Tech Tip Tuesday – Netflix F.I.D.O.

No it’s not a new Netflix series, the Fully Integrated Defense Operation (FIDO) is an open source security incident event manager. The focus is to automate and expedite incident response with an alert-to-ticket process. Netflix built the tool to solve in-house issues but saw the opportunity to share it with the security community.

http://www.tripwire.com/state-of-security/latest-security-news/netflix-unveils-fido-an-open-source-incident-response-tool/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Cybergamut

If you like Tech Tip Tuesdays you are going to love Technical Tuesdays from cybergamut. Cybergamut is a community of practice for cyber professionals. The next scheduled talk is on June 9th, “Using EMET to Defend Against Targeted Attacks” but there’s a catch. You need to be at Microsoft facility in Maryland or at a cybergamut node. Sadly, there are none in Hawaii. Anybody want to volunteer?

http://cybergamut.com/2015/03/technical-tuesday-9-june-2015-using-emet-to-defend-against-targeted-attacks-by-robert-hensing-of-microsoft/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Microsoft Local Administrator Password Security (LAPS)

When an attacker compromises any workstation, the local administrator password hash can be obtained and used to access every other workstation using the classic Active Directory exploit Pass-the-Hash (PtH). Fortunately Microsoft now has a solution to protect local administrator accounts from reuse. Labeled LAPS (Local Administrator Password Solution), a compromised local admin account cannot be used to as a launch point for other malicious activity by an adversary.

http://www.praetorian.com/blog/microsofts-local-administrator-password-solution-laps

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Microsoft Group Policy Search Website

Have you wanted to make a change to Windows Group Policy but didn’t know where to start? The Microsoft Group Policy Search Website is a great resource. The search bar allows you to find specific topics (e.g. password-complexity, minimum password length). You can also filter out specific operating systems (e.g. Windows XP, Server 2003) and applications (e.g. Internet Explorer 7). This could be a useful training aide for CyberPatriot VIII.

http://gpsearch.azurewebsites.net/

If you have a #CyberPatriot Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Distributed Denial of Service (DDoS) Attacks

Generating successful a DDoS attack is easier than it’s ever been and 2015 1st quarter reports seem to agree with that sentiment. The most common attacks have leveraged reflection amplification of Network Timing Protocol (NTP), Simple Service Discovery Protocol (SSDP) and Domain Name System (DNS). If you or your organization does not provide this service, you should block them from entering your network. You can use sites like What’s My IP to find out if your SSDP is showing.

http://www.whatsmyip.org/port-scanner/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – How to Win CCDC

This slide deck could apply to almost any cyber defense competition and a little real world too. We could have carved this up to provide a month of TTTs but decided to share it with the group to generate conversation. If you have the time, watch Ralph Mudge’s DerbyCon talk (slide 16). He shares some deep dark red team secrets.

http://www.cs.mercer.edu/courses/david%20cozart/Cyber%20Defense/How%20to%20win%20CCDC.pdf

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Google Code Jam

Since 2003, Google Code Jam has brought together professional and student programmers from around the world to solve tough algorithmic puzzles. Competitors may use any programming language and development environment to obtain their solutions. The competition begins with three online rounds consisting of a set of a mix of algorithmic problems which must be solved in a fixed amount of time. Each year, the top top twenty-five competitors from the online rounds compete in the Code Jam Finals at a Google office; they aspire to walk away with the coveted Code Jam Champion title and a cash prize.

https://code.google.com/codejam

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.