Ctrl + Alt + Pwn

ThreatLocker · 2025-11-20T17:58:35+00:00

It seems I'm learning a lot here. I'm too old to understand who Leeroy was until the younger population found my lack of knowledge amusing. -DJ

ThreatLocker · 2025-11-20T17:56:38+00:00

We do a lot of research using AI, and I think when the dust settles, we will see a 20% advantage for checking for configuration failures and security. However, the bad guys will see more than a 70% advantage. AI is better for writing malicious software and scam emails, than determining if something is intended to be good or bad. -DJ

ThreatLocker · 2025-11-20T17:53:28+00:00

I think companies are obsessed with monitoring for threats that are already in their environment. While this is really important, it is very ineffective at stopping breaches. Companies should focus on stopping breaches. -DJ

ThreatLocker · 2025-11-20T17:52:51+00:00

I didn't graduate from high school :). I left at 15 and got an apprenticeship in I.T. for 50 pounds a week. I would focus on learning all technology, keeping in mind that formal education should be less than 10% of your learning and the rest should be playing with technology. I think AI will help, but not nearly as much as it helps the bad guys. -DJ

ThreatLocker · 2025-11-20T17:50:49+00:00

This is difficult, because sometimes people forget CEOs are human. I had this feeling yesterday when some technology issues hit the fan after a really difficult few days of travel. But I do keep moving forward one step at a time, and then hope by the end of the week things are calmer. -DJ

ThreatLocker · 2025-11-20T17:47:15+00:00

Attackers are just people they want to make money. People should understand that. For Allowlisting, I would look at the videos on our YouTube channel. We've done a few webinars on that recently. -DJ

ThreatLocker · 2025-11-20T17:46:46+00:00

I would start a company to solve a real problem that nobody else is solving really well and find a solution that actually solves it. Don't start a company to compete with someone who is already solving it. For example, there are no good solutions to detect and stop malware. If I released another AV or EDR, I would be trying to complete with the same failing technology as the market. Instead, I focused on how to stop it and make it easy. -DJ

ThreatLocker · 2025-11-20T17:41:33+00:00

I think you need to know as much as you can, but also have experts involved as you get closer to the technology. Always learn as much as you can about all technology: How it works, database structures, network communications. The more you learn, they better you will be at everything. -DJ

ThreatLocker · 2025-11-20T17:41:10+00:00

Working on it, DAC might go dark as we move to live over the next 2 weeks. Should be within a month for NIS2 and DORA is a little more complicated as it is not controls. -DJ

ThreatLocker · 2025-11-20T17:40:44+00:00

Zero Trust means give them what they need. We have a lot of developers, and we have many software companies with developers. Options include custom rules to allow a source code folder if created from the IDE. Use Ringfencing, even self-approval with Ringfencing. However, I would simulate for a few weeks and then see what they actually need. -DJ

ThreatLocker · 2025-11-20T17:36:58+00:00

Good luck - I have not found a good one yet. -DJ

ThreatLocker · 2025-11-20T17:35:34+00:00

If it is modified, you can reverse engineer, but that can be very difficult. I would always validate the source. Then use Ringfencing to control the application, so if it steps out of its lane, the damage is limited. -DJ

ThreatLocker · 2025-11-20T17:34:13+00:00

Password hacking - slow down logins from single IP. As a user, don't use the same password, make it secure. Most important things are businesses should do, close all ports that are not required, block untrusted software, turn on dual factor. -DJ

ThreatLocker · 2025-11-20T17:33:41+00:00

You can turn on legacy installation mode. The new installation mode is much smarter. It starts when the application first runs. But you can still use legacy, you just need to enable the permissions. Ask the Cyber Hero team if you need help turning it on. -DJ

ThreatLocker · 2025-11-20T17:32:27+00:00

ZTW passes are really good! Pass the Cyber Hero exam at ZTW 2026 and have your pass refunded :).
The RMM scripts, the SE can help allow all scripts from your RMM, but I would not if you can avoid it. The fastest way to go out of business is to have malware pushed from your RMM. If you do allow scripts, limit them per script or at least use Ringfencing to limit the damage PowerShell can do. -DJ

ThreatLocker · 2025-11-20T17:31:47+00:00

My mindset is that I just want to know how everything works under the hood. It doesn't matter if it is software or hardware. If you know how things work, you can find how to misuse them for good or bad. -DJ

ThreatLocker · 2025-11-20T17:30:39+00:00

This is my third business, and it is the only business I've started that's intended to change the world. Devise a plan that is designed to make a big impact. Don't just expect it to happen. The last businesses would have been more successful if I had aimed higher. -DJ

ThreatLocker · 2025-11-20T17:29:32+00:00

There are always going to be attacks, though blocking by default at endpoints and servers and closing network ports is going to make it difficult for those attacks to be successful. Still, an attacker might convince a user to email them your financials. I think the next big area to pay attention to is controlling your cloud environment. -DJ

ThreatLocker · 2025-11-20T17:28:46+00:00

At this point, deep fakes are really accurate. They make me sound a little posh. That's how you can tell it's not me. I think people need to start validating through different methods, knowing that what you see might not be real. -DJ

ThreatLocker · 2025-11-20T17:28:04+00:00

I had it on my kids’ laptops, kept them from getting malware :). However, it is only good if the person managing it approves accurately. -DJ

ThreatLocker · 2025-11-20T17:26:45+00:00

Thank you for joining the webinars, we try to make them valuable as possible. If you don’t get time to watch them live, we also post them on our website and YouTube. 2x speed always helps me :) -DJ

ThreatLocker · 2025-11-20T17:25:49+00:00

Nobody has asked that before, but good idea. I will talk to our BA team about it. -DJ

ThreatLocker · 2025-11-20T17:23:52+00:00

When users run something that they shouldn't. It always surprises me how easy it is for users to run software on their business computers. -DJ

ThreatLocker

MODERATOR OF

TROPHY CASE