John Cruz

There are MANY sys admins, help desk techs and engineers everywhere that worked extremely long hours last night and had to go into work today - and often - those folks get forgot about. I have a joke I tell everyone that I work with - “good IT is the one no one gives compliments about” - the idea is that, in the IT world - when stuff is broken - EVERYONE lets you know, over and over, until it gets fixed lol But, in contrast, when the technology runs flawlessly, no one says a word - it’s not like there are tons of people calling in saying “hey IT thanks for everything you do to keep the shit running!” The technology is just kind of expected to run! I coach folks on my teams that if the numbers are at 0 and the phones aren’t ringing - we did really really well. The recent Crowdstrike debacle should open everyone’s eyes to how important IT infrastructure is - and - as the world becomes more and more connected - those same IT techs and cybersecurity analysts are going to become the EMTs and police officers of the future. I say all that to say - to my fellow IT peeps on the grind today - keep your chin up, keep patching and remember it’s just a computer. We love to make things more complicated than they really are. Simplifying = streamlining. 2 weeks from now we will all have a beer about this one and laugh! And THANK YOU for all that happens behind the scenes to keep ships afloat and folks constantly connected. To everyone not in IT - today - consider that there are THOUSANDS of people working round the clock so you could login to LinkedIn today. So you can login to your work PC on Monday - and not just you - everyone in your office and your significant others too! Remember that IT is there to help you! It’s US together vs the pesky tech and nefarious actors that are (every day) trying to steal shit from you. It’s easy to get super bent out of shape about the Crowdstrike thing because of the coffee shop menu boards not working and delayed travel but the reality is that all of those affected machines had a security update installed which is what caused the issue - if that update hadn’t gotten pushed who knows what vulnerabilities may have existed (not saying I know the full extent and that Crowdstrike was totally in right but…) Empathy man, that shit is the MOST important thing - for all of us - to have at this very moment. Anyways - gonna get back to it - rant over - have a great weekend everyone :) #crowdstrike #itsupport #cybersecurity

14

3 Comments

A hot take that should absolutely not be a hot take: We've baked bad InfoSec advice into a lot of common sayings by ignoring nuance and hard-learned lessons. Management may be best positioned to meet dogma with intentional uncertainty, but leaders should encourage everyone in the InfoSec organization to challenge those sayings wherever we hear them. "Pay your dues" implies that we've been doing things well, it just takes experience to see why. Instead, we should ask "what has our experience taught us?" "Follow the best practices" ignores the importance supporting differentiation in all phases of your organization. Instead, we should ask "how can we tune best practices to our use cases?" "The weakest link is the human element" forgets that people are only weak links if they are poorly equipped and that well-equipped people are the strongest link in any control scheme. Instead, we should ask "how can we set our people up for success?" "Too small to be targeted" fails to acknowledge the reality that anyone/anything can be exploited to generate value for an adversary. Instead, we should ask "what is our exposed attack surface?" "Trust, but verify" creates the impression that we should trust first and verify as an additional step. Instead, we should ask "do our systems verify explicitly to the right degree?"

11

1 Comment

Pima Community College and the Arizona Cyber Warfare Range A great addition! The Pima Community College (PCC) Cybersecurity Program is a fantastic resource for individuals interested in pursuing a career in cybersecurity, including veterans. **Veterans in Cyber Security** **Discipline**: Military personnel are trained to follow procedures, protocols, and standards, translating well to the structured approach required in cybersecurity. **Attention to detail**: Veterans are accustomed to paying attention to detail, a crucial aspect of identifying vulnerabilities and implementing effective security measures. **Problem-solving skills**: The military teaches problem-solving techniques that can be applied to complex cybersecurity issues. **Leadership and teamwork**: Many veterans have experience leading teams or working in collaborative environments, essential for successful cybersecurity operations. **Adaptability**: Military personnel are trained to adapt quickly to changing situations, a valuable asset in the fast-paced world of cybersecurity. The Arizona Cyber Warfare Range (ACWR) is a unique program that provides students, professionals, and enthusiasts with hands-on training and experience in cybersecurity. The ACWR is hosted by Pima Community College (PCC), which offers various programs and courses related to information technology and cybersecurity. Here are some critical facts about the ACWR at Pima Community College: **Volunteer-run**: As you mentioned, the ACWR is volunteer-driven. Its team consists of experienced professionals from industry and academia who donate their time and expertise to support the program. **Hands-on training**: The range provides hands-on experience in cybersecurity through various challenges, exercises, and simulations. Participants can engage in penetration testing, vulnerability assessment, and incident response. **Real-world scenarios**: The ACWR features real-world scenarios and case studies that mimic cyber threats and attacks. This helps participants develop problem-solving skills and learn how to respond effectively to cybersecurity incidents. **Interdisciplinary collaboration**: The program fosters collaboration among students from different disciplines, including computer science, information assurance, networking, and more. Participants work together to solve challenges and share knowledge and expertise. **Community engagement**: The ACWR is open to the community, with opportunities for professionals, educators, and enthusiasts to participate in training exercises, workshops, and competitions. **Curriculum integration**: Pima Community College incorporates the ACWR into its curriculum, providing students with a unique learning experience combining theoretical knowledge and practical skills. Another great addition! "Leave Your Ego At The Door" is an essential aspect of the Arizona Cyber Warfare Range (ACWR) and Next Generation of Cyber Warriors (NGCW) initiatives. **Leave Your Ego At The Door**

