So, having been through pretty serious burnout myself and having gone through all of these various stages of seeing various organs get involved from my stomach to what you'd probably call your adrenals to seeing symptoms that I never ever had before in my entire life that frankly at that time freaked me out. Now despite these symptoms being weird, if I had spotted them earlier on and recognized them as symptoms of stress and working too much and not sleeping enough, if I recognized that sooner, my recovery might have been quicker. So I thought in this video I would share what I see as the three levels of physiological burnout and how they apply in Chinese medicine. Hey guys, Dr. Alex Hein, author of the health book Master of the Day on Amazon. So I've included a link right below this video, which is for a free PDF worksheet, which is four daily rituals that can potentially help you add years to your life with traditional Chinese medicine. You can check that out right below this video here. So I'm going to describe three levels, the Qi level, the Yin level and the Yan level of burnout, just very, very briefly. So the way I think about it is the Qi level is where you've been again experiencing symptoms that are not yet material. So for example, you've been working a lot, maybe you have a short term deadline at work or some project going on, you have something going on with your family or something personal that's really causing you to experience stress.  Intermittent, not every day, not every week, but you've been having panic attacks. That on some level is, you could describe it as a Qi level pathology and one simple way that I think of it on one level is that it's an emotional, sometimes level pathology. So it's not easily measured by any current biomedical test, which is why almost always patients that come to me with a history of anxiety or panic attacks, they always say I went to the ER, they didn't find anything, right? And I experienced that myself, palpitations, the beginnings of these little panic attacks, went to the ER, they never found anything. It's a story I hear on a weekly basis because from a Chinese medicine perspective, this is still Qi level. It's affecting your physiology, maybe has not gone structural yet. Level of exhaustion, number two is Yin level. So let's say in this scenario, you've been working really hard, same thing. But this time, what you notice is around evening and sunset, you start to get hot. You feel warm. You feel very thirsty. Maybe you start getting night sweats for the first time, or maybe you even start getting this restless sleep. Your sleep feels incomplete. You don't feel like you're fully rested.  But the distinct aspect of Yin level burnout, as I call it, is heat symptoms. So you can have dryness symptoms, dry skin, heat in the hands and feet, low grade fever, specifically, usually my patients experience this at nighttime. Night sweats, very, very common. The reason for this in Chinese medicine is you're basically burning off the oil. It's like you're driving a car when you should have had an oil change. And now it's beginning to generate all this heat. And the oil change, the Yin, the moistening comes from rest, usually good sleep. Now that that has been burnt off, now you're experiencing dryness and heat symptoms, the moisture in your body has been fried off effectively. The third level of burnout is Yang level burnout. So let's say now we have the same scenario, but now it's a 50 year old dude. He starts to wake up for the first time at night to urinate, maybe even two, three times, not getting great sleep, maybe has a little bit of lower back pain. Maybe his knee or his hip is bothering him, having problems with libido or erectile dysfunction. Now what we're looking at is a Yang deficiency level burnout. And these are progressively deeper states. And at the Yang level, what that means is that effectively the fire, the primordial fire of life, like we call it burnout, right? The candle has been snuffed. It's an everyday colloquial saying in our culture. But at this stage now, the person has a more severe level of depletion where what we call is the Yang is weak. And so they experience these symptoms of cold. Usually this is the age where people say they want to move down to Florida because they hate winters again. It's extremely common. So in this case, usually we consider it the kidney fire has gotten weak. And now they're experiencing these symptoms of cold, frequent urination, erectile dysfunction, decreased circulatory, often have heart problems around this time, or maybe if it's gone long enough, now they have truly structural problems like they have kidney failure due to long term diabetes and their own dialysis, the most severe, right? Or cancer or something else, more structural where a tumor will grow. So these three stages are very important to recognize because they're progressive, they are progressive levels of depletion. And at each state, we've talked in these videos about Yang Qi, which is the state of, we could call it immunity for a very low level explanation or vitality. These are progressive levels of depletion of your Yang Qi of your vitality. And they're important to recognize because they're different grades of severity. So if you can recognize, this is Qi level still, I got to watch it. This is Yin level, got to be extra careful, Yang level, I need to chill for a while, indefinitely focus on my health. They can help you and prevent you from going into much more severe pathology, all right? Helpful exercise to go through, very, very useful to know. Maybe I'll shoot more videos on this in the future. But if you'd like to become a patient of mine locally or online via telemedicine, there's a link right below this video to my clinic. And you can email or call me through that and get an appointment booked up. All right, you guys, that's all I have for today. There's two related videos over here as well.


Oh, no, sorry, knock it off. Little Billy, I swear, I do not make me, don't make me come over there. Have you figured out what I'm doing, folks? They're all conditioned punishers. Some of you are going, what did I do, what did I do? Well, those are you that have experienced those conditioned punishers, right?  So if I scream at you, you have the word no, plus you have that loudness, but the loudness is not a conditioned punishment. The word itself, the word no, is probably a conditioned punisher for a lot of people.  That's a conditioned punisher, right? You want her to stop whatever she is doing to reduce the particular behavior, but it's conditioned because you have to learn what that meant, right? So it's not a reflexive saying the word no. So as an example, if you wanna find out if something is a conditioned punisher, if your words are conditioned punisher or an unconditioned punisher, which they're never unconditioned punishers, but to prove my point, tell your kids to stop it in a different language and they won't. Why? Because they haven't been conditioned. Your tone might be a whole different issue and you're like, no, yeah, right? You could do, you could do, you could do something like, and we often do that around my house. I have no idea, I just lose so many words. So my kids know that when I'm mumbling, they're probably in trouble. So they've been conditioned and it's now a punisher, right? So conditioned punisher, shaking your finger, conditioned punisher. That's not a conditioned punisher. The pain itself is unconditioned. Anyway, so the taller is trying to reduce the behavior through some particular stimulus that they had to have a learning history for in order to understand what it means.


