Thank you. That was the nicest intro I've ever had I think, so thank you very much. Who here is from Montreal? Yeah, you guys have an awesome city. This is day two for me in Montreal and Man, I think I got to move here. Just amazing. So this talk is really weird Last year I competed in the SECTF came in third. That was kind of my goal top three this year They've accepted me back again. My goal is number one So I'm gonna be shooting for that and since that time period over the last year I've had exposure to Different people that are in the business both good people and bad people That have kind of coached me and given me insights and and companies have asked me to present and talk to them As well. So this talk has evolved over the last year. And so what you're gonna get is the product of that And has anybody seen this talk before? Awesome, that's great. Perfect because just in case I've added some some more additional content and I've tried to I've tried to incorporate some of the information that really bad people have given me So hopefully that'll make a little more interesting for you. So a Little bit about myself just so you know like why I should be up here talking about it So I worked in IT forever. I've got a bunch of certs and stuff I work in the aerospace industry. So a big because of the industry a big part of my time is security Pretty much all of my time. I volunteer for a local search and rescue team And I folk my focus in that team is as a tracker So why is that relevant here because it's for Ocent open-source intelligence. It's very similar to tracking. I found and And I've also created a nonprofit called trace labs So if you want to check that out, please do so if you have any interest in Ocent and you want to do good for your community Let me know looking for people that can help out there Trying to bridge that gap between the traditional search and rescue that are out in the bushes typically That's what I do I'm looking for footprints and sign and then bringing that to the moderate age where I'm actually looking at your Your online presence and then locating you that way. So it's really interesting for me This whole thing has evolved and taken off over the last year for me Which is pretty exciting as we go through the presentation if there's stuff you like or stuff You don't like let me know Twitter's probably the best way just say hey Rob this slide as a typo or yeah I really like this slide. You should put more content in that area in your presentation. So that would be really appreciated. Thank you All right, so what are we going to cover today? This is basically the high level what we're going to go through today Some definitions some introductions then I'm going to show you some of the techniques that I used at Defcon And then I'm going to talk about what bad guys do as well And then everybody wants tools.  I find there's a new tool every day So I'll show you some tools, but Yeah, I think it's really just learning how to do OSINT and then there's there's tons of tools out there All right, I have to show you this One of my employers has asked me to do this So I say a lot of things and a lot of those things I disagree with even the next day So nothing I say here today is is related to any employer. I've ever had or ever will have so Just have to get that out of the way All right, so let's get into it this social engineering stuff. What is this this thing right? So it's basically a manipulation. How does that differ than from say influence influence would be where? It's in your best interest. I might be working with you and saying hey, you know What if you took this course? Maybe you could get a better, you know a career advancement or something like that I'm kind of looking out for your best interest whereas manipulation. It's usually I'm gonna Coerce you to do something or say something that that's gonna get you in trouble. So that that's what it's all about There's a fine line there. I Find that when I talk to people after they learn that I'm into social engineering Immediately they don't want to talk to me because they think I'm gonna manipulate them But that's not always true. It's sometimes I'm influencing so So so when we go to the party tonight, don't I'll take off. I'm not trying to trick you. Okay? All right Okay, so so what are some examples of social engineering? We have what I call the golden oldies They're still around today impersonation.  We still have people that just kind of walk in behind someone else The trick now is you if you're a lady you can put something in your in your belly some padding pretend You're pregnant, right or you can carry the big stack of pizzas or donuts, right? Nobody wants to stop you if you're carrying donuts So that's still a problem shoulder surfing less of a problem now But you know, you still see it on the bus at the airport. It's great I always look because I want to kind of see how much I can see screen protectors are great But not all of us use those Dumpster diving is a little better now. We shred most of our stuff. So that's that's a little better So I stay out of the four that's probably the one that's improved the most, but they're still relevant, right? Some more current attacks. So these are the ones we see more today The email attack the fishing right one of my personal favorites Vishing, right? That's where they're phoning you and then the smishing that's the SMS attack the all direct I'll try to misguide you and give you put you into a Cread harvesting area, right? So and and what's really effective now is attackers will use these in in combination Especially if they're gonna be targeting a whale or your executive, right? So very effective if you can do them within a short period of time altogether and then we get into more current stuff, right? what's happening next and So this list keeps growing and it's really a busy slide Every day there's something new so social media impersonation fake accounts So you're in the lineup to rent your car. It's taken forever.  It's like, you know This is terrible and you get a tweet back and it says hey, I'm sorry about your experience Click this link and we'll give you a free credit, right? And it's not actually them It's just somebody who's created an account that looks like them. So that works really well Social engineering as a service, right? We all want scalability. So, you know, the bad guys do too So this everybody's everybody's doing this now. You can get now of service attacks Whatever you want as a service now. It's super easy. It takes you five minutes virtual kidnapping another one which has multiple Benefits, right?  So the staff run rose. We saw that a little bit in the news Executives hold the keys to the castle, right? So they're really gonna be my target a lot of times They have control over the money. They have control over they have authority so they can get other people to do stuff So if you're not training your executive, that's probably something you want to look at Pseudo ransomware hybrid attack. So this is a one we see more and more from sophisticated threat actors Especially in nation states and stuff. So they know you have limited resources Especially in your infosec groups and they know that you're probably understaffed even right So if they can distract you get you working on this stuff over here They know they can then come over here and do stuff and you may not notice or you're definitely gonna have less left Staff to deal with it. Anyway Professional network solicitation Again, this is growing becoming more popular if you get a Solicitation from a very attractive young lady saying that she thinks you're amazing and you have great knowledge And you should come to this conference. It might be fake just saying Is it they could go the other way too so sorry That's the example that I've seen so SME conference invite espionage baiting So we see this a little bit come to our conference my fake head of hunters those thousands talent program That's very popular. You can Google that guy Sock puppets. So we're seeing that more and more right so anytime you want to influence a lot of fake news out there So this we see more and more as and this is really where we see it going a lot of you know This and it's not new a lot of companies and governments do this more now and now Large employment in this area as well. I think in Canada. We don't really see much of it But there is a huge effort in this area All right, so the origin story of social engineering It's been around forever. It's not a new thing the people who built the pyramids I'm pretty sure they were really good at social engineering if you want to get a crash course in social engineering you can just walk on to a used car lot and And engage with the people there. It's wonderful. I love doing that Get a big coffee and just go on there and let them go to work and it's a wonderful experience All right, so the trend. Why do we care? Right? We know where it came from. It's been around for a while But why do we care about this sort of stuff? So it's it's growing. It's it's growing. So and if it was a stock I always like to like to relate stuff to stock, right? So if it was a stock, it would be a super hot stock from the growth rate of that, right? This is from the 2017 Verizon report and And So yeah, you can compare it to the some other things, right? The what they call hacking I forget the definition that they put into that But that's the stock recommended by your friend that is never a good idea So that's why we care just because and it's it's used as a precursor to almost all the attacks, right? Either OSINT or social engineering of some type Historically, we've never really cared about it very much for those of you that have you're done your CISSP You're very familiar with this model, right? Very focused on the technical levels, right? And I think it's time we started to look at the as the people as an additional level of this thing Why would I spend time trying to hack a firewall or do anything technical when I can call one of your employees? Ask for the password and then they will give it to me, right? Five minutes. So it's super easy low cost So it's the first thing we go to Alright, so this is the Kevin Mitnick quote. I've had great debates with people about this and I'm not saying It's people are very easy to trick generally, right? It's not because they're not smart or anything bad like that It's just that you know, you're super busy We had a couple presenters up here earlier that we're talking about that you get hundreds if not thousands of emails So that's part of the problem. So it's this is not necessarily negative But it does seem to be reality. Does anybody disagree that social engineering is really a really big concern That anybody could could be tricked Somebody has to disagree. Otherwise, I can't do the demo All right. Thank you. Thank you. Thank you, sir. Thank you, sir. That's exactly what I was looking for Yeah, thank you. All right.  