12

Warning ⚠️ Rant post about CompTIA: Why CompTIA… I took the CompTIA Cloud+ CV0-004 Beta exam in the last possible week in February. I have been taking CompTIA exams since 2015, and have taken their beta exams before. The usual CompTIA exam cycle is about every 3 years, and I expect Beta results to take 3-5 months until the release day of the new version, no problem. Now onto the rant. The new Cloud+ version isn’t being released until September 10, 2024… For early Beta test takers that is about 9-10 months, and in my case 7 months, to receive results. That is just absurd. Do better CompTIA. That is all.

23

2 Comments

I probably say this a lot here at LinkedIn but if you really want to learn about technology, you need to be building it and troubleshooting it. I just spent a good part of the last four days troubleshooting my kubernetes environment in my lab. I made one mistake using ArgoCD that deployed a change on my production cluster and it took it down. Things I learned from this experience: 1. Create a repo with all my kubernetes environment code, so I could at the very least, redeploy it. 2. Using ArgoCD to deploy is super fun, but one bad config can replicate very fast. 3. Learn more about the tool you want to deploy. Learn its dependencies and what it will do to your environment so you know how to back out and restore your environment. 4. Do not be scared of starting over on a fresh environment. That what learning is for. Learning is about making mistakes and growing from it, not only succeeding all the time.

19

2 Comments

NO MORE DEGREE FOR I.T.!! 🚀 Thrilled to witness groundbreaking commitments from over 30 companies and institutions at the White House, spearheaded by the National Cyber Director, to bolster America's cyber workforce! 💼💻 This historic convening focuses on innovative pathways like skill-based hiring and apprenticeships to fill the staggering 500,000 open cybersecurity positions across the nation. Kudos to the White House for leading by example, revamping federal hiring processes to prioritize skills over traditional qualifications. The shift to skills-based hiring in the Information Technology Management series will open doors for thousands of talented individuals across federal agencies. 🌟 #CyberSecurity #SkillBasedHiring #Opportunity #Inclusion #FederalJobs #TechTalent #CyberWorkforce #Apprenticeships #WhiteHouse #FutureOfWork #CyberJobs #InnovativePathways The commitment doesn't stop there! Private sector partners are stepping up too, embracing skill-based hiring and investing in education and training programs. From ArcBest to Verizon, these companies are paving the way for a diverse and skilled cyber workforce. Let's celebrate this collaborative effort to create more opportunities and bridge the talent gap in cybersecurity! 👏💡 #TechEducation #WorkforceDevelopment #Partnerships #CareerOpportunities #DigitalSkills #FutureLeaders #SkillsGap #CyberSecurityAwareness #NationalCyberWorkforce #EconomicProsperity With initiatives like these, we're not just building a stronger cyber workforce; we're shaping a brighter future for generations to come. Together, let's continue championing skill-based hiring and empowering individuals to thrive in the dynamic field of cybersecurity! 🌐🔒 #TechInnovation #Empowerment #DigitalEconomy #CyberEducation #SkillsForSuccess #TechCareers #WorkforceTransformation #Collaboration #CyberLeadership

17

13 Comments

After over 20 hours of instructional material, and several more hours of lab work I can definitely say that this was an enlightening course TCM Security. It certainly highlighted where I have strengths, versus where I have room for growth(I'm looking at you appsec). Now it's time to buckle down and work through the labs again, before tackling the other courses needed to sit for the #pnpt. #neverstoplearning

