Infiltration Alert! How to Catch Fake IT Employees in Your Network with Zak Stufflebeam

Infiltration Alert! How to Catch Fake IT Employees in Your Network with Zak Stufflebeam

Author: SANS Institute January 5, 2026 Duration: 1:36:37
This episode is a big one! We kick off 2026 with a critical lessons learned on how to detect and prevent the threat of fake IT workers infiltrating your organization through the story of a REAL compromise. In this episode, repeat guest Zak Stufflebeam shares a detailed case study involving a major investigation of multiple counterfeit IT employees within a company. The episode provides valuable insights and actionable detection tactics, covering everything from unusual VPN activity and AI-gen...

For security professionals tasked with defending networks, the daily challenge isn't just about responding to alerts-it's about building a resilient, intelligent defense from the ground up. Blueprint: Build the Best in Cyber Defense, from the SANS Institute, serves as an ongoing conversation for that exact purpose. This isn't a news recap; it's a deep, practical resource. Each episode connects you directly with the architects of modern security operations-those blue team leaders and seasoned experts who are actively protecting critical infrastructure and global enterprises. You'll hear candid discussions dissecting real-world defensive strategies, unpacking the nuances of emerging protocols, and evaluating new tools before they hit the mainstream. The focus is relentlessly on applied knowledge: how concepts translate into action at the console. Whether it's an interview breaking down a complex incident response or a technical deep dive explaining the mechanics of a novel attack vector, this podcast provides the substantive content needed to refine your craft. Think of it as a continuous learning feed, offering the detailed explanations and practitioner insights that help you construct a more effective security posture, one informed decision at a time. Tune in to Blueprint for the kind of forward-looking, foundational knowledge that defines a career in cyber defense.
Author: Language: en-us Episodes: 64

Blueprint: Build the Best in Cyber Defense
Podcast Episodes
The 2 AM Call: A Ransomware Negotiator's Playbook with Wade Gettle [not-audio_url] [/not-audio_url]

Duration: 48:55
What happens after you discover ransomware? You have to talk to the attackers. And that conversation can make or break your entire response. In this episode, Wade Gettle, a professional ransomware negotiator, pulls back…
From the SANS Cyber Leaders Podcast: Fighting Back with John Hubbard [not-audio_url] [/not-audio_url]

Duration: 52:21
This podcast episode is from the SANS Cyber Leaders Podcast. The episode features Blueprint host John Hubbard, where he talks with hosts James Lyne and Ciaran Martin on the ever-changing threat landscape and how SOC team…
SOC Dashboards Done Right with Ryan Thompson [not-audio_url] [/not-audio_url]

Duration: 1:03:02
In this episode, we sit down with Ryan Thompson, a seasoned expert in building dashboards that actually detect real threats—not just look pretty. With experience at Elastic, Alert Logic, and top EDR vendors, Ryan shares…
How GenAI is Changing Your SOC for the Better with Seth Misenar [not-audio_url] [/not-audio_url]

Duration: 1:35:04
In this mega-discussion with Seth Misenar on GenAI and LLM usage for security operations we cover some very interesting questions such as: - The importance of natural language processing in Sec Ops - How AI is helping us…