Alright, good morning. Thank you for coming out to the inaugural year of the Red Team Village. We're hoping to have many, many, many more years. We tried to dedicate a lot of space, so we need to get a little bit more space, but we tried to dedicate at least 30 plus percent of that space to talks because we have so many amazing people in the red space field and you had to go to all these different places to hear them and talk with them. So we've got an amazing lineup of different folks. Mr. Charles Herring, he's got an immense background. Can I talk about the School of Roots thing? Yeah, sure. You want to talk about me? There's a whole slide about me. It's my favorite topic. We're just going to do the whole hour about me. It's all about me. Anyway, well, thank you. Please give him a warm applause and then we're going to do about 45-50 minutes. Then we'll do some Q&A after that. So if you have any questions along the way, feel free to shoot a hand up and I will answer the question because that gives me an opportunity to drink my water. If you want the deck, Twitter at CharlesHerring, CharlesHerring.com will shoot you to LinkedIn. You can grab this deck from either one of those places. It's loaded to CDM. A little bit about me. This guy is actually me, though I do recognize that I look like I ate him and had an allergic reaction. Life got hard during this time. I was in the Navy for 10 years. I spent seven years fixing F-18 Hornets after 9-11, got wrapped into doing security because I was doing that for fun.  Ahead of that, I was detailed to be the Network Security Officer at the Naval Postgraduate School. That was also a fun time when Chris Eagle spun up to school at Root. So anyone that's old enough to remember that, one captured the flag here at DefCon a handful of times. And at the time, we're trying to figure out how to operationalize cybersecurity operations. And so I partnered with InfoWorld back before journalism died and the test center was still open and they would send all the gear and we would mess with it, put it on the network and figure out what could work, what didn't work, what type of technologies and approaches worked. Some of the stuff we're going to talk about today, Network Behavioral Anomaly Detection was done really in two vanes that were pretty successful. Georgia Tech had an arm that was doing something that later became called Stealth Watch. So it was Network Behavioral Anomaly Detection that way. The project working on it at the Naval Postgraduate School was called Therminator. You can Google that, NSA holds that code now. Left, the Navy did consulting work for about seven years. Then went back to LandCope to help them figure out how to sell something as complicated as Network Behavioral Anomaly Detection. That company got acquired by Cisco. And about four years ago, I started a project called WitFu that is setting out to orchestrate security operations. If you are interested about that, there's www.witfu.com. So here's what we're going to cover today. Going to hit on the concepts of NBAD and UBA, how it works, what the terms mean, just to define those so we're all up to speed. Then we're really going to look at how to poison that data in the context of a red cell team. People are collecting data, they're analyzing it, they want to catch attacks. We're going to look at today are some concrete techniques in messing that data up so they cannot catch the attacks that are underlying. And so it's going to be two parts. One, the techniques. So what are the commands we run and the scenarios or how do we leverage those techniques in different poisoning scenarios? So just real quick on some definitions.  Signature is you're inspecting an object as it's entering the subject. So the packet, the file, it has some characteristic that's weird. If I was drinking my drink and there was mold floating on it or something weird, I'm like, okay, there's something wrong with this object. I'm not going to ingest it. I know that mold is not good, right? Behavioral detection is observing the subject after ingestion occurs. So sandboxing is really good at this. If I drink the drink and I become sick, that behavior tells me the object may have been bad, right? And then anomaly detection is looking at all of the behaviors, whether they're on the network, on the endpoint or whatever, you establish what is normal. And then if anything happens that is not categorized, whitelisted normal, it is abnormal, it is an anomaly. And so this is one area that has worked really well over the last few years and we've done a whole lot of good research as an industry on anomaly detection or what's more commonly being marketed now as machine learning, it's particularly supervised machine learning. But in the relationships, anomaly detection creates new behaviors. We see something new happening in the wild and we categorize it as a nefarious behavior. So Hartbleed a few years ago is a good example of this. When we start seeing the ratio of server bytes, client bytes, that have been exchanged across Apache are not in the realm of normal web communications. It's a net new behavior. And so we're able to tag that as an application denial of service. And then from behaviors, we are able to detect new signatures. When we see this behavior we may not know what the attack is at the time but we know the behavior is bad such as the files are being encrypted on the disk, a data is being deleted, data is being exaltrated. The behavior is bad. And so those behaviors inform us on how to build new signatures and of course the best thing about signatures are we can attach CVEs to them. We know exactly, we can look at the adversaries that created them to better understand exactly what happened. So false positives or when I say a false positive, I mean a detection of something other than an attack is high in anomaly-based detection because until you get to the point where you've categorized every behavior so you know what's normal and why it's normal, you're going to have alarms that are triggering, that are uncategorized but not nefarious. An anomaly-based detection as we look at it requires baselines. If you're establishing normal you have to define what is normal and most of the techniques we do in anomaly detection, whether it's on the network side or the user side, they're based on mathematical models, right? You can do mean, you can do different types of standard deviation, there's all kinds of models on what the baseline is, how many bytes. So what you start with is what type of metric are we looking at? Is it packets transferred per second? Is it packets transferred per second against port? So you build a mathematical set of numbers that you're going to track. Second thing you have to figure out is what is the baseline applied to? Is it applied to the entity? So are you baselining the behavior of every host or every user on the network or are you looking at set-based baselining? So all of the users in wireless or all of the hosts that are belonging to the C-suite, right? So you create sets and then baseline against sets or you baseline against entity. And that's