• 0 Posts
  • 288 Comments
Joined 1 year ago
cake
Cake day: June 18th, 2023

help-circle






  • Quite a lot, actually. This is really a summation and not comprehensive.

    • Evaluate an environment after incident:
      • looking for IOCs, determine spread
      • Determine backup status and restore if possible
      • Return environment to healthy state (AD restore, replication, networking, etc.,)
      • Lockdown of security holes
      • Advise on best practices going forward
    • Decrypt environment if client pays ransom

    etc., etc.

    Depending on the complexity of the environment, this can take a lot of time and effort: much bigger than most internal teams are capable of doing. A client I had in Feb-Mar lasted a total of 3200 hours of work between 12 people on my team across 34 locations to unfuck the situation.











  • To add to their point, I live in the USA. I speak 4 languages. My girlfriend is Mexican and has dual citizen status in Mexico and Chile. The US is fucked, but not in the same ways exactly. That being said, I’m ashamed of our behavior every day.

    The USA is not a moral northstar nor is it a place to aspire to live unless you’re in dire straights.

    We plan to move to Chile at some point. I can maintain my US job.

    Fuck false loyalty to nationality. Live for yourself and your loved ones. Everything else is farse. Life has no borders.