3 ms·
Three of your four links now are basically the same incident. Threat Intel is not responsible for "watching the hen house". Threat Detection, Incident Response
by strictnein 2y ago
Three of your four links now are basically the same incident.
Threat Intel is not responsible for "watching the hen house". Threat Detection, Incident Response, etc would be the teams you're looking for.
> the review board faulted Microsoft (MSFT) for not adequately protecting a sensitive cryptographic key
That's Application Security, who likely set standards that were not followed. Again, Microsoft is a very large company. A security audit should have caught this issue, but didn't.
- zer00eyz 2y ago> A security audit should have caught this issue Is there a culture of "security" at MS? No, and there never has been. "threat intel" is the group of people ideintyfing foxes, BY BEHAVIOR. They don't get their data out of thin air, it comes from threat detection and incedntd responses. Your making the argument that MS is structured like a TV police department, sure, but the intel team is like the fbi/cia... they have a much larger perview and scope and have to because of their work. Missing these sorts of thing in your own back yard isn't a statement of confidence.