[138] How to Become the Go-To Threat Operations Expert for MSPs

In this episode of TubbTalk, Richard speaks to Dray Agha, UK Operations Manager for cybersecurity experts Huntress. Dray tells Richard how he got started in the IT industry while he was still a kid, and how he ended up at Huntress. They discuss the workplace culture at the company and what makes them different.Dray describes the Huntress experience for MSPs and how they support their clients with three key cybersecurity challenges. They also dig into SOC – what, if any, difference there is between it and managed security platforms, and why you might want to outsource your SOC.Dray tells Richard why outsourcing isn’t a bad thing, and why overseas suppliers can have a positive impact on your business, but also talks through the steps if you decide you want to build your own internal security system.Richard asks Dray to explain the terms ‘offensive security' and ‘persistent foothold’, why defensive security is both exciting and frustrating, and how Huntress respond to client security breaches.Finally, Dray shares the biggest change he’s seen in the industry since he started, who his mentors and influences are, both professionally and personally, and his best resources for staying up to date with the cybersecurity industry.Mentioned in This EpisodeProduct LabsThe Tech TribeCiscoWindows event forwardingWindows event collectorBlog: Defense Evasion: Defenders Strike Back!SplunkElasticsearchOpenSearchHuntress/Kyle Hanslovan on YouTubeAndrew Thompson Mandiant IntelligenceLockheed Martin Cyber Kill ChainMITRE ATT&amp;CKBook: Jaime Levy: UX StrategyMark GouldBook: Harlan Carvey: Windows Registry ForensicsJohn Fitzpatrick, MWR InfosecurityDarknet Diaries<a...