pretty important when you look at how to exploit them. So what baseline are you going to exploit? We'll look at baseline boiling a little bit. Supervised machine learning versus unsupervised machine learning is you take all the variables and unsupervised machine learning and you find every possible relationship against the different data. So if you have packets versus port versus bytes, all these things you can look at, what are the distributions of those sets and then what do those sets mean when we see them? And that was actually one of the main pieces of the thermometer research. So as a product in the industry, Network Behavioral and Omni Detection is looking at a horizontal traffic normally inside the network, it's looking at net flow generally. There's also the ability for probe solutions. But you don't, because you're counting things, you don't need to inspect the characteristics of the payload, right? So this is one thing that's sort of safe from encryption because you don't care what's in the payload, you care what's in the header, how many packets, how many bytes, how many connections, those kind of things. It also tends to look at solving horizontal east-west conversations, what are the, how much data is being transferred to a data center, to a data center or whatever. And that's why net flow or other meta type tools work there. Almost no one definitions will get the fun part. That's a list of stuff from Gartner on people that do in BAD. Types of anomalies you look for are service traffic thresholds. So how much web traffic was consumed from China in a day, right? And so you look at that type of thing, it also fits into geographic traffic anomaly, how much traffic is impacting on a given geo. Data hoarding or data staging is, if you expect a host to consume 10 megs a day from the network services and now they just consumed 100 megs, that's a mathematical anomaly against what you expected in the baseline. So those are just observing network patterns. When we look at UBA, really what this solves is where do you do an investigation? Those of us have been doing this for a couple of decades. Remember the days where we had alarm tables? We started doing an alert at the top of the table. We had prioritized them on different types of metrics, which one was scarier, which was our confidence level, all these things that came in sort of in the really initial IDS, IPS days. And we'd work our way down that list. The next sort of thing that happened was host centric investigations to where you take the alarms and you attach them to the network devices that are generated in the alarms and then you investigate that host and so you correlate them there. And then the first part of user entity behavioral analysis is putting the alarms on the credential level. So if there's three different machines used, but one credential used, you investigate the user credential instead of the host level. And what it does is it provides a boil down of all of those alerts. So there could be hundreds or thousands of alerts that are attached to one set of credentials. So and then this is the interface that I use. This is using Cytoscape, which is a bioinformatics graph library. So when you look at user-based anomaly, I'm almost done with definitions and we'll do the actual exploits. A couple of things, geographic traffic or magic carpet type of attacks. If a guy always logs in in Columbus, Ohio, and then all of a sudden he's logging in from Tehran, that's a geographic anomaly that he doesn't, he's too far outside of where he normally logs in. A time of day if they're always logging in at 8 o'clock in the morning or during the morning hours and all of a sudden he starts logging in at 2 o'clock in the morning, that's a time of day anomaly. Different types of hosts. So when you categorize how does that user get onto the network? Is it only on guest wireless or are they logging into servers? So when those types of access change, it's also a type of anomaly. And then what services? If it's only consuming email and the internet is the baseline, then all of a sudden we're looking at something like accessing core data services like SQL or something like that, then that's an anomaly in itself. All right, so now that's a million things that do UBA. So let's talk about how to poison the data now. So there's really three types of poisoning that we're going to go over here today. The first is mass implication, which means if you have, if I'm attacking from this computer, I don't want you to investigate this computer because I'm going to make it look like everybody's attacking the network. It's not just my computer, everyone's attacking. So you have to figure out which one's the real attacker. The second one is baseline boiling, is contributing to the calculations of baselines in a way that they grow. So if you're doing something like data exfiltration or time of day, you just slowly contribute data that makes it to where the baseline is so big that it's useless, that everything is always okay, everything is always normal because you're contributing that data in a slow way. Attack masking is when we send one record to offset another record. So this is really good in recon.  So now it doesn't look like a scan anymore. It looks like a two-way handshake occurred. The ways we're going to do it is log spoofing, which means we're going to generate false logs. We're just going to lie. We're going to create a log. We're going to get it into the processing system and just write whatever we want. The second approach we do is behavioral spoofing. So we make it look like that a behavior happened on the network that didn't actually happen. And so the way that we're going to do this is, one, we can do it from a machine we own on the network. We can do it from a VM or containers. A lot of the code I'm going to give up here is going to be via Docker containers. And we can also trick networking devices into lying for us by doing fake telemetry that makes the networking device think that something happened that didn't really happen. So the end goal of this is, on the left is an attack that happened at a university of data exfiltration going from left to right. And when you look at UBA tools and tools that utilize graph theory, what you're driving for in developing these visualizations is clarity to the investigator. You take thousands or tens of thousands of events. You contextualize them against the modus operandi of the attacker. And then you render it in the investigators like, yep, someone's stealing our data.  