Okay, everybody in this in this room right now We've all just signed up for this startup. We're really excited about it I'm the one info set guy right because that ratio is about right, right and Yeah, so So I got to write some policies about stuff that you shouldn't do right So I'm gonna say no to everything that you want to do The first thing we're gonna do something that's busy visible. I'm gonna do let's do hand flipping Okay, that's something I was gonna do dancing But I don't think we want to go there yet because we haven't enough beers. So let's say hand flipping I'm gonna write a policy because everybody reads my policies, right? No hand flipping allowed.  Let's start with our palms up. All right. That's the demo. So I'm sorry. I'm sorry Typically I get half the room I noticed some of you didn't put your hands up, but I get half the room So it's a stupid trick right ridiculous, but it kind of gives you an idea of that's the misdirection Just a quick example if I if we try hard enough we can get most people with with these sort of tricks, right? If you're if you want to do a fishing program at work and you need more ammunition to justify the cost Just Google it. There's tons of stuff out there You know executives giving away $50 million with a bank transfer super embarrassing day, right? Yeah, so All right, so Defcon se ctf. What was that all about really interesting if anybody wants to do that Let me know I'd be happy to to go through it with you I'm gonna be there again this year in general. I think the ctfs no matter what it's se or whatever it is Super valuable. I would recommend that to anybody over a course You're gonna learn a ton. So I can't say too many good things about that. So the the sec tf It's basically two stages The first stage is your ocent So you're given a target and I'll be receiving mine for this year shortly and there's 16 competitors And we all look at a certain industry Last year it was the gaming industry so I got a company from from the gaming industry and You've got about three weeks to do your ocent your open source intelligence and At the time I was terrible at it. I didn't know what I was doing So it took me about a hundred hours. So that's evenings and weekends and Any moment I could spare I was doing ocent and you have 29 flags that you try to collect There are fairly benign things like what kind of VPN do you use how long of your work for the company? What kind of browser do you have stuff like that not not too bad, right?  What's your VPN janitorial janitorials great if you want to do physical pen testing later What's your OS? How long you work there? So pretty normal stuff, right? Like if you if this got in the wild you wouldn't worry about it too much But these are the ones that you probably would worry about so You know and I see this all the time with companies You know I look at you know for for job postings. I love look at job postings all the technologies are listed there Even they may even talk about if it's a infosec job their response capabilities what kind of assets they have it's fantastic, right? I want to Take all your assets and resources in an area over here distract you and then attack over here That's great to know that information What's your patch level? So that actually is pretty good. So if I'm going to give you an exploit I kind of want to know what your patch level is and what kind of protection you're going to have there Delivery methods. So I'm again. Am I going to fish you what's that going to look like? Am I going to drop some USB keys in your elevator, right? That's that's nice to be announced. So some companies they'll lock the USB. So that's not a viable attack method Exploitation what kind of antivirus do you have right? Is it behavior-based or signature-based? That's really nice to know on your perimeter. What does that look like? All these things are usually advertised and not hard to find Alerting what's your sim does anybody look at your logs, right? So that's a really nice thing to know What are your hours of operation? So this is great for? Doing your recon stage because I'll dial into your PBX and I'll Hopefully nobody will answer your phone and then I'll get a bunch of information from your phone From your recordings and stuff like that Machine naming. So that's quite often advertised and very easy to get as well and that'll help me locate key resources hours of operate I did that Location of your assets. Oh your your your DR as well, right? So quite often the DRP plan is public or readily available So that's really nice to know how you will respond to these things.  So all those things are very nice to find and it's usually Out there easy to easy to see All right, so on the OSINT side. Let's talk about that for a minute The first thing I want to do is you know I'm gonna acquire my target and start going through that methodically step-by-step. I'll look at the physical first So where are you located? You know the country is important. You're building locations Google Street view is awesome. It's a slice in time, but quite often I can learn so much from that, right? Egress points, you know, what does your roof look like? Do you have a lot of HVAC on the roof? Do you have entry points loading docks? What's all that look like points of entry who does your parking, right? So I can call your employees and see I'm from that particular parking company that works really well Then I'm moving into the technical and quite often. This is really nice And there's a lot of great information there who's registered your website. I'll get contact information there almost always IP addresses, so I want your block of IP what that looks like and then corporate You know who's a lot of registration information will have a lot of People that are less technical that I can reach out to that your lawyers your HR finance people Property management is really good and often overlooked so I can call your property management company and pretend I'm you or a representative from your company and they will typically give me a ton of stuff and Then we get into your staff and this is where it just explodes as far as information and you just go to LinkedIn that's your first kind of go-to stop and It's wonderful because it's all it's all packaged up really nicely, right and You can get 90% of your stuff on the on the staff right there It will try to make you pay as you go through and start using it and that's their their model But you can use certain tools to get around that recruitment X linked LinkedIn x-ray was one of the tools I used but there's a whole bunch of tools out there that will help you Do that now some of them are automated so you can just scrape it and pull it all down I tend not to automate too much Just because I find it's more effective for me to just do a little bit more manually So then once you're going through the people you've got a collection of people you'll find that about you know It's the 80-20 rule There's gonna be some social butterflies out there that post a ton of stuff and those are the really the targets you want to go for You don't want to see you can spend huge amounts of time chasing down everybody But you really want to refine your search and get those people that are just gonna give you You know a lot of information and even sometimes they're friends even if they're not working for the company They will be taking pictures and talking about they they're their friend who works for the company so focus on that And then for detection so when I did this I was so bad I went on LinkedIn and I was looking at all these people and you know when you look at someone's LinkedIn They then will sometimes look at yours because they wonder like who is this person? Why is the person looking at my stuff? So they look at your stuff When you do that to about a thousand people that all work for the same company And then you realize they're all turning around looking at you.   I've tried that. I'm actually not a big fan of that I think you might want to just try it out. It's specifically it's a it's a Linux distro that's specifically designed for Ocint I'm a big Michael Bazelle fan great podcast great books great website great tools on his website I highly recommend that. It's a great starting point. I Kind of lean more towards like a Cali Linux platform Running on virtual box or VM where so you can then archive that for evidence Set up a VPN as well. Do all those things. I mean you probably already doing this as well But when I did it, I didn't do any of that. It was a bit embarrassing All right, so some preparations I'm developing a course for first responders and part of it is for search and rescue and part of it It's going to be for them Retaining evidence and if you're working for a company, you probably want to retain evidence as well Hunchley is a great product There's other products out there as well though, but you want to think when you start doing this How are you collecting data if it's even for a CTF you're gonna have the same problem, right? You're going after certain flags You don't want to spend time learning all about the company all aspects of it You really want to refine your search because you can go down a bunch of different rabbit holes And that's that's kind of what I did. What's important What if you're running a report for your executive, you know, what are they going to care about so summarizing all that data? And then how are you staying undetected like I did not? All right, so as I was developing Preparation for DEF CON part of that was my pretext development and pretext is basically your lie So you have a mark and you're going to tell them a lie and you have to develop that so that it's believable and Your receptionist I find are some of the best people to talk to about this Because they're they're generally very good at quickly analyzing somebody and figuring out if they're legit or not and so I spent a lot of time with our receptionist and And they were they're awesome. You should invest in your receptionist as