- Malware Bytes - Spencer Hatchett - EDR/MDR solutions
- Spencer Hatchett -
This email address is being protected from spambots. You need JavaScript enabled to view it. - 727-222-5932 - EDR $16/year/endpoint
- MDR $36/year/endpoint
- Mobile Security $3/year/endpoint - Supports Chromebooks, Android & IOS
- Add-Ons also available
- DNS Filtering - $4/year/endpoint
- Vulnerability and Patch Management - $4/year/endpoint
- Application Blocking - $2.50/year endpoint
- Spencer Hatchett -
- May 10th, Incident Response Plan Workshop
- Keynote DMACC President - Lessons learned from an incident
- ProCircular - IRP workshop including a template and time to develop IRP for district
- Superintendent participation required, geared for administrators
- $500 / district - 5 hour workshop
- Tech Check-In
- Chromebook discussion
- How many spare devices to schools keep on hand.
- School Safety Grant frustrations
- VR / AR question - Reach out to Torrey Proctor at PLAEA
- How do schools work with Tech Budget
- Veeam Upgrade Status patching critical vulnerabilities.
- Asset Management tools schools use
- Chromebook discussion
Welcome everybody to the March ninth edition of Technology check in thanks. Everyone for showing up today. It's glad that snow we were forecast at least snowing, but not staying any major problems so far on it, anyway. So, thanks earlier today, about an hour ago I had Spencer from malware bytes contact me, and have a last minute addition our agenda. And think am just gonna turn it over you, Spencer, joining us. appreciate it. Thank you much. time, know reached out, because I've worked with few other schools your areas part what they looking was Edr solution help me insurance requirements beef their security, maoabtes. actually internal team get some really good pricing K. Through 12 school districts, wanted be able share kind go little bit help. You'll security want need. There. So one thing us is, mailbes point, detection, response. got point protectection built in, then also gives response recover layers give know, scanning artifact linking remediation. That's power behind maleer bytes. Really knows us, know. Oh, crap! Something happened my computer. Go download free version fixed there. we've remediation portion But active protection. there's 7 different there protection, as well respondent like suspicious activity, monitoring threat investigation. We multiple ways isolate endpoints ransomware rollback. For those windows, machines. Mdr oh, analysts can monitor 24, 7, 3, 65 gentleman this been business combined 150 years real world experience working Ncis. Department Navy, Nsa. Other 3 are agencies out doing cyber forensic analysis these guys look third party feeds come dive deep watch alerts do proactive hunting you. modules. You always add vulnerability patch management. something you're for. If need content filtering which most probably already have, chromebook android Ios it's endpoint protection goes devices provide web We're application audits all applications make sure they're not, leaking Pii device we're doing. Add blocking where students aren't getting ads, throwing them way around anything access bunch integrations do. if you've integrate seamer store, I'm The Api is Right here's quick mower bytes, run through quick. necessarily content, more malicious websites. There's ton websites IP addresses networks, things known, malicious. them. They're instantly try push viruses down outright block those. no reason into application, hardening behavior. vulnerabilities machines, live certain applications. beat bit, then, helps detect fingerprinting attempts, behaviors. how accelerate work. when excel stops Should know? may be, has file open seeing background that's process, export mitigation. proactively identifying attempts abuse vulnerability, remote execute code machines today's threat. Vectors are. 20,000 cves, added. Last year, keep with, management important, especially having that. payload analysis. What? This definition based, updating definitions every 2 h least, frequent, pushing 0 days threats find either data, sources scanner tool downloaded 500,000 times day. toumstry data day threats. A normal detection machine learning. What files processes going memory. say, Okay, look, like. Let's remove see what's left. bad, Edr, left blocked or identifies mitigation behavior based technology Changing Windows, firewall rules, registry, key values. behaviors processes. Make sure, dropping new