And then that's easy to investigate and then the bad guys kill. What we're going to look at in poisoning is, if you can, we move to being invisible, right? We erase the records that we did in attack so that there's no record. That's actually pretty hard. So I like the second one better. Make it look like everything's screwed, right? And so make it look like every single thing on the network is infected and an attacker make everything look horrible and you can't investigate any of it. So this is what we're going to drive at in these exploits. So real quick on how to protect against this, and this is sort of the key part if you have to tell people how to fix it. We have a really bad problem with non-repudiation and logging. UDP is a really crappy way to get data logging into a system. TLS is a pain too because of the overhead of the TCP handshake as well as the encryption handshake. And for some technologies it's not even possible. RFC 5101 which establishes IP fix is a metadata for sending out network communications. It's written to support TLS encryption or transport but no one does it. So you can't buy a tool that actually complies with that part of the RFC. It also does, of course, add client overhead, server overhead. You can run into reflection, denial of service, all those things as well. And spoofing, right? So people, you can just lie. There's nothing with a UDPacket in particular that keeps you from saying in the header that I am whatever IP address I want to be. And as long as that packet can route to the destination, it looks to the server like I did that. And so tools like Cisco have the overhead of doing a reverse path lookup to make sure that if you're saying you're sending from <IP_ADDRESS> that you're really on that segment. Then really the other part is protecting the collection infrastructure. The tools that are generating telemetry should be in a segment that is the path to the analysis is protected. So no one on the network can send logs unless they're in an authorized segment. I also put up here Honeypot. So if you're doing any type of deception net stuff, that stuff is really cool when you run into everything's infected because you get real telemetry because nothing should be talking to a non-existent box. So it's really the tripwire of figuring out where is the real guy when all of the analysis fails. And really another core part here is as you're receiving data it needs to be tagged on how it was received, right? What listening service received it? On what port? What were the authentication components that happened? Was it sent over TLS? Was it sent over UDP? And those types of things so that when you run into a poisoning scenario you can filter out the stuff that meets the criteria of poisoning because you log that as it came in. The things we're going to go over really fit in all parts of the minor attack matrix for enterprise except for initial access. So the first technique is really simple.  So what you do is you're going to spin up a container or a VM on maybe the code on the container here in a second using a Docker container. You assign it a MAC address. You can pull an IP address from DHCP or assign your own IP address. You do stuff. Like maybe you do recon.  You reassign a new MAC address, pull a new IP address, and then do something else. And so in the logging in the system you're spoofing the IP address, you're spoofing the MAC address. They can't find the machine because it vaporizes, right? So it's the same machine but it keeps popping up using different networking components. So this is a Docker version with Caledon Linux. So the first thing is that one line creates the container and it'll actually pull from Docker Hub if you have an internet connection. It establishes whatever MAC address you want to use. And this scenario is going to pull a DHCP address. So that way you know it can route. And there's a record. You do stuff. So you create the container. You start the container. It gives you a shell into the container. You do all the stuff you want to do, right? These scenarios will go through in a little bit or anything else.  So it looks like you have this machine that pops up for a few minutes. It might hit something, flag it, but it's gone by the time the responders can deal with it. This one's really fun. It's what I call a pocket dimension. A lot of access switches now are sending telemetry. Wireless access points do this a lot, things like Meraki or Myst, where they just believe the traffic happening on the access point is really happening.  And it can be on a slash two, a slash four. You might be able to get a slash zero to work, but I generally run on a slash four. And you spin up an external host. It could be a Microsoft host or whatever IP addresses you want. And then you do things to those fake machines. So it looks like <IP_ADDRESS> is communicating with <IP_ADDRESS>, but it's not. It's communicating with your <IP_ADDRESS>. And so you can generate all these false traffic patterns, whether they're inside the network or outside of the network, by creating the containers, launching the traffic that you're lying about.  That fake network is bound to the NIC. The NIC is then being monitored by the wireless access point, a wired access point, an access switch is generating either a Syslog or NetFlow telemetry. That stuff is already configured to ship it to the Syslog or NetFlow or UBA tools. So you're generating all this fake traffic and it gets shipped out. So it looks like this. This is two different machines. You create a network bridge called Pocket, or it's a Docker network called Pocket. You assign the bridge that across to the physical network that's on the bridge command there. Spin up containers.  You could use it for doing recon. You could scan the whole internet if you want. Whatever you wanted to do, but it's happening in this fake network but generating real telemetry inside of the security architecture. This one is a little bit harder, or should be harder, is just spoofing records directly to the log collector, whether that's Syslog or NetFlow, but you have to find it first. I'll show you a couple of techniques for resolving this. First is you can look for DNS things, because people name them like syslogcollector.acme.local. Doing some basic DNS lookups will probably reveal something, give you a step towards where the collector is. If you have a compromised machine that's already generating telemetry, that's just a TCP dump on that machine to figure out what it's communicating with over NetFlow or Syslog pieces. You can just do a send scan. If something is collecting syslog, they're going to be open on 5.1.4, see if you get a SINAC back on any of those. But once you discover it, you're just going to spoof records that can say anything that you want, because record collection stinks right now. And then you can just do a pump and dump, right? Create the records, drop that machine, create more records from a new machine. So if you don't know how to send syslog over Netcat, that's how you do it. Syslog is really uncomplicated. And so you can send any message you want. Most syslog formats from different tools are very well documented. There are plugins for it, but essentially just Netcat anything you want to the port of the server, and the server will process it as if it is the gospel.  