A twelve-step program is a set of guiding principles (sometimes accepted by members as being 'spiritual principles') outlining a course of action for tackling problems including alcoholism, drug addi…
3
Admission Statement
4
Dispel Common Misconceptions
5
Take/Maintain a Complete Inventory
6
Leverage What You Have (or Free Tools) to the Fullest
7
Review/Verify Technical Configurations
8
RSOP to verify AD policies / Compare Windows configurations against MS Security & Compliance Manager
9
Review Administrative Policies
10
Users are Almost Always the Weak Link
11
Ensure Visibility to be Able to Detect an Attack
12
Define Your IR Process
13
Advanced Techniques/Strategies
14
Stay Abreast of Trends & Upcoming Technologies
15
Have policies and plans for protection for when the business dictates implementation of new technologies
16
Be Involved and Give Back
17
Get involved with local/regional conferences and user groups
Description:
Explore a 12-step program designed for recovering system administrators in this BSidesLV conference talk. Delve into guiding principles for addressing common IT challenges, starting with an admission statement and dispelling misconceptions. Learn to maintain a comprehensive inventory, maximize free tools, and verify technical configurations. Examine administrative policies, focus on user security, and enhance attack detection capabilities. Develop an incident response process, explore advanced techniques, and stay updated on emerging trends. Discover the importance of planning for new technology implementations and engaging with the IT community through conferences and user groups.
Out of Denial - A 12-Step Program for Recovering Admins