025 investments, making this a comprehensive guide for IT professionals navigating budget season.

Integrating ChatGPT: Your Newest Cyber Team Member In this episode of 'Off the Wire,' Anthony and Tanner explore the impact of ChatGPT on the cybersecurity field. With a combined 35 years of experience, they discuss harnessing ChatGPT to enhance cybersecurity measures and tackle modern technology challenges. They delve into ways ChatGPT can assist, such as generating policies, creating scripts, aiding in tabletop exercises, supporting incident response, and more. The episode also covers potential concerns about privacy and data security when using ChatGPT. Concluding with actionable insights, the hosts emphasize the importance of embracing AI technologies to improve efficiency and cybersecurity posture.

00:00 Introduction to Off the Wire Podcast

00:35 ChatGPT: The Newest Member of Your Cyber Team

01:32 Generative AI: Benefits and Concerns

03:33 Practical Uses of ChatGPT in Cybersecurity

04:51 Enhancing Cybersecurity Policies with AI

07:38 Incident Response and Script Creation with ChatGPT

11:58 Advanced Uses: Tabletop Exercises and Phishing Training

13:33 Incident Response Support and Log Analysis

19:14 Summarizing Reports and Enhancing Efficiency

27:12 Privacy Concerns and Safe Usage of AI

31:13 Final Thoughts and Podcast Outro