There's a cool project on GitHub called Samplicator. And essentially what it does is it opens up a socket and listens for a UDP packet, and you have rule-based systems to say when I receive packets from the following sources or they have the following characteristics forward those packets to the following destinations. And what it does is it maintains the original header. So even though, so if you sent from <IP_ADDRESS>, it looks like <IP_ADDRESS> when it hits the final destination and not the Samplicator IP address. So you can just load up class B's worth of IP addresses. And just say I'm going to send a packet into Samplicator and it's going to spray it out to every possible destination. Some detection mechanisms may see a UDP flood or something like that because of the number of UDP packets coming out. But this is one way to get the packet to the destination if there's a route to it. So it's just like send it to everybody and whoever picks up on that log just receives a log. And that's really all that you have to do there. Samplicator is a very simple application to use and then has used the previous slide to generate the netcat message, send it to Samplicator, and then it shoots it out to all the UDP destinations. For things that are using TLS, this is some really simple Python code. That's all you need to do to send a message. You'll see the message is right here on the socket. The rest of it's just removing verification. So if the endpoint does require certificate verification, you're obviously going to have to get a hold of a good certificate here, which actually might not be too hard if you own a machine because the machine will have a certificate on it if it's already shipping logs. But that's the Python stuff there. And again, if anybody needs these slides, just add Charles Herring. CharlesHerring.com. Give them to you right here on the thumb drive that I would not recommend you plug into your machine. Next thing is, here's another approach. So there's a tool called Nprobe. There's an open source version. It sniffs the packet capture, and it creates NetFlow records. And so in the case of like a pocket dimension, you're running these different attacks. Have Nprobe generate the metadata about those fake attacks and forward those onto the collector, right? Whether you do that through a UDP spray or you already know the end destination of where you're going. So grab that from the end top. Friends over there. A lot of stuff is starting to move towards REST APIs. So Elasticsearch, Splunk, those types of devices. If you're going to make a direct write there, this is an example for Elasticsearch in the format. It really is just this message colon. So this is a JSON post to the Elasticsearch API. So you can do that. But generally if you're using Elasticsearch, you also have available somethings listening on syslog somewhere. Oh, Mike's dying. All right, so let's do a scenario. We want to recon the network, but we want to cover our tracks by making it look like everybody's reconning the network, right? And so they won't find our machine until it's way too late. So best way to do this is in a pocket dimension and generate, you can generate the fake records, right? So you're scanning everything inside of the pocket dimension which is generating all these recon records that are getting forwarded off to the infrastructure. You could also do this by spinning up as many Docker containers as you want, spoofing the IP address. It doesn't matter in recon, particularly if you're doing a send scan. If the packet comes back to the fake machines, so in the pocket dimension you can do as many as you want. You can simulate some SYN-X, but it's really good in just getting a recon done and they will know recon just happened, so the blue team will know recon just happened, but they won't be able to figure out where it actually came from or where the data was collected to shut it down.  This is something I talked about a little earlier, but if you're going to send, let's say you're scanning the network and you just want to create a bidirectional connection, inside of the real network, you're scanning the whole network, and if you don't get a SYN-AC back, you create a pack, you create a NetFlow record in this case that says there was a SYN-AC, that the SYN-AC did come back. So it will confuse detection mechanisms enough to prevent a scan from triggering because it has a record that the bidirectional connection actually occurred. There's also the ability to do this. There's a scanner, I'll see if I can post it later on to where it does this automatically. So you scan, the machine doesn't get a SYN-AC back and it knows where the flow collector is. You can generate a SYN-AC record from the scanner itself. So it's this really simple Python script to shoot that out. And this one's sort of the fun one here. How do you boil a baseline? So boiling a baseline and going back to the Venn diagram we had anomaly detection catches everything. As long as you have visibility on everything, it will always generate an alert, right? Unless you break the baselines. And so if you think about the metric that you want to run against, whether that's doing a geographical attack, you need to move data. Data exfiltration is a big one here. If you need to move data to a segment on the Internet that has never, that normally doesn't transact that data, you're going to create records every day of data going out there. You start with a K, right? Then the next day it's a K and a half, then it's 5K. And every day you slowly move that baseline up generating more and more telemetry that says that traffic happened that really did not happen. And so that can be done either by direct logging. So you're sending the logs directly to the collection source. Or it can be by spoofing the behavior inside of a pocket dimension, right? Where you're executing these increasingly large, whether it's data transfers, time of days, or another good one for this. Eventually you should have every user logging on a place at every hour of the day. And now you can't get no, you can never detect an anomaly in user behavior because there are no user, everyone's always working everywhere. And so it's just, in that case it's just generated a syslog record for authentication successful for user so and so. And then you just do that for every user that you need to use inside of a campaign. Any questions on that? Well, I don't care if there's any questions, but I'm going to drink this drink. Think about a question. So this is the last piece. Just recapping this to prevent this stuff from happening. If you can do TLS, client-based authentication on record collection, that is ideal. Because then you're down to protecting the public key infrastructure, right? And if you lose the public key infrastructure, you're screwed, of course, so don't let that happen. But there is overhead there. So as you're scoping out products and resources for doing the logging, it has to be mindful of the overhead that's going to go into that logging collection. And then when you're building out tools, firewalls, EDRs, all those things, they need to be wrapped into sort of their own DMZ. So if your teams have not built tooling telemetry inside of a bubble that communicates with the logging tools, you're going to have problems. If anybody can send data into the telemetry, you're sort of in trouble. But that is basically it. Get the thing there. I'll answer any questions. Thank you for having me. Applause.