executables, that, There! engine remediate. moving bits pieces now nothing else reinfect isolation. by process puts computer safe mode. No kick off users chrome. Chrome lock down. network, means only communicate Nabbytes. It can't spread laterally, phone home thread actor. Then user locks ransomware. Roll back. does windows. Machines right prior encryption. steps here, encryption, basically time backup. using own proprietary technology. Volume, shadow copy files, store locally restore happen gave 72 roll back under here everything didn't identify bad. checking does, we'll graph. map Mitre Tech framework rules breaking. Give easy graph at. understand remediate click, threat, click incident out. Now Mdr. Solution, Analysts taking Solution beefing bit. anti exploit brute force retrospective hunting. files. Iocs, investigations. building. Iocations, building cases find, cases, present decision made handle. These to, ahead after action report. handle 21 Of helping protect Brief, snapshot see. This. customer. 219 endpoints. Their 75, 48 alerts. They able. Our Team build 162 92 investigations confirm incidents to. found. did work shorten worry security. sleep nights weekends, environment, simplify definitely improves experience. spend worrying downtime, attack mitigate risks breach anybody questions. main difference between Nvr. Is monitoring. Yeah. manage service top Edr. doesn't sock, would keeps best both worlds. will hit quick, since lot, important lot here. scan system cves global Cv database. pile portal hyperlinks information Cve. type Cisa recommended. Tell why, All things. manually want, create schedule, schedule. Google Chrome, update, Tuesday group devices. let choose want. schedule same There, windows patching category, even Kb. Ids research. research required, this. severity, category inputs. One note patches verify before load in. Here cause end patches, wanna safe. use. don't recommend could potentially break first. fairly answer assessment software installed network network. Correct. Yes, networks. Paying separate purchase management? Yep, of. towards event, content. That backed quad flair, level. teachers take laptops, home, Dns filtering. stuff. access. Chromebook Android ios Protection. adwking another blocking. couple slides Vulnerability packatch modules on, relatively priced education nabytes use box submit testing policy changes configuration say submitted mitre attacks. Mrg, product AV test, making changes. submitting is. miter tax, stop 100% tax Mr. actually, won single G certificate, award without jump hoops districts 25 employees, offer onboarding onboarded you'll Success manager. deployment. Answer exclusions set enrolling console. support tickets. also, number. call. We'll PIN verify. 5 Am. Pacific think. 8 Pm. English You're reaching folks California parts Us. cork Ireland, too. Any questions pricing. area agencies. generally Kat year $16 endpoint. Then, multi year. 15 solution. $36 34. Add-ons are, believe, the. There filtering, 4 endpoint, 2, 50, chrome books, $3 discounts well. standalone side Chromebook, standalone. let's mid contract now. chromebooks. protect. You. chromebooks, chromebook. years. 50. protecting servers? Nope, count workstations servers Okay. change passwords. corrected minimum purchases said they, you'd licenses Yeah, yeah. employee accounts. As long employees district. It's. included less than still dedicated customer success meetings walk and. sure. Sorry, Scott, can. re ask question understanding correctly. saying instances being installed. No, district school. mean, be. Teachers, janitors, everybody. 25. Not And. Did read prices us? time? per right? sent. Scott Scott. Third 36. comes $34 seat price. gotta price, baked includes 36, then. Right. add-ons, right. Yep. $4 more. Per seat. so? pull document again. each? add-ons together? each. on. fake add-on kinda hand hand, Dns, its own. Same app 50 mix match? buy still, guess yet total number staff, regardless many Buck, Purchase. Exactly. Okay? On servers, administrator student devices, or. Generally whole environment complete search sitting don't, view catch seen start mixing laptops stuff, gets tricky. questions? questions, feel reach quote stuff Where purchase, whatever partner purchased through, whether cdw journey. Ed. Stop choice, insight with. partners. said, this, pay pricing, mentioned special members. letting rest team. I'll almost. pretty much Iowa. helped Aea Anyone Well, time. anybody, chat way. anything, send