well, right? So not only are they kind of the the physical firewall to your building quite often but they're getting all those calls from people like me as well and So typically they don't get a lot of user awareness training, but I think we definitely have an opportunity there to invest So they've been super helpful Then once I've got a list of people for your company. I'm going to take a look at okay So who are going to be my actual marks? So whether it be at DEF CON or a real attacker I need to have a shorter list of people and typically that's going to be on LinkedIn I'm going to look at their Connection scores and I'm going to look at the ones that have say less than a hundred because they're not well connected not only with your Organization, but in general in the industry So those are going to usually be people that are fairly new to the industry Which is good because they're not going to know a lot of people. They're not going to know what's inappropriate necessarily And I'm also going to look for people that take a lot of selfies that share a lot of information Hopefully that information is inappropriate. So if they have a picture of their VPN configuration Perfect, that's who I'm looking for So that's that's actually a true story. I found that that person and they gave me tons of stuff So basically I'm looking for a high charisma low wisdom scores and Strangely enough that turns in that translates into interns and contractors And I think that mostly that's because they're fairly new to the organization typically and new to the industry Just out of school sometimes and they're not as invested so from a contractual if they're contractors They're coming you typically for a six-month job and then they're going to another company and another company So they're doing some self-promotion. They're not as invested. So that's typically how it works for me So I'll automatically now look at the interns and the contractors right away. So All right, some of the techniques and this is mostly psychology I want to develop rapport with you I want to get you talking to me and I want you to feel comfortable. So I will do some things like the confirmation So how do you like your new Dell laptops and in your mind? You're thinking well, we do use Dell laptops and you may not even consciously think about this But you know your response if you're having problems, you're gonna be ah, yeah, they're terrible the USB Ports don't work or something like that But it's it's kind of like we've skipped the whole stage in the conversation Which is exactly what I want right all of a sudden now we're talking we're going back and forth Or I might you know if I if I can stand it for my ego I might do the reverse confirmation where I'll let you correct me and people typically like to correct others So I'll say oh, how do you like your Toshiba's? You're like no, we don't use Toshiba's we use Dell's. Oh, sorry. Sorry. Yeah, I got that mixed up So that's often quite nice to do as well Name-dropping so this is pretty typical. Oh, yeah, your VP mr. Or mrs. So-and-so said I should talk to you That works quite well. I've used that Blowing smoke you were recommended to us right so to make you feel good real attackers don't do this very much Unless it's a very targeted attack, but at DEF CON this works great anytime you make somebody feel good That's usually gonna be quite effective sales people use this right so typically I talk about a Attackers sales people and then DEF CON CTF people so those are kind of the three main groups Impending doom I've used this one this works actually quite well So something big is about to happen and there's no choice there It's going to happen that event is it going to occur, but I'm here to help you get through it So hey Larry's gonna be on site tomorrow We won the RFP for your HVAC and I'm just calling to get that set up And is there anything that he needs to know before he gets on site Can he just is there a card he needs or doing some ID or can use your Wi-Fi when he's there? How about the bathroom? Do you have a cafeteria where he could eat lunch there? So I'm just gonna start going through that and that's very effective allowed to vent Real attackers don't use this too much You know if you can relate to them and they can start to unload on you You know you can be their therapist a little bit that can be effective Smarty pants Very effective, you know if you can say, you know, how did you ever figure this out? You know, this is my first day my boss is yelling at me, you know, can you help me? That's sympathy Greed so greed is something that real attackers use a lot and you've seen this in the fishing attempts that you've gotten You know, it's often time sensitive It's zero some so the first three people to reply win a trip to wherever right or a cruise the cruise It's a popular one right on your phone So that's that's very popular We did a fishing program where I work and the time sensitive one was the most effective and So I like that sympathy We're designed to care about people which is a good thing, right? But it's for attackers. They utilize that as well. So You know, I'm brand new to the organization. My boss is yelling at me I think I'm gonna get fired if I don't get this done Can you please help me like who wouldn't right if you were pretty cold to ignore that? So then my pretext for fishing I basically got three different styles of pretext personally There's a ton of them out there The entry method one is the first one so a company that's kind of set up to defend against this will have their Their ingress points kind of designed to filter some of that.  So if I once I've done my OSINT I know you have interns you have certain people that work there from different schools I can call from the school spoof the school number and say hey, I'm calling to talk to so-and-so I just want to talk to them about their their intern experience and see if they can give us feedback on how We can improve that going forward to get past reception nine out of ten receptionists. They buy into that So that was pretty good industry knowledge if you have any industry knowledge, whatever that is right for me It's data centers and stuff like that That's what I'll focus on so I'll talk about things like HVAC because I sound you know like I'm knowledgeable in that area So that tends to work Targeted methods and Mitt Nick was great at this right if you listen to some of his or read some of his books He's he likes to layer things and this is very effective where you're calling one person and you're getting a bit information Then you're calling somebody else getting a little bit more and then finally calling somebody else and getting that final piece But you're building that house of knowledge right from those little bits information each one seems relevant relatively unimportant right but allows you get to the next step so The enemy of my enemy so calling the property management as if you're a potential tenant Or another one of the tenants as if you're a potential tenant just asking them about you know So what's what's it like there? What's the building like are you having any problems? What's building management like are they good? Are they responsive? Yeah, I've even had any problems with the sprinkler systems or the building alarm who do you use for security? Are they any good so people typically responsive to that special delivery any time you can Copy a scripted response, which is typically quite easy to do right So the FedEx one that I used in DEF CON was that they had a parcel that had some border taxes And I asked them would you like to you know pay for that on delivery or just pay for that right now? I can put it on your FedEx account right now if you'd like to do that and she gave me the FedEx account right away and They beeped that out because I didn't actually want that but just to confirm that they use FedEx But anytime you can copy a script because that's all people are listening to is the script which is very familiar to most of us Can I tell you a secret everybody likes secrets, right? I got a group of people that we're gonna lay off and they've asked me to call you and find out about your company and your benefits and Because and I can send you their resumes So I'd call a recruiter and do that and the recruiter is usually has a Fiscal benefit in helping me because they're gonna get a if they bring somebody on they get a bonus for that So they're very motivated to talk to me to see these high potential resumes So if you can locate somebody who's gonna get you know a bonus to talk to you That's that's even better. So because that's what they're thinking about And these are the full dump methods and typically you wouldn't think these would work very well But if you get people on a roll they actually do and in Defcon This is great because you only have 20 minutes to deliver a whole bunch of stuff So you can if you can do this and just blow through a bunch of questions. It works great You're a lucky winner. I didn't do that. This is used all the time very real attackers. We're all very used to it You're never the lucky winner the upgrade opportunity I like this one because you know some of us we have different equipment different vendors and Nobody tells you when the vendor changes quite often, right? You just get some out of the blue call It's like, yeah, hi, I'm your new new supplier your new account rep. It's like, oh, okay So I was gonna do that. I never did it, but I like that one. I might do it this year The employee engagement survey we all like to give feedback and I find the engagement survey is great I use this one. It worked really well Hey, so and so it's all a comp combining a few different techniques so and so your VP of HR told me to phone you and said that You know, you would be really helpful for this exercise I'd like to get your feedback on the employment engagement and how we can make a survey to help promote that I've just got a few questions for you. If you have two minutes, it's always two minutes, right? Actually, I want 20 but it's always two minutes and then I just go back through all the questions There's some discussion around if you get caught as a social engineer What you should do and they say that, you know, you never get out of character Even when they're putting the cuffs on you, you just staying character. I don't want to go to jail So I'm not gonna follow that advice. So what I was prepared to do was if they catch me and And say well, I'm not really