Hi, Myself Dr. Ramakrishna. In this video, we have learnt about brachytherapy from some of the radiations in this video. So, what is brachytherapy? So, as we have learnt before, there are mainly two methods in radiation. So, one is called teletherapy and the other is brachytherapy. So, this teletherapy is like a telephone. When we are away from home, we talk over the phone. That is a telephone. So, this teletherapy is like a telephone. When we are away from home, we project x-rays and do cancer treatment. We treat this with a machine called a linear accelerator. In this, we have learnt about the new methods and techniques. Coming to brachytherapy means treatment. Brachytherapy means nearby. That means, where is the cancer? It is very close to there. That means, it is called brachytherapy to treat the surrounding areas. So, how do we do brachytherapy? In the past, there were a lot of people who did it. Because we do not have sophisticated technology, brachytherapy means to treat the radio isotopes with elements. Before that, radiation treatment is called radium treatment. This radium is called radio isotope. So, this continues to emit radiation to us. With that, we can change the radio isotopes as we like. We can change them as we like. We can use more strength and radio biologically. We can design the radio isotopes as we like. We call them artificial radio isotopes. Now, this radio is not used anywhere. Now, we are using these artificial radio isotopes. In brachytherapy, we use cervical cancer, endometrial cancer, endobronchial cancer, esophagus, sarcomas, breast. If we talk about it, there are a lot of indications. We use brachytherapy in a number of cancers. Similarly, skin cancers. In these tenets, brachytherapy is used only. We can use it in all patients. We can use it in all patients with respect to cervical cancer.  We can use it in all patients with respect to cervical cancer. Endobronchial cancer, esophagus, sarcomas, breast. We can use brachytherapy in all patients with respect to cervical cancer. Similarly, head and neck cancers, tongue cancers, cheek cancers, we can use brachytherapy in all patients with respect to cervical cancer. What is brachytherapy? Suppose, we come to the cervix vision. As we know, there are two parts of the treatment. The first part is the teletherapy. The second part is the cancer treatment. There are many doses of cancer. The treatment is done by brachytherapy. So, brachytherapy is a tumor in the middle part. Otherwise, it is not around it. Wherever it is, it is called brachytherapy to treat cancer through radioisotopes. So, radioisotopes are like a small pellet. It is hardly 4 mm to 5 mm or 1 cm length. It is 2 mm or 3 mm width. So, it is like small pellets. So, we can use radioisotopes to treat cancer through the radiation emitting dose. As we know, brachytherapy is a type of treatment. So, brachytherapy is a type of treatment. So, intracavitri is a type of treatment. Interstitial is a type of treatment. So, it is a type of treatment. If we divide the uterine cancer in three parts, intracavitri is a type of treatment. We can treat intracavitri through intracavitri. Interstitial is a type of treatment for the lute. It is mainly a case of a small operation. It is mainly used for breast cancer, formulary case of X-ray cancer, sarcoma, prostate cancer. So, in this way, interstitial is a type of treatment. ոի՛ � puffle ൈ ത്ീ ༀൔ ༀൗ ൃേൈ ༀൕൈ ༀൃൈ ༀൕൈ ༀൖൈ, ༀ൉ൈ ༀ്ൂ ༀ്ൖൈ, ༀ൉ൈൈ ༀൗൈ, ༀ൉ൈ൏ ༀൗൈ, ༀ്ൈൈൈ൙, ༀ൉ൈൈ, ༀ്ൈേുത� మకెంతు లార్లి రంతుల్దారిల్స్ర్ప్గసంయాం.


BSU women taking on the Marauders looking to snap a four game losing streak early on. Trinity Meyer, Pumpfakes drives hard, hits the deck, takes the foul, but the bucket is good. Later on, Beavers down four over to Taylor Bray. She hits the three. She was five for five in the first half, but the rest of the Beavers were called two for 21 in the first. Corral Gillette hits the three for you, Mary. This one gets away from the Beavers. They fall 73 to 53. If you enjoyed this segment of Lakeland news, please consider making a tax deductible contribution to Lakeland PBS.


Hey Virgo, this is Kelly from House of Virgo. Hope you are all doing well This is going to be your love reading for the next 24 hours or so This reading is for Virgo's Sun, Moon, Rising, or Venus. Some of the messages may or may not resonate.  If you're new, please do hit the subscribe button. I would greatly appreciate that This is a channel for Virgos only. Okay, so if you would like to get a personal reading for me There's a link in the description box below this video. Just click on that link and that will take you to my booking site from which you can Purchase a 30-minute or a one-hour phone call reading Okay And I am able to do readings globally from all over the world So I know I've had some people asking me about Australia My time zone is Eastern Standard Time Okay, so if it's it should be on there, but if it doesn't show up on there, you're gonna have to just deduct All right, so we're taking a look at your person's energy here. It could be reversed as well So please remember that past present and future energy Now it could be somebody recently been dating somebody from your past But if not listen anyway, you never know what might show up Okay, if you can't think of who in the past, let me see here Hmm Get the love messages. Okay separation time apart from your partner was on the horizon Getting to know each other as you reveal your innermost selves to each other your bond deepens. Okay, I Just want to put these cards out here. I forgot to do them in yesterday's reading and then we'll deal with those When we get to it. Okay, let's take a look. So we do have Sagittarius double Scorpio death and tower Temperance Okay for the major Akanas, but let's take a look and see the past energy The tower something shocking in the past now Not exactly sure what that was but there was some kind of an upheaval or some voluntary changes. There was like this Something so not always can the tower be a bad thing it can sometimes just feel like a bad thing For some I just heard Somebody had to leave a Friendship to go fight some fires or had to leave their childhood home To go fight some fires There might have been a reconciliation with someone that you had in the past and then they had to leave I Just heard to go fight some fire or some kind of destruction or a building Something here and that just came to me out of nowhere Like there was some kind I feel like some of you were getting to know You and another person were getting to know each other and then something catastrophic happened in the past and you had to separate Hmm some of you met your soulmate or this person feels like you know They met you and maybe you started dating or there was something going on where there was this energy of coming together But then it was like Now for others this person might have been Doing something I Just heard like some kind of rescue thing or something and you met them there Okay, so I'm not gonna keep going on with that that just feels more like a qualifier Let's take a look and see what this tower energy is because I'm picking up that oh Somebody came in like to rescue there was a did they somebody came in to rescue you rescue you from something It's very bizarre. Okay Let's see Okay. Oh the aid of swords with the tower there was like a trap. All right, that's a storyline Spear wants to go to