priceless, will. notes published archive, put link sent notes. general gist prefer wanna, welcome maybe post publicly facing. site. But. Alright! generic they'll video information. So. Great. Everybody Thanks. Alright, Thanks, Spencer. Alrighty! byte talk finalized pray, Lakes, putting together workshop. tenth, office Pocahontas. geared specifically administration. technical meeting talking acronyms. Mfa Anything particular it? typically setting administration by. why this? Why, isn't problem excited keynote president Dimac rob Demonson. he went participated secure I/O Conference. He auto session there, impressed. head off, superintendents hear Rob Denson coming presentation about, paraphrasing wish known standpoint Community college. basically, like, Hey, involved there'll lunch pro circular me. After section basics needed plan. Lunch Plan, template staff teams, requiring superintendent tech director. people responsible for, Communications. Hr. Cheap operating officers. should team, plan while pop write plan, half workshop, very substantial done planning tabletop exercise. afterwards, utilize incident. Response, and, scenario. Here's happened. places familiar dungeons dragons, tensions dragons game land Follow up, overview end. circulars charging amount money host. It, charge $500 district, members, stand flat fee join benefits working. implemented incident, Probably completed, might who goal This, requested chief administrator, felt better cyberworks shops Geared Your understand? Because directors knowre facing issues remediating deal dealing press anyway, anyone forward Where's that? At? That'll Pocahontas Lakes So! 500 attend. suggest bring Then. Dodger, larger shooter district? would? Who address tech, director, desk input well, through. side, include high principal size elementary middle side. mentioned. assuming in-house legal counsel direct so, communications communications, staff. Nature. mentioned, somebody quite exactly Would clarification. Or office? Are numbers? with? dollar associated policies needs Paul, related, players available implement policy. yeah, flyer works, signed week. date, space setup, keynotes lined good, instant sit watch. Powerpoint takeaway Alright. anything. specific topics. really, guy's opinion solution, pricing? do? Phil. version. second list talked about. Add-ons. first, responsive. quarantining item, email. Let away. already, blocked. Trojan trying job those, call now, Jeeves. Search engines, aren't. 70 Pcs. In loaded 60 non essential test server install server, outbound items found structure itself. From previously. attend Ocio offering crowd strike numbers compared. 98. 98 annum. wait list. CIO wrong vacation supposedly April Or? Yes. servers. options crowd. Strike. crab, ocio walkers $98 Msi. Sec offers $60 missing. function called Spotlight, spotlight Feature. Ocio, tell Cvs patched box. Msi Stack $5 month $65 month. sock which, overnight hours, person staffing entry-level engineers something, Msisac 30,000 endpoints, stack. can't. details. How compare liquid networks monitoring? full disclosure lake. wasn't pointing Admin. deployed agency boxes. ported yes, But, unlike says telemetry within min, starting hunt problematic benign. problematic. notify care cloud flare ones Sac! 24 logs soft, Hunt day, addressed, hadn't addressed dressed Msisec limited dashboard. have. You, control dashboard, setting. The, Sec. People Oca. O version, training piece They'll except instantaneous. 20'clock morning reason, Malware infected site, shut Basically, Ddr turnaround bad disconnects. night way, happened, email, call, regular log, 49 good. Hi pushed machine. notice looked train program, caught according Mike Schmidt, said. They've several people's desktops. haven't operation mine been. transparent pick Ua. It'll First enforcement mode kill odd tools trick false, positive. shutting specify person, think, week later them, yep collecting looks everybody's light versus 7. acceptable? I. Ms. sec. Crowd strike. renewed myself. never contacted inbound mean firewalls. expecting activity budget afford thoughts honestly, Anavirus all. Personally, I'd rather My detects spread. 