
The 2 AM Call: A Ransomware Negotiator's Playbook with Wade Gettle
Feb 9, 2026 - 48:55
Radio and PodcastLive Radio & Podcasts
"This final chapter of the book is no simple closer! "Turn Up the Volume by Expanding SOC Functionality" covers testing that your SOC is functioning as intended through activities such as Threat Hunting, Red and Purple T...
Strategy 11: Turn up the Volume by Expanding SOC Functionality is an episode from BLUEPRINT by SANS Institute. "This final chapter of the book is no simple closer! "Turn Up the Volume by Expanding SOC Functionality" covers testing that your...
This episode belongs to BLUEPRINT.
Use the player on this page to stream the episode online.
Published Jul 18, 2023, 86:38 long, audio available.
"This final chapter of the book is no simple closer! "Turn Up the Volume by Expanding SOC Functionality" covers testing that your SOC is functioning as intended through activities such as Threat Hunting, Red and Purple Teaming, Adversary Emulation, Breach and Attack Simulation, tabletop exercises and more. There's even a discussion of cyber deception types and tactics, and how it can be used to further frustrate attackers. Join John, Kathryn, Ingrid, and Carson in this final chapter episode for some not to be missed tips! This special season of the Blueprint Podcast is taking a deep dive into MITRE’s 11 Strategies of a World-Class Cyber Security Operations Center. Each episode John will break down a chapter of the book with the book’s authors Kathryn Knerler, Ingrid Parker, and Carson Zimmerman. Support for the Blueprint podcast comes from the SANS Institute. If you like the topics covered in this podcast and would like to learn more about blue team fundamentals such as host and network data collection, threat detection, alert triage, incident management, threat intelligence, and more, check out my new course SEC450: Blue Team Fundamentals. This course is designed to bring attendees the information that every SOC analyst and blue team member needs to know to hit the ground running, including 15 labs that get you hands on with tools for threat intel, SIEM, incident management, automation and much more, this course has everything you need to launch your blue team career. Check out the details at sansurl.com/450 Hope to see you in class! Contact, Courses, and More: For feedback, reviews, guest pitches, or to get in contact with me for any other reason, head to blueprintpodcast.live ! Check out John's SOC Training Courses for SOC Analysts and Leaders: SEC450: SOC Analyst Training - Applied Skills for Cyber Defense Operations LDR551: Building and Leader Security Operations Centers Follow and Connect with John: LinkedIn
You can listen to Strategy 11: Turn up the Volume by Expanding SOC Functionality online on Radio and Podcast. Open the player on this page to stream the available audio.
Strategy 11: Turn up the Volume by Expanding SOC Functionality is an episode from BLUEPRINT by SANS Institute.
This episode is 86:38 long.
This episode was published on Jul 18, 2023.
Yes. Use the heart button on the episode page to add it to your favorite episodes list.
Yes. This page shows related episodes from BLUEPRINT when more episodes are available from the podcast feed.
You can listen to Strategy 11: Turn up the Volume by Expanding SOC Functionality on this page when the episode audio is available from the podcast feed.
Strategy 11: Turn up the Volume by Expanding SOC Functionality is from BLUEPRINT by SANS Institute.
Published Jul 18, 2023 and 86:38 long