28

4 Comments

Is there a good explainer on all the assorted key based security methods out there? Got a Yubikey and there’s more acronyms than way back when I got A+ certification. (PCMCIA = people can’t memorize computer industry acronyms) #infosec

3

1 Comment

crowdstike agent screwed up windows systems with csagent.sys BSOD. I was able to recover my system with below steps. 1. Boot into advanced options > troubleshoot > open command prompt (If no Bitlocker key then get it from AAD myaccount or check with IT) 2. Identify the OS drive letter. (in my case os drive is c:) 3. Run regedit from cmd prompt 4. Place the mouse on HKLM hive 5. Go to File > load hive > select <OSDrive>:\windows\system32\config and open system 6. Give some name to import the hive e.g myrecovery 7. Go to HKLM\myrecovery\ControlSet001\Services\CSAgent and set start value to 4 8. Go to HKLM\myrecovery and unload the hive from file > unload hive 9. Exit command prompt and recovery mode

111

2 Comments

It's important that you trust your vendors. but more importa that your vendors are worthy of that trust!!! With everything moving to "the cloud", ( read that as "Someone Else's Data Center"), you had better be rock solid certain that your vendor is up to snuff. same thing with ANY mission critical application!

2

Straight outta IT Straight outta IT, crazy auditor named Jeffrey   Bringing the heat, checking systems, and making 'em tame   When I step in the room, you know it’s a game   Big risks get mitigated, I’m the one to blame   Got the firewall tight, encryption locked down   All your data safe, I wear the audit crown   Patch management in place, vulnerabilities gone   Compliance on point, yeah, I’m the one  From the server room to the boardroom, I got the clout   Audit trails so clean, no need to doubt   Pen tests on the regular, security's no game   Identifying gaps, making sure there’s no shame   Change controls in place, no surprises allowed   Backup plans solid, I make the team proud   Data integrity’s key, no breaches on my watch   Every risk addressed, every threat I’ll squash  From the policies to the procedures, I know ‘em well   Regulations met, no stories to tell   Access controls tight, no unauthorized views   Audit logs detailed, no room for misuse   I’m the watchdog in this cyber fight   Making sure your systems stay up all night   Catching every flaw, leaving no stone unturned   In the world of IT, respect I’ve earned  So when you see me coming, better recognize   I’m the IT auditor, keeping an eye on your enterprise   From the networks to the data, I got it covered   Straight outta IT, leaving no risk undiscovered

68

6 Comments

I'm back from my week long vacation (much needed!) and just wanted to begin the week with a fun fact! - On average it takes 55 days to remediate 50% of critical vulnerabilities after patches are released. Isn't that fun stuff?? Keep fighting the good fight...and shore up your controls. Happy Monday! #ImOnIt #womenincybersecurity #cybersecurity #themoreyouknow #knowledgeispower #funfacts Verizon #databreachinvestigationsreport

17

7 Comments

Just jumped back into learning with Pete Zerger's SC-900 exam cram on YouTube. This course covers the basics with concepts needed for anyone stepping into the cloud or hybrid environments. 🌐 Gold Nuggets from Domain 1: It tackled the Shared Responsibility Model, which clarifies what you and your organization need to handle vs. what the cloud provider covers. There's a solid overview of Zero Trust—essential in today’s security landscape—and straightforward explanations of basic encryption techniques like hashing, SALT, Digital Signatures. Also, the course breaks down the three tenants of Compliance: Data Residency, Data Sovereignty, and Data Privacy, alongside key identity concepts related to Authentication, Authorization, and Federation. 🎯 Diving Deeper into Domain 2: Now, we’re getting into the platform/product specifics with Entra ID, and it’s just as informative. The structure of the course is perfect for anyone new to security, guiding learners through each domain with precision and clear follow-ups for deeper exploration. For instance, Domain 2 serves as an intro to the SC-300 exam on IAM, while Domain 3 tees up the SC-200 SOC analyst exam. 👏 Microsoft's Learning Path: I appreciate how Microsoft structures these domains. Each one is meticulously designed to provide a hands-on follow-up course, allowing for a deeper dive into each area if you choose. 💡 Takeaway So Far: The SC-900 provides a high-level overview that’s ideal for getting a feel for what direction you might want to go with Microsoft’s security courses. According to Pete, this exam cram alone might be enough to tackle the test. Still need to finish the course, but I’m thoroughly enjoying the clarity and structure. The SC-900 is proving to be a fantastic primer on the paths available in Microsoft's security landscape. Link to the YouTube Exam Cram Course: https://lnkd.in/dm3R-sDe

