Christopher Crowley@CCrowMontance

InfoSec Ops Generalist: NSM, IR, Mobile, PenTest, Forensics. SOC-Class Author. (soc-class.com). SANS Senior Instructor. Retweets unverified. #infoseclatteart

 planet earth
montance.com
Joined June 2012
654 Photos and videos
The 2025 SOC Survey is now live. Please retweet and share. If you work in a SOC or something that vaguely resembles a SOC, please take it. Finally, please take the whole thing to demonstrate the value of longer surveys. You can pause and return. survey.sans.org/jfe/form/SV_…
1
2
693
'The Value of Cybersecurity Operations' (shop.montance.com) Tactical guidance and metrics needed to bridge the gap between management and cyber ops.

Montance®

Montance® Official Shop. Premium cybersecurity books and digital resources for professionals. Print, eBook, and audiobook formats available.

shop.montance.com
1
1
350
I've known Jay for over a decade, and respect his thoughts and training immensely.
Jay Beale
@jaybeale
Jun 13
Time to level up your K8s security. I won't oversell the class - I'll just let 4 people I respect tell you what they got out of it. Hack some #Kubernetes with me this August at @BlackHatEvents in Las Vegas! Agentic AI-Aided Kubernetes Attack and Defense tinyurl.com/bhus26-kube-agen…
Quotes about Jay Beale's Kubernetes class from previous students. "I took this at BlackHat last year from @jaybeale and it was fantastic. Can't recommend it enough." - by Jake Williams "I've said this before and I'll say it again,[@jaybeale](https://x.com/jaybeale)'s kubernetes training is probably the best way to learn kubernetes security right now. I took it about a year ago and learned a ton even though I've been leading Kubernetes offensive security efforts for ~2 years." - Graham Helton "FWIW Really enjoying opening day of the class diving into containers from first principles before going into attack and defense. Honestly BEST deep introduction to container fundamentals I’ve encountered, and I’ve heard many (and teach it myself at work.)" - Kerry Bonin "This was an awesome class! I hit the "brain full" state early on the third day. Being able to talk with the instructor and other students helped greatly. ..." - PacketGeek

ALT Quotes about Jay Beale's Kubernetes class from previous students. "I took this at BlackHat last year from @jaybeale and it was fantastic. Can't recommend it enough." - by Jake Williams "I've said this before and I'll say it again,[@jaybeale](https://x.com/jaybeale)'s kubernetes training is probably the best way to learn kubernetes security right now. I took it about a year ago and learned a ton even though I've been leading Kubernetes offensive security efforts for ~2 years." - Graham Helton "FWIW Really enjoying opening day of the class diving into containers from first principles before going into attack and defense. Honestly BEST deep introduction to container fundamentals I’ve encountered, and I’ve heard many (and teach it myself at work.)" - Kerry Bonin "This was an awesome class! I hit the "brain full" state early on the third day. Being able to talk with the instructor and other students helped greatly. ..." - PacketGeek
3
255
Reflection? $8B valuation? Last blog post: 7 months ago. 42 open positions. Next blog post: New pentagon contract.. probably hiring.
2
168
Christopher Crowley retweeted
SANS Institute
@SANSInstitute
Jan 7
40% of SOCs use AI without defining where it belongs operationally. 42% run it out of the box with no customization. That’s why so many teams feel stuck. In this @TheHackersNews piece, SANS senior instructor Christopher Crowley (@CCrowMontance) explains where AI helps, where it doesn’t, and why discipline matters more than tooling: thehackernews.com/2025/12/ho…

How to Integrate AI into Modern SOC Workflows

The 2025 SANS SOC Survey shows AI use is rising, but many SOCs lack integration, customization, and clear validation processes.

thehackernews.com
3
5
1,094
Christopher Crowley retweeted
SANS Institute
@SANSInstitute
Feb 12
People are the best investment in security. Tools break. Systems fail. Skilled teams carry you through. Join @CCrowMontance at #SANSSurge, Feb 23–28 in La Jolla, CA. Build the stamina to lead when the ground shifts. Register: go.sans.org/ykwPJ9 #SANSLiveTraining
4
9
1,376
Exploitation required ... custom Deflate compressor, tailored Huffman codes ... output restricted to valid modified UTF-8 bytes (0x01-0x7F) while remaining incompressible by zlib, enabling the payload to survive a double-compression pipeline intact. slcyber.io/research-center/a…

We recently found ourselves looking into OpenText Directory Services (OTDS). We had seen it present...

Almost Impossible: Java Deserialization Through Broken Crypto in OpenText Directory Services

slcyber.io
1
255
Hacker Feud with @edskoudis
2
6
812
r u @ #WWHF #MileHigh?
265
Hello, World! @SANSInstitute #SEC595 #CDI #AI #ML #TensorFlow #Cybersecurity
3
279
Congratulations @CorelliumHQ and @Cellebrite @CellebriteLabs
134
Are you an AI/ML user, shaper, or builder? For the builders looking for #CyberSecurity applicability, or those in cyber looking to go deep into ML models, join me for @SANSInstitute #SEC595 sans.org/order-redirect/cart…
1
3
185
Good morning #LightningStrikes
175
Lovely rooftop morning coffee setup ar @SANSInstitute #SanDiego for #SEC595
5
359
AI is going to deprecate those who don't adapt. In response to this morning 's message from Bloomberg:
1
1
269
sans.org/cyber-security-cour… SANS #SEC595 is what I am teaching a lot currently. See you in Paris, Singapore, San Diego, or Dallas.
1
250
dodcio.defense.gov/CMMC/ #USDOD relevant contracts
180
Repost from the survey. Get the full report, review the recorded event, and download the raw response set for analysis here: soc-survey.com SANS 2025 SOC Survey Exposes Critical Gaps and What Top Teams Are Doing Right albawaba.com/business/pr/san…

SANS 2025 SOC Survey Exposes Critical Gaps and What Top Teams Are Doing Right | Al Bawaba

The 2025 Global SOC Survey from SANS Institute reveals a stark disconnect between alert response and data strategy in Security Operations Centers (SOCs)

albawaba.com
148
Dear @Google - just last year, Gmail seamlessly updated my Google calendar with items from email. Now, ten prompts later with Gemini, I still don't have correct calendar entries. Much worse. That's the only way to describe it. Fix it, or revert it to the working assistant.
289
The position that AI will actually eliminate: Managers who only "manage." Business intelligence systems will inform actual decision makers. AI systems will support people who know what they're doing. Organizations will no longer need a management 'translation' layer.
197
I have been conveying similar sentiments around entry level and junior SOC staff. It's who management is thinking about cutting, and it's the worst possible decision.
237
Load more