believing what you're what you're selling here I would immediately because that I want people to feel good. I don't want to be victimizing people I would say hey, congratulations. That's awesome. You caught me So, you know because I was hired by your company to do this this test and see you know if you would fall for these tricks and Congratulations, can I get your name because I want to tell your VP of whatever that you did a great job Yeah, so thank you very much and just to baseline these questions Can I just go through these questions with you real quick just to make sure I got the right answers and I was just dying to do that So maybe this year So the spirit of DEF CON is to not victimize I mean you're targeting a real company, but you don't want to hang up on somebody and make them feel like trap, right? Or make them feel as though they just gave away the everything so That's what I'm trying to do there was that all right. So that's a lot of information just a real quick reflective moment Some questions for you you don't have to answer these out loud, but just something to think about Would you know if somebody in your company had been socially engineered especially your executive would they come to you and say you know what? I just I just wire transferred 50 million dollars So That would be bad Does your insurance cover that That would be something interesting to take a look at I haven't not seen in the news any any It's probably not advertised very much, but I'd love to see insurance companies respond to that, right? That would be interesting if any of you have information on that. I'd love to talk to you about it Dear internal resources have the capabilities to respond to this sort of an attack, right? That's another thing. We do a lot of technical training But how much SC training have you had right sands is a new OSINT course that just came out So if anybody's taken that I'd love to talk to you about that and then who's ultimately gonna get fired, right? Unfortunately that has been the response by a lot of big companies is you know, they let somebody go like okay We fixed the problem so-and-so is gone. They did a crappy job Well, you know, I'm not that it's not a good response to this, right? I don't think that's a good way to go about things But ultimately that's sometimes what happens and it's if we've covered ourselves as infosec professionals, right? And shown that look we did the user awareness training We did these different things the chance of us getting fired is less likely So I think preparing for this sort of attack as far as you know Ensuring you have a good career that's not prematurely ended. I think it's a good idea. It's unfortunate, but that's the risk some of us face All right, some recommendations OSINT yourself. This is a lot of fun. I have a Google Alert for my name. So now I've discovered there's a lot of other people with my name out there And all not all of them are wonderful people OSINT your company find the butterflies those are the people you want to go talk to and say hey You know you probably don't want to put the VPN information out there, you know nothing wrong with some self-promotion That's not gonna stop. They're gonna keep doing that But I want to look at that and what's at risk, right? Is it proprietary data? Is it money? Some phishing recommendations Do a phishing program so a lot of people tell me no I'm not gonna do that. I'm not gonna trick my users You don't have to Trick your users, right? It's more of an educational thing You can make it fun reward the people that do good work, right that that that figured out make them into champions Don't punish people because then they will be upset You can put ext on your incoming email So when your CEO gets an email from the CFO is not really from him or her It's gonna say ext and that's gonna be a tip that oh I see that's not sexually not from that person So you can stop allowing active links, although nobody's gonna do that And provide other channels emails terrible, right? So we all get so much email use different tools slack Twitter blogs Bish your executive be very careful with that. They don't have the sense of humor that we do so Be very careful there Invest in your receptionists You know, I find that these people are wonderful people very patient Their their job is actually usually quite challenging PBX I love your PBX's because I can dial into your PBX's and die by name and get all your information I can get your DIDs. I can get you know, your voicemail You know, you may want to remove die by name most of us still have that I find I give DIDs only to Externally facing people a lot of companies DIDs for everybody direct inward dial You don't all need that some of that can go through reception You can have an extension stop answering your phone I got in trouble for saying that a bunch of managers looked at me really Really bad when I said this the first time and it's like so of course if it's your boss answer your phone but typically someone's phoning you because they want something and So I love voicemail. My voicemail goes to my email. I listen to it and delete it Get on the offensive. So We always talk about how we can't scale and how the attackers only have to be lucky once so, you know by developing a culture of You know where we're looking at this and we're having fun with it and you know start giving out Starbucks cards, right? You did a great job. Here's a Starbucks card. Take a picture of them put it on your on your intranet and Start looking start, you know instead of just saying no all the time we can say yes, right? We can say yes, this person did a fantastic job and here's a Starbucks card develop that cultural change of proud protectionism and You know some companies do this better than others But when the people are proud to work for that organization, they're more likely to not let that person through the door with the pizzas That doesn't have the card to get through Make create champions as well, right?  We talk about things like patching people like no, I can't patch. It's gonna break stuff Yes, it will you still need to patch, right develop a system where you know it If it's important system have to patch this one and then patch this one do things like that Um 2fa, there's lots of stuff activity this year on oa if you don't have 2fa on your webmail. That's a that's a fantastic opportunity for people.  I Haven't seen one where there's not really so just it's just levels of bad, right? All right, so everybody likes tools these tools are not gonna, you know, make you an expert at all in this These are pretty just you know high-level tools. There's a new tool every day and But these are some of the ones you can start with it's really about technique and what your target is right? So if you only have an email address for your target your tool sets going to be different your techniques going to be different I Love looking at things like iot any sort of systems They're their fences electronic fences their ID cards their HVAC systems It's all usually plugged in the internet and usually they've forgotten how it how that's working Some technical tools Wiggle net is interesting. You can get their Wi-Fi ss ID usually from that Some of these are just better than others There's a bunch there you can collect pretty much everything they've got by these tools here as far as you know Who their technical people are their contact information? I had executive cell phones executive addresses home addresses They're pet names, you know where they went to the gym Everything it's all there Corporate indeed calm fantastic your job descriptions are amazing I know about all your technologies you're all your infrastructure from your job descriptions You probably don't need to do that Payspin is great to do a keyword search on the company do a keyword search on your company if you find stuff in Payspin That's probably probably not gonna be good Security guards those are those are really good opportunities and Yeah So on the staff we went through some of this already recruitment Or actually what's that tool recruitment geek that that URL that'll have the tool there that you can use Slide share is fantastic for some reason people like to put reference letters there So that's where you can get a lot of executive home addresses and weird stuff like that, which is fantastic In Canada, I'd never knew this a really bad person showed me this that you can get criminal records So a lot of people come to me now and they're like hey Rob I'm renting out my place to this person. Can you just check them out for me? So I'll tell them like if they have a criminal record what their assets are all that stuff is pretty easy to do and Then personal websites. We're all doing self-promotion and that's not gonna stop.  That's probably the first stop. He's got a great podcast He's more into the privacy side now great books A great resource on the West Coast where I am Tottington is kind of the go-to person for training. He trains all the agencies Social engineer, of course. He runs the SC village. He's got books podcasts. You name it. He's got it And then if you're into the kind of the psychology of the whole thing Robert Caldini is is a great resource too. So lots of stuff on YouTube You don't have to go out and spend money. Just just Google him and you'll find a great lot of great stuff Yeah, so there's a bunch of other stuff in there There's there's Twitter accounts where you can get tools and stuff like that So if you want more resources, just let me know and I'll send you what I got All right That's it. Thank you


