S4x24 Main Stage Interview With Rob Lee

Dale Peterson interviews Rob Lee on the S4 Main Stage. They cover a lot of ground and Rob is never shy about sharing his opinions and analysis. They discuss:
- Rob’s first S4
- PIPEDREAM deployed v. employed distinction … and why 2 years later is it still the most dangerous ICS malware?
- Are we really more homogenous?
- What makes a group something that Rob/Dragos tracks as an ICS focused attacker?
- If the answer to intel is do the basics, do I need intel?
- What ICS specific data was VOLTZITE exfiltrating?
- What countries are targeting critical infrastructure? Is it realistic to expect any country to not target its adversaries CI?
- Threat actors focused on manufacturing
- How should an asset owner measure the effectiveness of their detection solution?

[@pricerj6190]

Love that Rob can take a topic like ICS and make it completely entertaining. He is one hell of a dynamic public speaker and as always it's a zero bullshit / just focus on the basics approach. Well done sir!

[@OSINT-proxy]

Insightful. I hope more organizations start taking an honest risk-based look at their security strategies.

[@liljemark1]

I could probably listen to Rob talk about almost anything! Entertaining and so much interesting details. Thanks for sharing this interview.

[@to2866]

Disappointing to see Rob Lee essentially adopt Hamas talking points. Terrorist groups will utilize civilian infrastructure in order to store weapons and hostages, and will sometimes even use those sites to launch their attacks. It's utterly ridiculous to say that civilian sites which have been militarized are not valid targets in war.
If we followed his advice on never hacking civilian infrastructure, we'd just be putting ourselves at a disadvantage. You don't think the military/NSA should at the very least be prepositioning themselves within adversaries' critical infrastructure in the event of a war? Ok great, but that high road has real costs. I'd rather see those costs put on the aggressors instead of our population if and when we get attacked.