Who Shares Wins
summary
A banking cyber team builds a program called Who Shares Wins that codifies sharing with legal sign‑off, an auditable tracker and a two‑person maker/checker four‑eyes workflow plus a quick share within 30 minutes path. Concrete outputs: lists of Cobalt Strike beacons and C2s, mappings of Beefeater and Conti infrastructure, and internet-exposed Confluence/VDAs. Current tracking is spreadsheet/email with counts of shares and qualitative feedback; roadmap adds MISP and automation to measure reach, feedback and operational impact.
AI-written summary · about
chapters (4)
related talks
41mThe Art of Threat-Informed Sharing: Real-life Use Cases from NSA
54mCredential Sharing As A Service: The Dark Side Of No Code
22mBreaking the Sharing Paradox: A Working Foundation and a Call for…
27mSecurity Champions LeaderBoard - Building and Gamifying the Security Culture at Your...
54mCredential Sharing as a Service: The Dark Side of No Code
42mPanel: From Takedown to Touchpoint: An Inside Look at the Data-sharing Pipeline in the Victim ...
49mHow Threat Intelligence Sharing and Automation Wins the War against Attackers
32mIntelligence Sharing for Critical Infrastructure Resiliency