Travis Romero 🦸‍♂️

445 Followers
151 Following
154 Posts
#CyberSecurity | 10 Years of #BlueTeam | VP, Security Operations in the financial industry | I talk about about jobs, careers, #infosec, and more!
Bloghttps://infosecsidekick.substack.com
LinkedInhttps://www.linkedin.com/in/travisromero/
Twitterhttps://twitter.com/InfosecSidekick

To be honest I kind of hate "giveaways" because often times they are lame, but I have the opportunity to give away a pretty legit prize to one person and I also wanted to selfishly raise awareness to my podcast.

If you or someone you know is interested in entering for a chance to win a free Blue Team Level 1 certification voucher, all you have to do is subscribe to my podcast for free at https://www.infosecsidekick.com

I'll be releasing a conversation with the CEO, Joshua Beaman later today and announcing a winner later this week.

Please feel free to share, boost, and comment on this post to reach those that may benefit most from this.

I wish I could give away more than just one...maybe in the future I will...but for now, this is the best I can do and I hope it really helps someone out there kickstart their career growth.

#infosec #training #podcast #giveaway

Infosec Sidekick | Travis Romero | Substack

A Cyber Security Podcast run by a real practitioner with no motives other than the need to socialize. To support the show, please consider subscribing. Click to read Infosec Sidekick, by Travis Romero, a Substack publication with hundreds of subscribers.

You all should know about LOOBins, or Living Off The Orchard MACos Binaries, by now. WHAT? You don't? What the hell man. Do you even threat detection engineer?

I released an episode of the podcast with the creator of Loobins.io, @infosecb !

🎧​ To listen to the audio -> https://www.infosecsidekick.com/p/living-off-the-orchard-detecting#details

📺​ To watch the video -> https://youtu.be/peT-dicP7o4

#infosec #blueteam #podcast #interview #loobins

Living Off The Orchard - Detecting Mac-Based Threats w/ Brendan Chamberlain

In this episode of Infosec Sidekick, we venture into the dynamic field of threat detection and response with our guest, Brendan Chamberlain. Brendan, a cybersecurity expert with extensive experience in the industry, currently playing a large role in threat detection efforts at Zoom.

Infosec Sidekick

Two months ago, I decided I wanted to end my streak of lazy COVID era habits. My one metric was going to be to run a mile without stopping. I didn’t care how fast it was, just to do it.

It took about a month of dedicated jogging/running. But eventually I was able to do it. I remember… it was like a 10 minute mile lol but the crazy thing is that it felt like I created a habit. Now, almost two and a half months after I made that commitment, I ran a mile in under 8 minutes for the first time! It feels good man.

Heart health scares me. Whenever I think about the fact that there is a beating ball of meat inside my chest I have a mini existential crisis… this has gone a long way to combat that.

I guess I’m posting this to celebrate an achievement, but I also hope someone can read this and decide they want to improve on something for themselves. Whether it’s running like me or a skill or anything else. It’s about building habits and just sticking to it.

🚨 A new episode of the Infosec Sidekick Podcast is now available! 🚨

I was so happy to have a conversation with someone who has a ton to share on the subject of Threat Hunting; Shahar Vaknin.

Listen Here ➡ https://www.infosecsidekick.com/p/beyond-reactive-defense-the-art-of#details

🔎 Threat Hunting is a CORE part of any modern Cyber Security strategy. In this episode you will learn about Shahar's background and how he came to lead the high-paced threat hunting Team Axon at Hunters.

In typical new interviewer fashion, the first question I ask immediately derails the conversation as I attempt to dig into the inner workings of national intelligence, but don't worry, we quickly pivot to a massive and insightful conversation on:

⚙️ The Threat Hunting Process and Methodology you should deploy to implement successful hunts.

🚚 How to actually deliver value to stakeholders, even if your hunts turn up dry.

🦸 Strategies for effectively leading Threat Hunting teams and the qualities of a super star threat hunter.

Thanks again to Shahar Vaknin for being a guest on the Podcast. It's been a blast getting to talk to smart folks.

I hope you find value in the episode. Please consider subscribing to support the show; or leave a podcast review on your favorite listening platform!

#cybersecurity #infosec #share #podcast #strategy #threathunting #dfir #blueteam

Beyond Reactive Defense - The Art of Threat Hunting w/ Shahar Vaknin

On today's episode of the Infosec Sidekick Podcast, I am thrilled to bring you an exclusive interview with Shahar Vaknin, the Threat Hunting Team Lead at Hunters Team Axon. Join us as we take you on an exhilarating journey into the world of threat hunting. We'll explore the fundamentals of threat hunting, uncovering its true power and impact on modern cybersecurity strategies.

Infosec Sidekick

It was super fun to interview @jerry for this week's episode of the Infosec Sidekick Podcast!

I had wanted to do this a while back; when the heat of the twitter migration was taking place, but I almost feel like now was a better time.

With the dust somewhat settled, @jerry and I talk about Information Sharing, Community Building, and how Mastodon plays a role in that.

I genuinely appreciate this conversation and hope it can provide you some value and entertainment throughout your week.

You will be sure to find gems in this episode, such as the unlikely comparison to twitter vs Mastodon as Monsters Inc. Power Generation (don't ask, just listen lol)

To Listen -> https://www.infosecsidekick.com/p/building-a-cyber-security-community#details

#infosec #infosecurity #podcast #news #community #intelligence #informationsecurity

Building a Cyber Security Community: Infosec.Exchange and Information Sharing w/ Jerry Bell

Listen now (54 min) | Episode Description In this thought-provoking episode, we dive deep into the world of cyber security and explore the critical role of information sharing. Our guest, Jerry Bell, Chief Information Security Officer of IBM Public Cloud and owner of the infosec.exchange Mastodon instance, joins us to shed light on this essential aspect of the industry.

Infosec Sidekick

Looking for some gripping insights into the high-profile Joe Sullivan trial? 🤔

Look no further than the latest episode of the Infosec Sidekick podcast, where we dive deep into the case with our special guest Matt Stamper! 🎧

Join us as we explore the fascinating intricacies of the trial and discuss its implications for the world of cybersecurity and beyond.

Don't miss out on this thought-provoking and engaging conversation – tune in now! 🔥

#InfosecSidekick #JoeSullivanTrial #Cybersecurity #Podcast #infosec

Link to Episode -> https://www.infosecsidekick.com/p/the-joe-sullivan-trial-for-cyber#details

The Joe Sullivan Trial For Cyber Security Leaders

Listen now (64 min) | Review the trial details and dive into lessons learned with Guest Matt Stamper

Infosec Sidekick

I learned a new word today!

"Injection Strobing"

In Proofpoint's blog post "Part 1: SocGholish, a very real threat from a very fake update" and SCMedia's post "SocGholish finds success through novel email techniques". The two describe a likely tried and true method of detection evasion, but gave it a name that I feel is very suiting!

PP Post:
SCMedia Post: https://www.proofpoint.com/us/blog/threat-insight/part-1-socgholish-very-real-threat-very-fake-updatehttps://www.scmagazine.com/analysis/threat-intelligence/socgholish-finds-success-through-novel-email-techniques

#ThreatIntel #IOC #BlueTeam #phishing

🖼