3 FREE Resources for Cyber Defenders

[@CubensisEnjoyer]

Shout out to John Hammond for this video. I found this channel several years ago when I just got into hacking and it was one of the primary drivers for me becoming interested in security. Now I'm a SOC Analyst and John says he appreciates what I do. I appreciate what YOU do man. 👍

[@natoreus]

Thanks for shining more light on the blue team. Can't wait to see more content about blue teams.

[@PurpleTeamer]

Makes no mistakes, I like the offensive side, its fun to play around like Mr.Robot. I have OSCP, OSCE myself but Blue Team is where the job security and money are.I m glad I went into DFIR instead of Pentesting.

[@akashnxt7824]

​@@PurpleTeamer😢

[@MBND156]

Finally, I've been waiting for a video like this from you for a while now. hope you do more of defense related content :D

[@Headh0t549]

Great video as always, just a small note on 07:16 for anyone not aware of it. Microsoft will turn on Tamper Protection for all Defender for Endpoint clients in 2 days.

[@headlights-go-up]

blue team is certainly sexy when you end up saving everyone's skin lol

[@_ruddegar]

Yeah, getting the opportunity to be a hero for an organization. The red team gets to be the "bearer of bad news". If you are doing your job well, you will be telling the management staff, that you discover something that will bring many headaches, stress, etc..
However being the person who brings to the attention, that a company is vulnerable to an exploit, must be satisfying in some ways, like fulfills that "trickers" desire inside everyone. The power of knowing something no one else does if you discover a zero day..

[@c1ph3rpunk]

@@_ruddegarno, it’s not, because nobody will fix it.

[@FuzzerHash]

Thank you for sharing such helpful content. We really need more information about the Blue Team.

[@mr.marvin2672]

YES. More blue team content! Let's GO!

[@maradonayt2657]

I love my work as a Soc Analyst fully satisfied with my work ❤

[@rationalbushcraft]

How about using Elastic with sigma-cli? Since it seems to be the default that is used with kali purple it seems like a logical fit to me.

[@JustProgramming45]

John you are the coolest man I've never seen and am giving you a big thank you for letting windows users to know about sigma blue team defenders

[@rafaelk1631]

Thanks for sharing John. Love the content. Keep it coming

[@thesupercomputer1]

I just had an advertisement from John Hammond on this video and was a bit confused, that I could skip the midroll after a few seconds, just to realize it wasn't a midroll

[@satejratnaparkhi]

John's videos are always helpful ❤

[@mutabazilionel]

I have over one year of experience as SOC analyst but still feel like I can not do anything, I don’t know whether it is the environment I am in, or being SOC analyst is not the right career for me. Please show me the best way forward. Please please I beg.

[@ruslanbedoev9264]

any advice for Canadians? any help will be appreciated 💖

[@uniquechannelnames]

Uh maybe I'm too nooby but why is Sigma, a company dedicated to threat detection/sharing, why is their website marked "Not Secure" in the top left of the browser, like their certificate isn't right or it couldn't secure a TLS connection? Right?

[@phabeondominguez5971]

THIS GUY

[@chrisenoughisenough6602]

the download of Aurora lite triggered teh AV check in Vivaldi and the file was instantly quaratained. Is it trustworthy?

[@zhiqi0125]

Hi John, this videos are great i appreciate that. I saw some of your videos where you analyze malware and there is some obfuscation used by the threat actors, I am wandering if there is a way windows or any operating system can stop the malicious obfuscated code from running or maybe ask the user weather to run the obfuscated code?

[@iWhacko]

would love to see some non-windows applications like this.

[@xCheddarB0b42x]

Snort, ClamAV, ELK, pfSense, Loki, Thor, Xcitium are good things to play with and learn on pengin os.

[@kotreq5862]

That's a great video! Could you make a similar video for red team? I'm struggling with finding any decent resources for learning about new techniques.

[@CyberStudies]

Awesome video as always! Lol where can we score that awesome Huntress PacMan shirt?! That thing is too cool

[@bnk28zfp]

very usefull video!! thank you John!

[@ibs204]

These are great resources. Thanks for sharing

[@HitemAriania]

Aurora Lite and Aurora looks just like Loki and Valhalla from Florian Roth (Yara rules). Are Aurora inspired by him? :)

[@xCheddarB0b42x]

Same company.

[@beng9145]

solid good sir, much thanks to you

[@xCheddarB0b42x]

Blue Team is like 95% of the industry and Red team 5% of the industry but everybody wants to wear a black hoodie these days. (shrugs)

[@eli_chaps]

I blame the Media

[@mustafa-hasanrabah3945]

This cringe is real with the black hoodies

[@no-bc4kc]

Black hoodies....You guys get hoodies? 😤

[@alirezasnow3618]

Agree
I'm learning red team first just for fun
And then I will go for blue team for my entire life ,
Next 5 or 6 years later I will find an excellent job with 100 , 200 th salaries.

[@xCheddarB0b42x]

@@alirezasnow3618 There is a natural progression, but don't be afraid to look for shortcuts. There are exceptions to every rule.

[@nittani.]

Hey jhon i want you to take a look at yai day2

[@itech7354]

Hai John you always make interesting video 😊😊😊

[@luffy8220]

Thanks for sharing such great resources.

[@vishnukantjha1223]

Fabulous 😊

[@eli_chaps]

Finally ♥️

[@salmanewalkaddour3266]

I see an ad for you in your video. Is it a coincidence? 🤣

[@kumiho42]

Carbon Black is not a SIEM lol. Great video though!

[@Famous4Fun]

Well I did my masters in cybersecurity and completed 1 year of placement as cyber security analyst but now don't have a job 😢

[@caseyrivera2765]

Why? What happened?

[@ScottPlude]

I'm just here for the SHIRTS

[@GrumpyGillsFishing]

Thank you!

[@beng9145]

and you better never quit youtube

[@kristopherleslie8343]

Why don’t Microsoft just embed this directly into windows

[@animelover877]

blue team forever

[@ryanshatch]

I was here!

[@GajendraMahat]

w0w, first viewer

[@pem1200]

first

[@margarita8442]

red team bug bounty