IoCs vs. EoCs: What’s the difference and why should you care?
January 9, 2023
Security analysts and threat hunters know the importance of IOCs – indicators of compromise. But EOCs - enablers of compromise - are just as important.
The post IoCs vs. EoCs: What’s...
Episode 233: Unpacking Log4Shell’s Un-coordinated Disclosure Chaos
December 29, 2021
In this episode of the podcast (#233) Mark Stanislav, a Vice President at the firm Gemini, joins Paul to talk about what went wrong with disclosure of Log4Shell, the critical, remote...
Episode 232: Log4j Won’t Go Away (And What To Do About It.)
December 16, 2021
In this episode of the podcast (#232), Tomislav Peričin of the firm ReversingLabs joins us to talk about Log4Shell, the vulnerability in the ubiquitous Log4j Apache library. Tomislav tells us why...