what has happened we had three workshops here in the beginning of this year and in spring so in January beginning of March and end of March we had a strategy workshop this was the sixth workshop together with our scientific officer cost a scientific officer then there was a joint workshop a very big event with together with the other cost action T1406 and EAPSE and we had the categorization workshop this was already one point which was identified here in the January workshop I'm going through a few important points from my side now one is our strategy so we are we have been halfway through the action so we have been working for two years now two and a half years and this was the time to come together in a strategy workshop and to look what we are planning for the second half of the action and there's already quite some things which are happening now which have been agreed on here in this strategy workshop in January one is to impact industry or that's three three points we have for the remaining time of the action so that's to impact industry to impact science and to build further our unique network so we have been working two years and now it's time to work on the impact so very important to impact industry in the second half of the action is the stepwise development of case study portfolio the development of teaching activities the continuation of the super work by the innovation committee and the start of the standardization activities these are very important points here to get in touch with with industry and show the how we do a value of SHM information analysis and what value can that bring of course we this was rather the how to say the focus of the first part of the action the first two years we have been working very scientifically we have started up with the organization of special sessions we would like to continue we need to be a little more active with special general issues and with research projects acquisition in the areas of of value of SHM whatever it is associated to this is something we are quite relying on and the our network we would we will make the network more visible so that goes to the especially to the website and to other material we need to extend it or we would like to extend the network internationally so my glance goes in this direction to Matteo and Zhang Jun you're part of this strategy point here that we would like to our to extend our network internationally and we need to actively use the network and I think very successful was to call for case studies so I think we started with discussing how should we get started and I said let's go for 10 options and now we we have 16 or 12 12 12 case study options are presented and we would like to bring them further and to make them all happening and of course we are open to continuously include relevant partners and yeah to broaden our network and if we see that we really need some input for for case study then our network is open okay so the strategic focus in the second half of the action this was what I just talked about now what is our work and budget plan or especially the work plan for 2017 and until spring of 2018 one part is this workshop already that's our ninth workshop here in this meeting we had we have to plan our 10th workshop in autumn okay there's also a string committee meeting where we can work on some strategical aspects we have dissemination meetings iCOSA iWSHM scheduled for this year we of course also need to have an eye on the 2018 and we already have 2018 dissemination meetings or special sessions we have budget for about six SDSMs and we have budget for a training school but the most important thing is we will support any good ideas so if you have ideas for activities please let us know we will arrange we will be flexible to account for these ideas and to get them working with the tools we have and then there's a lot of working group six activities ongoing thanks to Maria Pina so here we have the brochure we have a new website and and also also social networks i think we will hear tomorrow a lot more about that and what we always have to keep in mind what is our deliverables so of course we are performing here in the first point dedicated dissemination activities we are continuously developing our homepage that's the second point we have a lot of tools and algorithms in our effect sheets and publications maybe a library format something to be worked on or what library could actually mean and then we have two important points four and five which goes in the direction of standardization one background document that's more for researchers and one guideline for the quantification of value and optimization of SDSM i think this takes largely basis here in the case studies point five so this is something to keep in mind this is where we need to this is how we need to get to the finish line with these five deliverables where are we time wise we are we are here so that's one and a half years to go in our action and we have here the first three working groups that's identical to the tasks so they have been active and they are still active because i have i have made this light gray so the main activity is over but of course we are supporting the working groups four and five which or especially four which is active now and five which is in the preparation phase okay thank you for your attention let us have a good workshop


Welcome to Access a Trader, the number one community for those who are committed to taking control of their trading in order to achieve success, profitability, and longevity. Thank you for joining us. Here's Dan Shapiro to help you find your edge, master your process, and own your future. Hey guys, good to give you everybody. Welcome to a Wednesday edition of theAxisTrader.com nightly wrap-up show. Quite a day. Quite a day. We'll get to that in a minute. Look, I think it's so important, folks. I can't overestimate and drive the point home that technical analysis, and I've been saying this for years, is your number one lifeline. There is no number two, three, four, and five. It's your number one lifeline. And yesterday on the video last night, we identified why there was a really high probability chance that the market was going to pull in. Did I think the Dow was going to go down 500 points? Probably not. I did think there was a sell bias in that area. I did believe Beta, considering they have really good expanded average ranges right now, we're definitely going to give us some value. So the opinion was there for a pull. It was an aggressive pull. It was going to be a passive pull. We don't know, but the most important part is what we talked about is technical analysis. And a lot of people throughout the day get emails and text messages saying, great call in the rug pull. The pivots were phenomenal today. We'll talk about the pivots in a second. But the one thing that I kept on reiterating, you're thanking the wrong person. It has nothing to do with me. You have to thank the market. You have to thank technical analysis. What we looked at yesterday, kind of a quick review, first close on the five day moving average and we were just waiting for the confirmation today.  So the idea that somebody that is in the market, that's full blown in the market, carries inventory, going into today's session, not being prepared for the possibility that their position, that they're holding, their holdings, that they're holding, could get a really aggressive move. And the idea that people don't look at charts religiously.   But eventually you will get some sort of sense of what the market is doing just by looking at charts every single day. And I look at everything. I look at what beta is doing. I see the stocks that don't participate in the rallies. Again, we talked about Boeing in nausea. We know the names. They were very, very strong and continue to be strong. So it's your job no matter what type of trader you are to put yourself in a position that you know what the dangers, the next day can be. And it all starts from the nightly homework, right? The idea that going through two, 300 charts is kind of a pain in your side is ridiculous. If you want to be a serious trader, whether it's a part-time trader, full-time trader, whatever the case may be, you have to allocate that time. Again, what do you have to do after the close right now? You can't leave your house, right? You can't leave your house. Yesterday, the governor of California said three more months. The mayor of LA said, I think this morning that until there's a vaccine, nobody's allowed to leave their house. And crazy stuff. So what is your excuse for not putting in the work? And I say this all the time. The one true level playing field that all of us have, whether you're trading for two weeks or 20 years, is technical analysis. And the idea that if you sat there with a book going in overnight and you completely disregard what's actually in front of you, again, it's very, very tough to turn around and say, I didn't see it coming. How can you possibly have known the market was going to pull? Well, again, if you put in the work and you're very, very serious about your job and about your craft and getting better, right, creating that bigger edge, it's your responsibility to understand what's happening by just allocating, you know, a half an hour, 20 minutes, 40 minutes, whatever the case may be, to looking at charts, seeing where the money flow is going, see the directional bias and wait for that confirmation. And today, again, I don't think it could have played out any better. Again, we were incredibly prepared for today's session. We knew that 222 area on the queues, that was the five day moving average, was very, very important. This was the area that, if it confirmed today, was going to pull back. And again, I didn't think it was going to pull back all the way to the 20 day moving average. We talked about yesterday, you know, there's a potential from the 222 to 219, right? We saw that. But again, sometimes, especially in this type of market, things get so exaggerated that the average true range, even for the queues, right, just gets really exaggerated. And the next thing you know, you're having an incredible waterfall, aka swan dive. And that's exactly what I saw today. So the idea, I was getting a bunch of messages last night and they said, Dan, a lot of people turn around, I don't use the five day. I've never even heard of the five day. Why do you use the five day? Well, again, five day is the most shortest term sentiment. It will give you a clear view of the shortest term sentiment. And once that sentiment gets confirmed in either direction, there's a very high probability that you are going to get a follow through in that direction. What I think, what I like the most about today's session. Okay. And again, we'll talk about the pivots in a second. But what I really like, I'm very proud of this area wasn't the pivots. It was the idea that we had a game plan. Again, the market gapped up this morning at six o'clock in the morning. I woke up. I just looked at the futures and I turned around and I started giggling that, you know, the futures are up. And I go, okay, it is what it is. I kind of wanted a gap up and say, you know, I was talking about that last night's video and I said, hey, if market God's listening, if you can get a gap, it's much easier.  