Blue Security Podcast - 2021-01-10 - SolarWinds Revisited and tech policy under Biden
Channel: Blue Security Podcast
Date: 2021-01-31

This week, Adam and Andy revisit some more guidance that has come out about Sunburst/Solarigate since the initial breach. Additionally, they share some thoughts about this week's insurrection at the US Capitol and the cybersecurity implications. Finally, with a Biden administration and a Democratic controlled government, Andy and Adam speculate on what might be taken up as priority when it comes to tech policy.

---

Documentation:
Microsoft Solarigate Resource Center
https://aka.ms/solorigate

Using Splunk to Detect Sunburst Backdoor
https://www.splunk.com/en_us/blog/security/sunburst-backdoor-detections-in-splunk.html

Analyzing Solorigate, the compromised DLL file  that started a sophisticated cyberattack, and how Microsoft Defender helps protect customers
https://www.microsoft.com/security/blog/2020/12/18/analyzing-solorigate-the-compromised-dll-file-that-started-a-sophisticated-cyberattack-and-how-microsoft-defender-helps-protect/

Using Microsoft 365 Defender to protect against Solorigate
https://www.microsoft.com/security/blog/2020/12/28/using-microsoft-365-defender-to-coordinate-protection-against-solorigate/

M365 advanced hunting queries
https://github.com/microsoft/Microsoft-365-Defender-Hunting-Queries

Understanding "Solorigate"'s Identity IOCs - for Identity Vendors and their customers
https://techcommunity.microsoft.com/t5/azure-active-directory-identity/understanding-quot-solorigate-quot-s-identity-iocs-for-identity/ba-p/2007610

Protecting Microsoft 365 from on-premises attacks
https://techcommunity.microsoft.com/t5/azure-active-directory-identity/protecting-microsoft-365-from-on-premises-attacks/ba-p/1751754

---

Contact:

Twitter: https://twitter.com/bluesecuritypod
Instagram: https://www.instagram.com/bluesecuritypodcast/
Facebook: https://www.facebook.com/bluesecpod
YouTube: https://www.youtube.com/channel/UC_hF-xXZ3_sUAvqPgngGRDw
Website: http://bluesecuritypod.com

Andy Jaw
Twitter: https://twitter.com/ajawzero
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com

Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com

---

Send in a voice message: https://anchor.fm/blue-security-podcast/message