This week I had a pleasure of supporting @Digihash in delivering @sansinstitute #FOR578 - I would like to thank Kevin and all the students for great week!
This class however was also very special for me. I recently learned that my network infrastructure analysis guide has been included in the syllabus and is part of the course dedicated to indicator pivoting and enrichment. So this week for the first time I had an opportunity of presenting the guide myself, explaining its use, and why I created it. Needless to say I am really honored that my work is now included in the course. FOR578 was the training that early in my career provided skills and tools that enabled me to quickly settle in the threat intelligence role. Hence, I can't say enough about how excited I am that my work will be now part of this journey for students.
You can find the guide itself here:
https://docs.google.com/spreadsheets/d/1oBOW5qGJstWYg3qXwSK12MHav4Pz6rzP77FzSB2IEeY/edit?usp=sharing

And that is all folks for SANS Baltimore @sansinstitute #FOR578 class. I would like to congratulate the capstone winners and participants for their great work, thank all the students for being with us and of course Peter Szczepankiewicz for running the show!

#FOR578 capstone challenge in progress. Let's see who will get the shiny reward :)

Starting soon last day of
@sansinstitute
#FOR578 (before the capstone challenge!). Day 5 is on the dissemination and attribution and I love how we will be able to see how all the pieces of intel work we explored through the week will have their role in delivery of final product.
https://media.giphy.com/media/IylMECpdes2CwGiqe4/giphy.gif

And that's a wrap for the first day of @sansinstitute #FOR578 class where I have a great pleasure of supporting
Peter s14 Szczepankiewicz.
It is always great to meet new students and have (intelligence) fun exploring all aspect of the discipline. And tomorrow intrusion analysis awaits!

#FOR578 capstone in progress! As it is an analytical challenge it is always exciting to see how different groups approach the issue in a different way. https://media3.giphy.com/media/3oeSAz6FqXCKuNFX6o/giphy.gif?cid=5e2148864fe64e8a4059380dca5c818ae46a4d73c67671ed&rid=giphy.gif&ct=g

Starting soon day 5 of the @sansinstitute #FOR578 class - this day is dedicated to topics of dissemination of intelligence products and attribution of malicious activity. I like how in this course you can really see how subsequent bricks of intelligence process - setting requirements, analysis of malicious activity, collection from external sources, analysis and processing come together to allow making analytical judgements.
And tomorrow of course capstone were students will be able to put into practise skills that they acquired through the week :)

Starting tomorrow until Saturday I will be supporting the very awesome @likethecoins as a vTA during the @sansinstitute Cyber Defense Initiative 2022 #FOR578 class. Looking forward to meeting all the students and having lot of threat intelligence fun.
See you there (online)!