So I said, look, the initial plan is to give the bears every opportunity to confirm yesterday's price action with this gap up. Okay. I'm not anticipating anything waiting patiently for confirmation. Again, I'll put a couple of pivots to the upside just in case, only for cashflow. And I said this only for cashflow. Let's see what happens. And the most proudest part, and this is kind of what we talk about individual personal growth. The idea that we waited, okay, for our plan, our opinion, our conviction to plan out, okay, to kind of play out. I think that was the most impressive part of what we did in the live webinars, especially also on the Twitter feed for all you guys who trade there as well. And we didn't give in, right? We didn't give into that early moves. We didn't chase, we're not chase, I don't use the word chase, but we didn't participate in the video move. We didn't participate, for example, in a lot of moves, for example, that were very, very strong. I wanted to see my conviction level play out. I wanted to see the confirmation because the last thing you wanted to do, again, this was me 15 years ago, I would have been, forget about markets going higher. Let's buy the market and 30 seconds later, the market would have been completely fisting me right in all the wrong places and would have taught me a very, very expensive lesson. But again, it really does show you that personal growth is the key. That trusting technical analysis is incredibly important. If you are a serious trader, again, fundamental analysis is great.  And again, I'm going to undersell it right now. What actually happened today, there was some ridiculous moves.  And let's get into it, right? Let's get into it. So technically speaking, first of all, let me just give you guys the heads up here. So the Q's busted yesterday's low of that 222 level. And again, we talked about last night, I thought there was a shot at the 10-day, which is 219, and the Q's just destroyed, man. So here is the 222 area, and they just went destruction. I mean, it went all the way down to like 216 and change. And as you can imagine, so did everything else. So the market gapped up, market gapped up. And you saw it, and the majority of the names, they were literally gapping up into supply. You saw it. It was obvious. Roku, Roku, Tesla, Apple, they were all gapping into supply. And all was just a matter of time for us to wait. And obviously, when everything confirmed some amazing moves, Zoom was good today. I actually caught Zoom to the upside today. Zoom was to the upside today. Tesla was great. Tesla was really, really good. Boeing, man, I traded Boeing. That was really, really good. Roku got destroyed. The most ironic part about Roku, and again, I promise we'll get to individual pivots in a second. The most amazing part about Roku is it was up a couple of bucks pre-market. And I was looking at the news. There was some sort of filing. They were filing 4 million shares, something. I'm like, how is this thing up? How is nobody seeing this news? And I put the pivot to the downside and the stock had absolutely destroyed. So let's talk about this. And again, I'm not going to be able to really paint it. If you traded with us today in the live webinar, especially in the Twitter feed, you guys know how aggressive these things are. I'm so tired right now. I'm going to be definitely underselling what happened. But this is one of the better waterfalls that I've saw in a long time here. So Boeing 125, that was yesterday's highs. 124.35 was the pre-market lows. Both levels of the builds below can flush. Again, we've been talking about yesterday, for example, that 128 pivot traded out to 125. So these are the levels on Boeing. And again, we really would talk about 120, 120, 120. That was the big number. And Boeing got destroyed. So it took out the 125, right? Took out the 125, took out the 124. 124 level as well, 124.35, and just got destroyed when all the way down to 119. I still like it. I think it might maybe take a couple of more days to get down and start getting down to this 119 level for confirmation. But again, you saw today the 115's come in, the 110 puts coming in. So amazing move, amazing move on Boeing. I missed this Netflix. The funny thing is Netflix at one point looked like it was about to take out the 52 week high. So I guess when I went out to lunch, I missed this 431 pivot. I said I could get down to 427. I guess this happened at lunch. I don't need to remember it had been happening. But 427, we talked about, excuse me, the 431 pivot. That was yesterday's low to get down to 27. Apparently it did. Apparently I missed it when I was at lunch, but it is what it is. Amazon 2355, if it builds below can flush. Here was Amazon. Again, not the biggest move in the world. I thought it was going to be a much bigger move. Actually, it held up fairly well. So it took out the 2355, wide 2355. That was yesterday's low. It went all the way down to 2337. So again, $17, $18 pivot. Not the end of the world. I thought it was going to get down to 2320. It kind of held up here. I don't know why it stopped where it did. But nevertheless, pretty good pivot there as well. Facebook got destroyed. Facebook 210, if it builds below, can flush. Here was Facebook. Here's the 210 on Facebook. Here's the 210 on Facebook, which has gotten murdered. Went down to 202, got absolutely killed. VTIQ, and nobody had to locate for this thing. They never put in a second entry. Crazy, crazy stock. Adobe, again, from last night's watch. 364, if it builds below, can flush. Here was Adobe. They were just literally going one by one by one. So here's the 364. That was the last two candles on the daily chart. Again, the same common denominator. The five-day moving average stopped twice. Confirmed the five-day moving average and went all the way down to 352. I mean, this thing would put in a $12 move. So big move there. Apple, that second entry on Apple went down to 3... 310.85 was the pivot. Went down to 310 and changed. Then bounced. That second entry at 310 on Apple just got shelled. So here's the 310, right? Here's the 310 and it just got murdered. Again, there was massive moves. Absolutely. If you traded beta today, absolutely massive moves. Tesla, again, the gift that keeps on giving. 808, if it builds below, can flush. Second entry on everything. So Tesla broke that 808 level. Went down to 805 and then rallied. So 805 was the second entry. And we shorted this thing. The first move down was to 798 and changed. My lowest cover at that point was 799. So I was very, very happy about that. And then another pivot came in below that 797 and took this thing down. I said it was going to go down. There was a shot. It was going to get down to 780. It got down to 763. It just got murdered. Q's destruction, we talked about Q's. Q's went down almost $6. Amazing. But here was a crazy pivot. Absolutely nuts pivot. And again, I couldn't figure out... I was dumbfounded. Why was the stock holding up? Does everybody not see this news? 126.70 held twice. If it builds below, it can flush. Here was Roku. Here was Roku. Here was the 126.70. There's two candles. You see these two candles here? 126.70. 126.70. And just destroyed. Went all the way down to 14. Crazy. Crazy, crazy move. Again, when they pulled Beta, man, they pulled these things incredible. I actually caught this trait to the upside. 169.75. 170 needs to build for more. And again, only scalp trait. But listen, caught a buck on this ZM. Here is the <IP_ADDRESS> area. And I said, there's me a buck in the trade. Ran up like a buck and a half. So nice move here before they pulled it. They rallied it back later.  See, this is my point of trading random stocks. So I get long DDOG. And it runs up like 30 cents. So the thing is, when I trade Beta, I know what to expect with these things. I have no idea what to expect with these DDOGs in stocks. When I trade random names, I just don't, I have no idea what to do with them. So it sat there, sat there, sat there, sat there. I finally just sold it flat. Yada, yada, yada. 30 minutes later it goes to 72.  It is what it is. Whatever. It is what it is. So 805 second entry got destroyed. And unfortunately, I messed up this DDOG trade. If you took it, it went to like 72 and change. Great job there. Take sales, right? Take sales on ZM. I mean, fantastic moves.  BYND 140, 140, 141 if it builds below can flush. Guys, look at the pivot on BYND, right? So here's the 4140 right here, right? 4140 right here. This thing got destroyed, went down to 127. Just absolutely destroyed. I mean, killed. First, I thought 139 potential. And then it stopped at 139 potential. And then I said, hey, there's a shot. It goes red. And it went red. And then it went down another nine.  Bowling again, 120 last support.  Just incredible, incredible. I know a lot of you guys did incredibly well. Bless, bless, bless. Thank you very much. I know a lot of you guys did incredibly well.  So macro wise going into tomorrow. Again, I had a very, very strong opinion about today's session. Not so much for tomorrow. I mean, now that we went through the 10, held the 20, we're kind of in no man's land here. So tomorrow, you know, we kind of have a 50-50 shot. If you look at every single stock, it's right in the middle of its ranges tomorrow. Tesla is in the middle. Netflix is in the middle. Amazon is in the middle. So I wouldn't be surprised if we had a kind of a choppy session tomorrow. Again, when everything's in the middle of the session, they either have to confirm upwards or downwards. So we might be kind of a little bit of a bind. So I think tomorrow morning we have to be a little bit patient, kind of let everything play out so we can get a clear path of the goal line. But again, guys, like I have been saying all the time, technical analysis is your best friend. That's it. You don't need anybody holding your hand. You don't need 35 opinions. You don't need anybody to tell you when to jump. When stocks confirm, they confirm. Usually good things are going to happen. Guys, God bless. Great job, Tay. I mean, that's pretty much all I have to say. God bless, and I'll see you all tomorrow. Congratulations for putting in the time to take control of your trading. You're one step closer to owning your future and achieving the success you desire. Want daily trade ideas directly from Dan? Straight off his personal watch list? Unlock our free PS60 vault where you'll get nightly updates on pivot opportunities we're watching for the next day's session. Click the link in the description to get started today.


