Guest:  <ul> <li><a href= "https://twitter.com/samjcurry">Sam Curry</a>,  Chief Security Officer @ Cybereason and Visiting Fellow @ National Security Institute</li> </ul> Topics: <ul> <li>EDR was “invented” in 2013 and we are now in 2021. What do you consider to be modern EDR components and capabilities?</li> <li>Where has EDR fallen short on its initial hype?</li> <li>How focused are the attackers on bypassing EDR?</li> <li>How do you think EDR works in the cloud?</li> <li>In your view, how would future EDR work for containers, microservices, etc?</li> <li>Why aren’t we winning the war against ransomware?</li> <li>XDR is an interesting concept, so how do you define XDR? Is XDR just EDR++ or is XDR SIEM 4.0?</li> </ul> Resources: <ul> <li><a href= "http://detect-respond.blogspot.com/2013/03/the-pyramid-of-pain.html"> “The Pyramid of Pain” blog by David Bianco</a></li> <li><a href= "https://blogs.gartner.com/anton-chuvakin/2013/07/26/named-endpoint-threat-detection-response/"> “Named: Endpoint Threat Detection & Response”</a></li> <li><a href= "https://books.google.com/books/about/Dune.html?id=B1hSG45JCX4C"> “Dune” book</a></li> <li><a href= "https://books.google.com/books/about/The_Bomber_Mafia.html?id=dc03zgEACAAJ"> “The Bomber Mafia“ book</a></li> </ul>

EP30 Malware Hunting with VirusTotal

Cloud Security Podcast by Google focuses on security in the cloud, delivering security from the cloud, and all things at the intersection of security and cloud. Of course, we will also cover what we are doing in Google Cloud to help keep our users' data safe and workloads secure. 

We’re going to do our best to avoid security theater, and cut to the heart of real security questions and issues. Expect us to question threat models and ask if something is done for the data subject’s benefit or just for organizational benefit. 

We hope you’ll join us if you’re interested in where technology overlaps with process and bumps up against organizational design. We’re hoping to attract listeners who are happy to hear conventional wisdom questioned, and who are curious about what lessons we can and can’t keep as the world moves from on-premises computing to cloud computing.