2

Troubleshooting is a Skill Set! Good and bad days have taught me that troubleshooting without process can leave you in a loop of frustration. We often skip basic procedure and jump to complex solutions because we somehow map complex problems to complex solutions. If only we could take a step back and return to the foundations, we'd understand that problems are mostly rooted in fundamental processes. So, I have decided to help a soul or two break out of that loop of frustration. Here's a checklist of basic steps you can take: 1. Identify the Problem: Clearly define the issue you're facing. What exactly is not working as expected? 2. Gather Information: Collect all relevant data. What were the last actions taken before the issue occurred? Are there any error messages or unusual behaviours? 3. Check Basic Connections: Ensure all physical connections and network settings are correct. Sometimes, the solution is as simple as plugging in a loose cable. 4. Restart Systems: Reboot the device or application. A restart can resolve many temporary glitches and clear system errors. (Only when absolutely necessary, and the cost of reboot is counted 👀 ) 5. Review Logs and Error Messages: Look at system logs and error messages for clues. They often provide insights into what went wrong and why. (I know, I know, no one loves the logs 🙄 ) 6. Revert Recent Changes: Undo any recent changes made to the system or settings. This can help identify if a specific change caused the issue. 7. Consult Documentation: Refer to user manuals, knowledge bases, and online forums. Often, someone else has encountered and solved the same problem. 8. Isolate the Problem: Try to isolate the issue to a specific component or configuration. This can help narrow down the root cause. 9. Test Solutions Methodically: Apply one solution at a time and test its effect. This systematic approach helps identify what works and what doesn’t. 10. Seek Help if Needed: Don’t hesitate to ask for assistance from colleagues or support teams. Fresh eyes can often spot issues that were overlooked. By following these basic troubleshooting steps, you can tackle problems more efficiently and avoid the frustration of endless loops. Remember, the simplest solution is often the right one.

15

Here's what you need to know about the ongoing "global IT outage": 1. What is it? It's computers running Microsoft Windows getting BSOD (Blue Screen of Death) after a recent application update (a faulty channel file). 2. Am I affected? Only if your organization uses CrowdStrike security platform (specifically CrowdStrike Falcon Sensor). If not, no need to worry. 3. What are they doing about it? CrowdStrike and Microsoft are working on a solution. 4. What to do if I am affected? Here's a workaround I got to know thanks to a colleague of mine. However, he emphasized that this workaround will not work if you have full disk encryption enabled or if you have disabled non-admin logins in safe mode: #microsoft #windows #bsod #crowdstrike https://lnkd.in/gGCg3iVH

2

What's the hardest role you’ve recruited for this year? I'll start. The toughest role I filled this past year was for a Senior FreeBSD Software Engineer. This position was incredibly niche, and I had never heard of FreeBSD. Here's how I successfully filled the role, with step-by-step advice you can apply to other searches. I rarely see tangible advice on Linkedin, and I hope this helps with any difficult searches you have right now. 1. Research: I began with a basic Google search on FreeBSD. From there, I learned everything I could about its uses and the right questions to ask potential candidates. I created a cheat sheet of talking points I could reference during my calls. A big shoutout to Matt Farmer for patiently answering my questions about FreeBSD vs. Linux! 2. Join Communities: I needed to do more than a simple Boolean on LinkedIn Recruiter. Just because a candidate had FreeBSD on their LinkedIn profile did not make them a FreeBSD-focused engineer. So, I sought out FreeBSD groups and communities. First, I found a LinkedIn group, then moved to Reddit, Inc., where I discovered a few FreeBSD threads. These led me to an email list for job postings within the FreeBSD community. Posting there and reaching out directly to members got my conversations started. 3. Network: Networking was key. I connected with anyone willing to discuss FreeBSD. This helped me understand the skill set and led to several referrals. It even helped my client secure a contract with a FreeBSD consulting company as a temporary solution. 4. Search Globally: My client was open to hiring globally. I spoke with candidates from India, Ireland, England, Canada, Ukraine, and Australia. Ultimately, we found the right person in the US. I used LinkedIn Recruiter to conduct this search along with Gem for email outreach. 5. Document Everything: I documented every boolean string, contact, email list, and conversation throughout the search and shared this information with my client. They would need this skillset in the future and needed a starting point when they had to hire for it again. What are you working on now? How can I help? I am happy to connect and brainstorm your difficult searches. Please feel free to reach out in the comments or email me at kaylee@estesgroup.me. #Recruitment #TechHiring #FreeBSD #Sourcing

54

20 Comments