So we just heard some incredibly fascinating stories about all of our cultural heritage. What I do is kind of different. I help shape pretend history. In the DC universe there are a lot of exciting characters like Batman and Catwoman and Huntress and I got to write the origin story of Huntress. It's called Huntress Year One and it's looking back at the makings of a strong female superhero. So I'm going to show you some of my favorite pages in the comic and by the way it was a comic first and then it was collected in this collected edition as a book. I know a lot of people aren't sure about what's the difference between a comic book and a graphic novel. Neil Gaiman said I'm a comic book writer.  So anyway but I like getting to be an author for this graphic novel so I'm going to go through these as quickly as I can. I tried to create a film noir feel. When you write a graphic novel and you're not the illustrator you're the director, the casting director, the lighting director, the costume director and this is Helena our hero and her brother growing up in Gotham and their father is the dawn of Gotham and is beating their mother. Afterwards Helena is fuming at her father and she's not afraid of authority and she's a very devout Catholic girl and she just tells him to his face she wishes he was dead. A few minutes later she actually does regret this because Omerta an assassin sent from the boss of bosses in Sicily winds up coming in and killing the entire family in the middle of this dinner except for Helena. And this is that moment that all children in the DC universe go through where your entire family is murdered and then that sets you on a path and eventually someday you become either a superhero or a supervillain and the question is which will you become. I'm not following my notes so I'll just I'll just do this without the notes. So she is sent to Sicily to live with a family of assassins and she has this incredible tutor who I actually modeled this woman after a famous Italian movie star from the 50s and see that set she's watching Rigoletto did anybody see Rigoletto at the San Francisco opera a couple of years ago that's that set so people who know me see these little things oh that's from you know so anyway let's see so she's in Sicily and she oops I think I missed one there oh no okay she grows up and she falls in love with absolutely the wrong man he is the future dawn of Gotham Tony Angelo another mob family she this very elderly gentleman is the boss of bosses who tried to have her entire family killed but for some reason she was spared and now she's all grown up and he'd like to have her killed now and his second in command a man whose nickname is the Pope he's not the Pope but he anyway does anyone recognize the photo reference I provided for that was John Forsythe during his dynasty years it's anyway okay so so anyway and he's there's some there's some fun mafia talk here misogyny hilarious okay so she eventually gets a costume together and goes to confront Stefano Mandragora because he ordered the hit she finds out he ordered the hit on her family all those years ago and he says I can't read this from here but he says something along the lines of you must be an American we don't have capes in Italy and can you read the dialogue from the audience no oh that's too bad okay and so anyway but she actually has been raised in Italy but that is a an American phenomenon so then he signals to his goons to come in and he throws a knife at her and she catches it in midair and then which I'm able to do so that's realistic you can do that it's okay then she winds up having to go to Gotham because after she takes care of him there's still the matter of the man who pulled the trigger omerta and he is in Gotham so she starts to encounter all the Gotham characters she vowed she'd never go back but here she is and Catwoman is basically telling her I'll help you out but you have to remain independent that's what I want I don't want you to work for me or the bat and she asks and Helena aka the Huntress our hero asks Catwoman how long have you two been chasing each other around you and Batman and Catwoman says well maybe two or three years but it feels like 70 Catwoman also says I know smoking ages you but I'm only 29 darling and see in Gotham nobody ever gets older than 29 I think that's why I like it there inauspiciously she beats up Bruce Wayne immediately thinking he's in bed with the mob he was actually trying to set up the mob and he's having a mob wedding at Wayne Manor and she says oh I'm really afraid of you what are you gonna do beat me at golf and he says yes I think I could also at dressing for a wedding anyway so she winds up reenacting not meaning to but reenacting her childhood trauma with omerta coming in into the old house that's now abandoned and boarded up where the scene happened in her childhood and this is the cover of the book and that is the beginning of the story of the Huntress thank you


Live from the MGM Grand Hotel in Las Vegas. Extracting the signal from the noise. It's theCUBE covering Splunk.com 2015. Brought to you by Splunk. Now, here are your hosts, John Furrier and Jeff Rick. Okay, welcome back everyone. We are live in Las Vegas for Splunk.com 2015. This is theCUBE's SiliconANGLES flagship program. We go out to the events and extract the signal from the noise. I'm John Furrier, the founder of SiliconANGLES. Joining my co-host, Jeff Frick, who's the general manager of our CUBE business. Our next guest is Dan Pong, software engineer of Orion, formerly on BEAP. Welcome to theCUBE. Thank you for having me. So you got a device there, so let's just get right into it, right before we get into the whole Splunk thing. You got a device that's flashing. That's your product. Describe it, give us the data. So, Orion Onyx is a group communication device. We support instant group communication to the people that you need to be connected to in real time. So, you basically connect this to your phone. You create a group. You add all your friends or your colleagues, whoever you need to be in contact with into your group. And you pin this onto your shirt.  And that's really important because today, people are always on their phone. They might be tweeting something and then they'll look away from you and then they'll pick up a call and we do that all the time we tweet while we're interviewing. Yeah, and you lose that eye contact, which is so important for human connection, right? And this helps us keep you present. So, it's voicemail meets group me for tech? Not voicemail, this is, no, it's beyond that. It's instant streaming data. We're not recording a whole message bit, saving it somewhere and delivering that for later reception. This is streaming data right from when you push the button. As soon as you start talking, bytes get on the wire and transfer it to all of your group recipients. And they receive it on their device and store it. They don't store it, they play it right out. Okay, right. But then is it on all the time? So, you're hearing, if two or three of the other people in the group are having a discussion about something, are you hearing that? If they were talking, yes, we would hear that right now. But it's not always transmitting, you have to push to start the transmission. So, it's push to talk. So, when do you find that you use it most of the time? Kind of what are the applications, kind of situations that it really works wonders? Yeah, for something like events like spunk.conf. I ran into a bunch of vendors yesterday after the keynote and they weren't ready for everybody coming out. And so, I was talking to a vendor asking about its products and we were really engaged, but he got interrupted by a phone call. So, we had to pick up his call and was like, hey, you know, the keynote got left out early and I'm here with one laptop. Can you bring one laptop to me? And then he looks back at me and we were just talking about Ryan and how you can have instant group communication. And that's all the idea right there. Like, he lost engagement with me as a customer, me as, you know, just face-to-face communication. And so, for coordinating events, it's a compelling use case. Right. Other things. So, talk about the technology behind it. So, it's a hardware device. You wrote the software for the back-end service. What else did you guys write? So, you got a little interaction. What's the battery like? Give us some of the speeds and feeds of the overall end-to-end system.  