Pinned
Thank you for connecting with me over so many years - it's been a pleasure. You can find me where the skies are bluer. Same name. ♥️
Katie Nickels
16.1K posts
Katie Nickels
@likethecoins
Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
Joined September 2008
- Unpopular opinion: I don't like the interview question "What do you do to improve your cybersecurity skills outside of work?" If anyone asks me this, in protest, I will answer "Sit on my ass and watch Netflix and eat cookies so I can come back the next day and crush it."
- New blog post and start of a series! I know it's tough to get started in #CTI, especially if you don't have $ for formal training. I'm sharing a self-study plan that brings together links to free resources and a couple questions to consider for key topics.
- This is an *extremely* cool reference from @CISAgov that breaks down the cost, impact, and complexity of implementing different security controls...plus TTPs addressed. This is awesome because it helps orgs prioritize! cisa.gov/sites/default/… (h/t @MSAdministrator)
- Today in my latest post, I share my top 10 recommendations for free resources to check out if you're getting started in #threatintel. I mixed it up with well-known classics as well as some lesser-known and newer sources - it was tough to choose just a few!
- 🍾 because I got the news that I am now a @SANSInstitute Certified Instructor! Taking a moment to celebrate even in tough times. This has been one of the most difficult yet rewarding challenges I've tackled. I wouldn't be here without the support of a LOT of people... (1/n)
- The long-awaited Part 2 of my CTI self study plan is here! This one covers OSINT, pivoting, clustering/naming groups, and attribution. Enjoy! medium.com/katies-five-ce… #ThreatIntelligence #CTI
- If it's not actionable, it's not intelligence. Yes, we should watch what's happening in Ukraine and orgs should prepare appropriately. However, vague warnings like "prepare for cyber attack!" aren't helpful. Here's what I recommend doing: 1. Go find your incident response plans.
- This is great! Very cool (and accurate) graphic.
How do you prevent a ransomware attack? Our new content breaks down how the CERT NZ Critical Controls can help you stop a ransomware attack with a defence-in-depth application. See it here: cert.govt.nz/it-specialists… - I have bittersweet news: today was my last day with MITRE, and tomorrow I start as a Principal Intelligence Analyst with @redcanaryco. It's really tough to leave my MITRE teammates, but I'm excited to join the awesome team at Red Canary! (1/n)
GIF - JUST PUBLISHED. Today, we wrote a blog post about an incident this month where we saw Bazar + Cobalt Strike. We took action to help a medical center avoid a #Ryuk #ransomware outbreak. We're sharing analytics that worked for us - we hope they help you too. redcanary.com/blog/how-one-h…
- It appears there is a *second* Log4J vulnerability that requires another patch. First CVE from last week: cve.mitre.org/cgi-bin/cvenam… New CVE today: cve.mitre.org/cgi-bin/cvenam…This Post is from an account that no longer exists. Learn more
- Someone asked me today about all the different jobs in cybersecurity and I rattled off 20+. Does anyone have a good resource describing potential jobs in cybersecurity or information security? I feel like I've seen a few resources around, but can't find them at the moment.