storyline somebody was trapped Or maybe you had something happened and this person might have been in military police or Fire or rescue or something you had something happen and this person came Almost sounds like Superman and Lois Lane, I don't even know But there was an energy of like I feel like Damsel in distress or somebody was in distress Okay, let's take a look at this. It's so weird how these readings come out this night of swords And it doesn't have to be a catastrophic like physical thing. It could very well have been like a situation that happened And your person I feel was trying to help you with something in the past Okay, the wheel of fortune here Right wheels were moving this person that feels very much like this person if you were going through something in the past And you guys separated in the past this person Whoever they are was coming in to help you and it was like taking quick action It was like a turning point. It was all it feels like in the past It was like it was the very thing they needed to come in and help because that's six of panic or six of cups This could have been somebody from your you know from your past Returning back to you in the past to try and come in and help you with something It almost feels like there was a purpose Hmm Let me just get this six a Look Three of swords Yeah, I feel like Virgo you were going through some kind of heartbreak situation or something. Maybe this was a friend Or someone that came in and was trying to like bring you kindness and help you and you know you know like Counsel you even or give you good advice or but this person Like I feel like their intentions were really good And they really wanted to get to know you and deepen this bond Maybe you some of you might have had to separate from something or something collapsed or fell apart or something You were in a distress type of a situation and this person came in to try to help But they didn't just come in like oh, okay, let me see if I can help I'll get back to you This was more like either they got on a plane train automobile a horse. I don't know they came rushing in Try to help you with something Like they basically the message that I'm getting in the past is This person tried to be there for you and maybe you guys separated while you were getting to know each other or something happened Okay, which is bizarre. So the present energy here you deserve love You were lovable that was in yesterday's reading and also honeymoon. I feel like In the present when the time is right, this person is going to try to sneak away with you You know that 10 of cups there Wow, this person totally loves you and wants to try to support you in some way Virgo and They're trying to be very patient For some of you this could just be a friend That maybe you don't realize that this person's got like a thing for you Or maybe you do know let's take a look at this Temperance card because this is like divine timing for me with that temperance card like love is coming Right and they're waiting for the right time because she holds the two cups for the two of cups It's like the angels behind the scenes making things like Finding a way to blend you two together like you know, it's kind of like when you're cooking, you know You're mixing up the ingredients like the angels bringing you two together. This is divine love here Coming into harmony with one another You know coming into balance, but this person is kind of like being very Moderate with you. Some of you might already be in a relationship or this person is But it's like I feel like they want to run away and like Spend some holiday time or just go in like a pseudo honeymoon or something Or spend some time with you. I mean could this person be cheating? Well, it's possible people do it You know or they just are Not happy where they I feel like I mean for this person to like go all out to try to help you with something You know it very well could be that they're trying to sneak away, but let's look at the temperance here Yeah, ace of swords.  Hello Emperor This person's coming in with this Emperor energy so that's Aries energy Excuse me, but they're coming in with like very Above-board Honest full of integrity Truth dependable this person's reliable So this could be someone from your past Or a friend or someone like that Maybe they're telling you that the person that you're with they want to they don't want you to be with that person anymore You know They're gonna also tell you that the person that you're with is just trying to have Passionate one-night kind of thing with you Although You know, I mean you're gonna have to like really sort that out if that's the truth because I feel like somebody From your past or whoever this person is yeah, some of you might have a decision to make Okay They might you might but I also feel like this person They're so crazy about you It's insane this person may even travel to your home or they may even leave the person they're with and they may tell you that Their person is with somebody else and they just they want to they just need a vacation The eight of cups is like temporary separation You could meet this person might be in separation right now They may have been in separation From somebody else in the past when they came into your life and you guys are getting to know each other I feel like they still are in separation and they want to spend some time with you and enjoy time with you gosh Let's take a look at the future because that's really heavy. So healing family issues and worth waiting for So there's a need to forgive a parent or parents But divine timing, I mean this Card that's what I feel like is going on here Look, they're both the same the angel wings, you know, this is temperance again divine timing and worth waiting for I feel like two people are being brought together It's like his mat Okay, let's see here you go with the two of ones awaiting energy This person You know if you're with someone or if you just are not sure or you have Family involvement and stuff You got some stuff going on. I feel like this person wants to try to give you as much emotional support as they can in your life But I feel like they're not gonna press you Because you may have some things that you have to like heal or work on family issues Maybe they do Okay, vice versa but this person feels like this relationship is worth waiting for and they They feel that you've got some heavy burdens or stress or exhaustion or stuff like that going on They'll wait for for things to change They'll wait for that transformation and I have that ending in a new beginning with you They don't want to push But they do want to tell you the truth Virgo Let's take a look at this two of ones. Okay, King of Pentacles Excuse me, some of you might be Connected with some another Virgo a Taurus or a Capricorn as well right now or talking to one But I also feel like the person they're waiting in the sense where they're going to stay very stable Right, or you could be dealing with them. Yeah, like I said of another earth sign But they're going to show like they're gonna patiently wait. I feel like they're gonna put something out there to you going forward like Maybe travel plans or going forward or ask you to make some kind of a decision or a choice But I feel like they're gonna wait if this is your energy for you to Process things because they kind of sense that you need to do that because you're very practical and grounded Like Virgo, I don't feel like you really want to get involved in any kind of dramatic relationship if there's like an X situation that's still on going Excuse me Sometimes when I continuously talk Vibrates whatever's in my throat comes up. I don't know if you guys noticed a lot of readers have that issue going on Talking is like exercise in itself. I should have like Olympic gold medal for throat muscle Building I don't even know what to call it Um, so let's take a look at the ten of wands. Okay.  