Claims
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached.
These are not independently verified facts.
subseacloud.com
ASSOCIATED_WITH
underwater data center
Jack directs listeners to subseacloud.com to learn more about Maxie’s underwater data center.
Explicit
Confidence 98%
· Maxie Reynolds
EP 166
Details
“You can learn more about her underwater data center at subseacloud.com.”
Maxie Reynolds
AUTHORED
The Art of Attack: Attacker Mindset for Security Professionals
Jack says Maxie wrote a book called The Art of Attack: Attacker Mindset for Security Professionals.
Explicit
Confidence 99%
· Jack Rhysider
EP 166
Details
“she wrote a book called The Art of Attack: Attacker Mindset for Security Professionals”
Darknet Diaries
DEVELOPED_BY
Jack Rhysider
Jack says the show is made by him.
Explicit
Confidence 99%
· Maxie Reynolds
EP 166
Details
“This show is made by me, the packet tickler, Jack Rhysider”
underwater data center
DEVELOPED_BY
Maxie Reynolds
Maxie says she and her former boss designed and built modular underwater data centers.
Explicit
Confidence 95%
· Maxie Reynolds
EP 166
Details
“This is something we’ve made. This is something we’ve done, performed”
“I want to put data centers underwater. I want to do it in a modular fashion”
city water supply shutdown
INVOLVES
network penetration testing
The city water supply shutdown occurred during a network penetration test.
Explicit
Confidence 99%
· Maxie Reynolds
EP 166
Details
“I found my way to some internal environment, and I hit the killswitch on a city’s water supply.”
The Art of Attack: Attacker Mindset for Security Professionals
MENTIONS
attacker mindset
Maxie says the book argues that security professionals must adopt an attacker mindset.
Explicit
Confidence 99%
· Maxie Reynolds
EP 166
Details
“its central argument is that in order to design defenses that truly work, security professionals must adopt this quote, unquote, “attacker mindset””
Maxie Reynolds
USES
OSINT
Maxie used open-source intelligence to learn about targets and identify possible entry points.
Explicit
Confidence 96%
· Jack Rhysider
EP 166
Details
“penetration testers often use OSINT, which is just gathering data on a target through open, public searches online”
Maxie Reynolds
USES
Red teaming
Maxie says red-teaming and penetration testing were the work that excited her most, and she was hired on a sanctioned red-team contract.
Explicit
Confidence 99%
· Maxie Reynolds
EP 166
Details
“I was hired on a sanctioned red team contract to test this high-security logistics company”
Maxie Reynolds
USES
network penetration testing
Maxie participated in network penetration testing against a local-government network.
Explicit
Confidence 90%
· Jack Rhysider
EP 166
Details
“the two other people were very experienced network penetration testers”
Maxie Reynolds
USES
physical penetration testing
Maxie performed physical penetration tests, including attempting to enter buildings and facilities without using computer access.
Explicit
Confidence 99%
· Maxie Reynolds
EP 166
Details
“So, we’re just doing a physical pen test. Would you like to be involved? I jumped at the chance.”
Maxie Reynolds
USES
social engineering
Maxie describes her first entry into full social engineering and penetration testing in Australia.
Explicit
Confidence 98%
· Maxie Reynolds
EP 166
Details
“My first entry point into full social engineer, really, and pen testing, was in Australia”
Maxie Reynolds
USES
Nmap
Maxie ran Nmap during the network penetration test.
Explicit
Confidence 99%
· Maxie Reynolds
EP 166
Details
“and I got to run Nmap”
Maxie Reynolds
USES
ROV
Maxie uses an ROV to retrieve underwater data-center units for maintenance, drawing on her underwater-robotics background.
Explicit
Confidence 99%
· Maxie Reynolds
EP 166
Details
“The vessel goes, picks the unit up with an ROV, because that’s my background and that’s how I knew how to do it.”
underwater data center
USES
ROV
The underwater data-center operation uses an ROV to lift units from the seabed for maintenance.
Explicit
Confidence 99%
· Maxie Reynolds
EP 166
Details
“The vessel goes, picks the unit up with an ROV”
underwater data center
USES
dielectric fluid
The underwater data-center servers are filled or surrounded by dielectric fluid to reduce dust and maintenance needs.
Explicit
Confidence 99%
· Maxie Reynolds
EP 166
Details
“the servers are filled or surrounded by this dielectric fluid”
Maxie Reynolds
USES
NESA scan
Maxie ran a NESA scan during a network penetration test to identify vulnerabilities.
Explicit
Confidence 99%
· Maxie Reynolds
EP 166
Details
“I got to run the NESA scan”
underwater data center
USES
Wet-Mate cables
The underwater data centers use Wet-Mate cables for power and fiber connections.
Explicit
Confidence 99%
· Maxie Reynolds
EP 166
Details
“we’ll splice the power cable, put it in wet. So, we’ve got — offshore there are Wet-Mate, Wet-Mate cables.”
Maxie Reynolds
USES
IP spoofing
Jack says Maxie briefly spoofed her IP address to appear to be connecting from Russia during a test.
Explicit
Confidence 99%
· Jack Rhysider
EP 166
Details
“she spoofed her IP at one point to make herself look like she’s coming from Russia”
Maxie Reynolds
USES
attacker mindset
Maxie says she was fascinated by and spent substantial time thinking about the attacker mindset in her penetration-testing work.
Explicit
Confidence 96%
· Jack Rhysider
EP 166
Details
“That attacker mindset was something she spent a lot of time thinking about.”
ThreatLocker
ASSOCIATED_WITH
zero-trust
Danny presents ThreatLocker’s deny-by-default and access-granting model as a way to implement zero-trust principles.
Explicit
Confidence 96%
· Danny Jenkins
EP 167
Details
“we can deploy application control. We can block software by default”
“We want to change the market so that ninety percent of the world are using a zero-trust approach”
ThreatLocker
DEVELOPED_BY
Danny Jenkins
Danny says he is ThreatLocker’s CEO and co-founder and that he coded its first version.
Explicit
Confidence 99%
· Danny Jenkins
EP 167
Details
“I’m Danny Jenkins. I’m CEO and co-founder of ThreatLocker”
“I coded the first of it. So, I coded the first version”
ThreatLocker hospital ransomware incident
INITIAL_ACCESS_VIA
VPN
The threat actor obtained domain-administrator credentials from the dark web and used them to remotely access the environment through the VPN.
Explicit
Confidence 99%
· Hunter Clark
EP 167
Details
“was able to just remote in through the VPN”
ThreatLocker hospital ransomware incident
INVOLVES
ThreatLocker
Ark’s team installed ThreatLocker on the hospital’s servers and computers, and ThreatLocker later blocked tools the threat actor attempted to use.
Explicit
Confidence 98%
· Jack Rhysider
EP 167
Details
“we brought in ThreatLocker, installed it on all the servers and computers”
“ThreatLocker had blocked the solutions that the threat actor had planned on leveraging”
ThreatLocker manufacturing ransomware incident
INVOLVES
Windows
The manufacturing-company incident encrypted all 250 Windows servers.
Explicit
Confidence 98%
· Guest
EP 167
Details
“Yes, they were all Windows servers”
ThreatLocker hospital ransomware incident
INVOLVES
EDR
The hospital incident involved an EDR/MDR solution that detected activity in the environment.
Explicit
Confidence 98%
· Hunter Clark
EP 167
Details
“we got a call from the EDR/MDR solution that we were using that there was someone in the environment”