It connects, right now it connects over Bluetooth to your phone, it uses your phone's data plan or whatever it's connected to the internet. So, it could be wifi, it could be a satellite phone. We have an example in our talk that we just gave where our CEO is in a boat in the middle of the sea in Palau and he has a satellite phone. And this is the power of internet-connected wearables. So, if you're connected to the internet, you're connected to the Orion network. And if you're connected to the Orion network, you're connected to all your colleagues, all the people that you need to be connected with in real time. So, you have this device, it's connected to your phone through Bluetooth and then it uses your internet connection, goes to our back-end service. And from there, we stream the data out to all the recipients. So, what's the URL for more information real quickly? I want to get that out. Oh, it's www.orionlabs.co. Okay, great, orionlabs.co, okay, great. Orionlabs.co, check it out. So, what's the feedback? It's very much Star Trek, like Scottie beat me up. I mean, it's a communicator. Yeah, that's one of the accessible kind of stereotypes that we're able to use. It is very much- Good for concerts, live events, moving around. Biking, like if you go biking with your friends on a long trip and you have to have your phone in your pocket, you can't be biking and pull your phone out to text or to make a phone call. Or like when you're driving. Skiing, vikings. No boarding. I use it for even day-to-day tasks. I have this paradigm that I call yell to talk. If you're, we live in San Francisco, we're in this pretty small apartment. But even then, my wife could be in the kitchen doing something and I could be in another room with the kids. And there's so many times where I'm like, hey, do we have any more diapers? And she'll be like, what did you say? Turn off the radio. Your whole neighbor's here too. Right. Welcome to our world too, we've got four kids. We know what you're talking about.  You can hear my voice. And you're talking like, hey, where's our diapers? I don't see them. Other end. Oh, they're in that cubby over there on the left. I kind of clean them up and hit them over there. Also, do you configure a number of different groups? Because it sounds like the hand-free heads-up value is really a really big one. In all the examples you've just cited, that's a pretty significant rank order value prop. So do you have multiple groups? So you've got your bicycle riding groups and you flick it over to group A when you're doing that activity and you've got your work group, flick it over to group B. Exactly, yeah. And my family group, my friends group, my going out drinking group, however you want to group your friends. There's an unlimited number of groups you can create. There's an unlimited number of people that can be in each group. And it's a full duplex communication device as well. So it's duplex, so it goes both ways. Yes, it goes both ways. And a lot of people ask, how do you manage that? Doesn't it get chatty and uncoordinated? People can do this.  Does it have a mute? Hey, John Mutes. Right, so yeah, it gets worked out by humans. We just connect the humans to do what they need to do. So the heads up and the hands freeze great. And as we were talking a little bit about it off air, we all know that texts and emails can really be a not good form of communication. I mean, there's so much nuance that can somehow get lost. There's things that can get read in, that shouldn't get read into a text or an email. So I'm sure for that function too, having a direct voice connection makes a big difference. Right, the power of the human voice is so expressive we lose that when we start typing that out. Just in what you just said, you had pauses, different inflections in the way you were saying things that communicated very different things that I can hear and I can understand much better than you texting and correcting your text and like, right? That loses so much and we're able to bring all that power of the voice back, all that expressivity. So what's the spunk angle?  So what's the spunk angle? Yeah, so as a small startup, we're really focused on making group communication easy and seamless. That's our one core mission. And so we have other business needs that we need. Like we don't write our own alerting system and that checks our health and pages. We use pager duty. Like the booth's just over there, right? And we use Splunk as data as a service. So we use Splunk Cloud. We shove all our data up there and we're able to use all the rich transformation, data transformation tools, all the cool visualizations to get business value and operational intelligence right out of our data. So data as a service, microservices, Splunk fits right in our model of operating as a lean, mean startup machine. And was Splunk part of the core when you built the company or was it something that you guys added on after the fact? How did it, how did that kind of come about? Well, our CTO, Greg Goldbrecht, used to work, he was one of the early engineers at Splunk. Okay, the storm piece of it, right? Exactly. Okay, so he already had a predisposition. And the founders, the founders story's interesting. So you have DevOps guy, Greg, chef, very famous, provisioning. Jesse Robbins. Jesse, Jesse, and Greg was at Splunk. So you have those two guys. Both are volunteers for emergency services. Those guys are so bad at, yeah. So, I mean, that's pretty cool. So that's kind of seems where the DNA came from. Emergency response. Katrina was a project that Jesse was at. Was that inspiration for this? I think it is somewhat inspiration. You'll have to ask Jesse or Greg more about that. But I definitely see them bringing the Onyx to a lot of the events. They used Onyx at, what was that concert in Golden Gate Park, outside lands. For the EMT services. Alongside the rest of their radio technology. Because it is encrypted. It is instant voice communication. And it is connected. So, and you have GPS data. So you'll be able to do a lot of the tracking you need to understand where your personnel is. So does it play to the device? Do I have to put a Bluetooth headset in? You can put, no. So how do you get messages? If he sends you a message right now. Yeah. You're watching, Greg or Jesse, if you're watching, send us the message. Right, text. There's a speaker on this. So there's a mic, there's a mic jack if you need to be more discreet. Okay. And there's a speaker on this as well. Security, emergency personnel, easy, no brainer. Yeah, yeah. But then leisure. I mean, I think of skiing. I always have to put my phone in the waterproof bag. Right. I got to pull it out and fumbling it on the lift. With your, yeah. With your huge gloves. On the new thing. I don't want to drop anything. Yeah, you can just mash this button, this huge button to start talking. And people have done that. People, and it works well on the slope. And it's great for like, if you fall, if you fell or something and you're like a little stuck, maybe twisted your ankle, you don't want to wait for like your buddy to show up and start like, you know. You're upside down in a snow drift. Right. Help me. It reminds you that the next tell, you know, were they really promoted, you know, kind of the walkie talkie. Yeah, the push to talk. Kind of push to talk function. Right, so our third founder, Roger C Wood, was the progenitor of that whole system. So he's working with us and helping us bring this, the concept about. It's awesome to have him on the team. Yeah. And so how much money have you guys raised? I know there's Rich Leventos on an investor, friend of the cube. Venture capital, seed funded by the founders. How's the funding? We've been through series A, we're in the middle of the next round right now. I can't say much about that. Okay. And you know, as a, like a lowly software engineer, I don't get much privy of that. Though they are, they are very open to how that's all going, but right now that's all in the process. How many people in the company right now? Right now I think we're 35, very small. So very DevOps, 10X developer mindset, right? You guys have a, just what's the code base written in? Tell us about the software. Well, so the backend is written mostly in Python, though when I got there, we shifted the data server. I wrote it in Go, so that's now in Go, which is awesome. We're pretty much a polyglot. Yeah, I love Go. Go is a great language for this type of stuff. You just can sling it. It's a modern language, it has all the modern kind of awesomeness, right? We write our firmware in C and C++. I get to get my hands dirty with that too. Yeah. And Ruby for all of our, all of our chef and deployment stuff. But Dan, we're getting the, we're getting the time here. Thanks for coming on theCUBE. Appreciate it. Innovative startup. I wanted to ask one last question. There was, there was something that someone mentioned about how to become a CUBE alumni. Yeah. How do you just do it? You are now a CUBE alumni. You're in, you're in the inner circle. You made the club. You're in the exclusive. All right. Mostly it wasn't too painful. No, that was great. We wish we had more time, but they set the schedule along. We could spend another 15 minutes. But on the LinkedIn group, it's very exclusive. Only CUBE alumni. You'll get an invitation from me. So that, that'll be coming in your email. Or maybe through the, maybe through the device. That'd be awesome. That would be the School of Silicon Valley and Tech. Over 4,000 people who've interviewed these events. So welcome to the CUBE alumni. Awesome. All right, Dan, great to have you on. Innovations happening. Love, startup action. Again, Splunk. Use cases are all of, all of the math startups to financial services, hedge funds, banks. Everyone's using Splunk. We'll be back more with more ingestion of data in our Splunk machine called the CUBE. We'll be right back after this short break.