30'clock remediated primary domain. Controller, first thing, fire, me? seem outrageous? Oci $100 ever, ever 6 700 licenses. can't, category. yet, started thinking ultimately risk critical machines? ransomware? Servers priority. First, manager, her machine, his infected, Payroll, hey? hate cloud, big deal, administration, superintendent, board, secretary, expensive solutions member I, any, monitoring, simple sufficient unless ability save money. personal pay. tear See heartburn Look passwords Sorry things, principals. Principals. principles, secretaries nurses hipaa Those tier ones. development foundation piece. consider seems starts fast. 100 3,403, 503, 600 bucks too small wabytes cover consideration, Sophos enhanced agent antivirus. stopped saving previous antivirus cost exchange. actually. theoretical buy-down spending sophos. 40 Or, whatever. edr came across edr, saw brainstorm. Maybe hey, great fortunate buy, licenses, remember license packs. workstation $10,000 couldn't swallow pointed company selling $3,500 where, Isac solutions. individual quantities. Wanted, one. go, crowd, directly, quantity purchasing buying products expensive. companies yourself. designed companies, financial cyber. Cyber teams Hmm! happy bounce Come been, malware, between, Phil bites edr. running Sex player, members figure screen sometime air message other. Evr. Questions. Do Matt? spend, chromebooks Ian's past Ue. discussion environment. fortify Jason Slaughter waiting him otherwise local vendor kidding official Rather excite Governor's Security Grant 23 place order qualify money, don't. effect. we're, dance discouraging, word heard coo poops they've spent hours road. 100,002 buildings. worth week, public, detained short period parking pictures students. reported Staff away, person. trust. Trespassing property church's sorry Catholic system. thing. mind digital got. man! Daniel. you? wants trending technologies. focusing virtual reality augmented reality. told him. not. Daniel, Tory Proctor Ea. he's integration specialist got, Sarah correct. He's directly super busy beginning grabbed onto track ideas. Who's out? Tori proctor from, nor prey lakes aa. technologies purchased. kids career lab. was. Demoed. demoed do, pipe fitter fitter, VR goggles, pipeline passs allow virtually taste did. summer school, times, so. else. Good. right, Sarah. Nothing recently. just. Keep weird immutable. Backup cried prayed, again, afraid touch glitchy around, spit cuss. Had schools, wouldn't holy water backups everywhere world. literally. ready brand solid state drives ticking it'll Perfectly, sudden, won't array, horrible. ring adding again ground summer. fill $50,000 hefty. lots cameras anywhere near meetings, decisions window. no, normally. warm snowing thanks, Sarah, lettuce! introduction familiar, South Central Lake City comments Hello! next laptops. interested budgets optimum panels, tend cut meet budget. Which Just drop email tab new. Never before. replacement subscriptions. tab, forget fifth used life, acclimated board truly appreciates $20,000 proposed $75,000 broken shot shortly. mind. drop. Anybody Want interest showed future Thanks! else! Marletta! it! Kevin. business, usual finally hired months done. Otherwise e-rate Kevin, update. Phil, guys, Now, test. Seth! Prep's going, target versions 1, 10 stable channels term support, 102! preparing refresh, summer, rotation. grade, grade computers. 175 Aser models released yet. am. Thanks upate, Jason. lot. beam updates installations 11 12. 9.5. Got upgraded upgrades gone fine. upgrading hard repository upgrade Repository, smooth, backup initiated 13, cell typically. help, pointers yesterday, ran yesterday cusp okay. weren't vulnerable. Obviously 9.5 checked covered. 12, while. browsers hopefully. Jason, Foley, much, wondering spare hand? For, enrollment Too many. 20. Probably. we. ours years, stock, kids. sometimes, although damper hand. skating edge each, extra, waiver forth, obviously ones, repair going. huge, 2. nice of, depending 5. nervous. Starting program Esa, Esa private idea coming. 5, 25, slightly terrifies older until some. sorry. 30 extra bigger 8. ends heads starts? in? clue no. Cause. emails registerrations starts. Right? Hi, Chris, registrations but. Neither Okay along lines of? Student repairs inventory. asset? brood, snipe asset maintenance maintenances repairs. spice works. base based. admin, also? hoping codes easily. spreadsheet, updated. useless. thinking, somewhere assign student. okay, Whatever someone market, easier snipe. source product. hey website. chat. Greg Anderson spun talked. tug brought Security, sound something. believe. Gunnerson, Dennison telling else, man. Somebody forgot update learned Brainstorm leaving Saturday Be Wednesday, everyone stays always, leave Thursday. Have