Cybersecurity for “Have Nots”
summary
Walks through a practical low‑budget enterprise stack that actually works: EDR as table stakes (commercial or Wazuh if none), network sniffing with Security Onion backed by cheap Dualcomm taps, DNS/HTTPs visibility (disable DoH for enterprise), CloudSploit for CSPM, Bitwarden for passwords, Automox/PDQ for patching, Sysmon plus increase Windows event log sizes and print monitoring for cheap telemetry, avoid Exchange on‑prem (migrate to M365 via MSP), keep SaaS file storage, and prefer simple offline NAS backups as a realistic recovery plan.
AI-written summary · about
chapters (27)
- 0:00Cybersecurity for have-nots
- 1:47Who are the have-nots
- 3:12Solving with constraints
- 5:18Best practices are situational
- 6:22Build vs buy security stacks
- 8:31Hidden costs of open-source
- 11:00'Just do X' advice dangers
- 13:50Prioritize detection over prevention
- 16:37Justifying security budgets with data
- 21:01Free log management best practices
- 24:13Low-budget USB/monitor print
- 27:07Low-budget security stack
- 29:54Exchange on-prem indefensible
- 31:38Cloud shares vs local NAS
- 34:33DNS over HTTPS visibility
- 35:37Firewall logs insufficient
- 36:39Security Onion network monitoring
- 37:25Affordable Dualcomm network taps
- 38:51SIEM/EDR with Security Onion/Wazuh
- 41:23Bad cybersecurity plans
- 42:05Automated patching with Automox/PDQ
- 43:07Cloud security posture with CloudSploit
- 43:49When not to use cloud
- 45:17Offline backup strategies
- 46:43SaaS vs on-prem
- 47:48Managed threat hunting pitfalls
- 49:15Next steps and gaps
related talks
33mSecurity on a Shoestring: A Low-Budget Security Revival Tour (Jared Casner)
43mBuilding a network security practice in your organization | Pannel Discussion
45mOpening Remarks, Rumblings, Ruminations, and Rants
51mSecurity 101: A Beginner’s Guide to Cybersecurity and Zero Trust for Developers
41mA reasonable guide to security practices
45mSecuring The Future
29mDetection Engineering: Defending Networks with Purpose
52mHow to prevent cyber-attack, & what to do when attacked?