Guidance on Moving Off of SQL Server 2008 and 2008 R2

• by Brian Kelley

• Databases – Infrastructure – Security

July 9, 2019 will be here soon. With it comes the end of support, including security updates for SQL Server 2008 and SQL Server 2008 R2 unless you either...

2019-06-21

41 reads

Why Security Through Obscurity Is Bad (Alone)

• by Brian Kelley

• Databases – Infrastructure – Security

Security through (by) obscurity is where we try to protect an asset by hiding it. Anyone who has ever played the game Capture the Flag knows that a motivated...

2019-06-21 (first published: 2019-06-05)

359 reads

Amazon’s Concept of Ownership and Technical Debt

• by Brian Kelley

• Databases – Infrastructure – Security

I’m reading Think Like Amazon: 50 1/2 Ideas to Become a Digital Leader. In talking about Amazon’s pursuit of a second headquarters, John Rossman wrote the following regarding ownership: Amazon’s second leadership...

2019-06-12

225 reads

#tsql2sday – A Letter to My 20 Year-Old Self

• by Brian Kelley

• Databases – Infrastructure – Security

Self, I am writing this to you in my mid 40s. I know when I was 20, I wasn’t thinking about 30, much less 40. Here’s some advice I’d...

2019-06-11

18 reads

Building Your Brand Right

• by Brian Kelley

• Databases – Infrastructure – Security

I was interviewed yesterday by Stephen Wynkoop (twitter) for the upcoming SSWUG Virtual Conference on May 23rd. One of the questions was about how to keep management engaged on...

2019-06-07 (first published: 2019-05-21)

436 reads

Mitre’s ATT&CK Security Framework

• by Brian Kelley

• Databases – Infrastructure – Security

Mitre’s ATT&CK security framework was mentioned often at the Techno Security and Digital Forensics Conference. I admit that I’m not well-versed on it, yet. However, its purpose makes sense....

2019-06-07

19 reads

Sysinternals – A Swiss Army Knife for IT Pros

• by Brian Kelley

• Databases – Infrastructure – Security

I’m at the Techno Security and Digital Forensics conference in Myrtle Beach again this year. I sat in on a presentation about performing malware analysis. The analyst began with...

2019-06-06

427 reads

Security Controls: CISA vs. CISSP

• by Brian Kelley

• Databases – Infrastructure – Security

When looking at the Certified Information Systems Auditor (CISA) exam, we focus on teaching 3 types of controls: Preventative – keeps an incident from occurring Detective – Identifies the...

2019-06-04

129 reads

Mini-Rant: Spoofed Phone Numbers and Trust

• by Brian Kelley

• Databases – Infrastructure – Security

I’ve seen this more and more over the last year: I receive a phone call with a number that indicates it’s coming from a town or city near me....

2019-05-24

143 reads

Same Webcast, New Name: Introduction to Auditing Features in SQL Server

• by Brian Kelley

• Databases – Infrastructure – Security

I’m giving another webcast through MSSQLTips.com. This one is on May 9, 2019, at 3 PM EDT. It’s called Introduction to Auditing Features in SQL Server. We renamed it...

2019-05-07

17 reads