In an effort to be more social as folks migrate from birdsite to Mastodon here's my first post.
Something that I have been running into lately is the decision to take action on adversary infrastructure or to let it ride and monitor for new intelligence. Personally, I try to keep the actor from gaining anymore new victims if I can help it.
When faced with the opportunity to impact the actor's infrastructure what do you choose?
Y’all know that my courses go on sale once a year. That’s coming up on Friday. I’ll post when it starts here, but I’m also going to give a slightly larger discount for my mailing list subscribers. You can sign up for the list before the announcement here: https://chrissanders.org/list/.
It's a low-volume list -- primarily new course announcements, training content releases, and book/course giveaways.