You're stressed. They don't want to put you put more stress on you Virgo But they do they will patiently wait the king of pentacles is definitely a waiter He does not rush into anything. Let's take a look at this death card here Okay, the four of cups here Yep, look at this Look at that boy there the love is coming in this person will wait for you to like Accept the love offer because of the four of cups in the reverse Would definitely be like a new option a new outlook or direction But in the upright, it's more or less like feeling unfulfilled They know that the connection that either you're in or the family situation or whatever's going on in your life is very Unfulfilling right now and they want to be the one to sweep you off your feet and continuously be your Supergirl or super boy, you know But they understand that this is going to be something for you that you're gonna have to work through You know like you're gonna have to make those changes So this is a very interesting read. I'm gonna pull some love messages here It's funny sometimes how things come out Or you both are in Situationships or in relationships that Neither one of you is too sure about Or one just got out of one and one is still in one or vice versa However, it resonates for you. You can just leave a comment below what your situation is but This person definitely feels like you deserve to be loved and cared for I'm hearing the right way, you know, because that emperor comes in as like an alpha Male or female it doesn't matter The emperor is basically like he's got all elements of the Kings You know, and he's very well respected and very strategic You know and a good father figure or is exemplary in his behaviors and actions He he is someone who will respect you and care for you Okay in the upright now some of you were like well my emperor wasn't like that Well, maybe he was a knight of wands and maybe you just wanted him to be an emperor All right, let's take a look here Yep, I can't stop thinking about you Okay, just so you know the emperor also is Not just Aries, but it is Mars energy so it can also be Scorpio energy So I will tell you there's a lot of Scorpio on here. So a lot of you may be, you know connecting with the Scorpio It's heavy or they the person has that heavily in their chart somewhere Okay, however, I try not to when I mentioned signs. I want to focus more on the energy of the signs Because if you don't have this person's Zodiac sign or their needle chart, you probably really are gonna just throw the reading out the window, but don't The signs mentioned are only for those who are like absolutely. That's me But if that doesn't resonate for you, don't even sweat it Okay, sometimes I stay awake thinking about you. Oh, wow Virgo this person Look, that's twice. I Can't stop thinking about you. Sometimes I stay awake thinking about you like this Virgo.  I remember every detail of that day What day is that Virgo? Please comment below and tell us what day You came closer than anyone Wow Virgo, there's something about this connection that this person Seems like they would throw Everything away or give everything up to be with you They couldn't let you get close to them. Okay, for some of you that is because there may have been somebody else You might have been getting to know this person in the past And then they had to rush back to someone in their past Or an ex or someone they were dealing or still in separation with that they had to handle things and then you guys just That might have stopped because they may have had responsibility somebody else in their past But it seems like they're they still like Want they want you and that doesn't have to be an ex it could have just been like a family member or a friend or Maybe a daughter or son or a child or something like There was a reason to separate Okay, it was my fault, but I blamed you. I don't know who that's for But I'm gonna leave that right there. I feel you leaving me behind Okay, you might have walked away and just gave up on this But I feel like this person is going to be showing back up again. They love you unconditionally Virgo You It just feels to me like this person is just in love with you Virgo They're just in love Let's take a look at some charms So happy I brought the charms back in here reading You guys really seem to like them. Okay, we have um A ship's wheel Oh, and we have an airplane travel travel Travel travel. I think I said that in the beginning of the reading traveling by boat airplane horse um Train whichever it might be this person is trying to come back to you Maybe they live at a distance. Maybe they're a captain They've piloted maybe they're like an airplane airline pilot or they fly planes or they Do something on boats Um, could have been military as well It might be A plane like a trip coming up Are you recently were on a trip plane and you're you came back I Want to like go on some kind of honeymoon or maybe a cruise Could we talk about that planning?  No, we have a four leaf clover a gold four leaf clover Somebody has this is like a paperweight a four leaf clover or something it might be engraved. This is This is like a lucky charm. This could have something to do with ireland or someone's irish Or from ireland or is in ireland? And then we have the word love, okay And that's like transcribed so maybe you have that written somewhere on your body or you're writing it with a pen or Um Oh This could also be philadelphia Because the city of brotherly love has l o v e right there in the city of philadelphia, right? That just came to me. So maybe somebody's from philly or It has recently been there. Okay. Um Hmm I want to get one more Oh, oh my goodness This looks like some kind of a cathedral now. It looks like rome Or it could be the vatican or it's interesting because I don't really say when I look at this, but I also feel washington Or some kind of palace I just also heard like somewhere in um Somewhere like germany france Spain Denmark I heard Uh england Very important like prestigious kind of either a government building or And very old building. Oh, this could even yeah, this could be william penn I'm just picking up philly energy here with this somebody's flying to philly or flying from philly All right, i'm gonna leave your reading there very interesting read come back tomorrow There'll be another reading for you. I hope you enjoyed that vergo And again, if you want to get a personal reading for me, there's a link in the description box below the video Please do hit like share and subscribe on your way out and I'll see you guys later. Bye


This algebraic geometry lecture will be about products of affine and projective varieties. So we will first do products of affine varieties, which is fairly easy. First of all, if you want to take the product of affine space a m times a to the n, this is pretty obviously just going to be affine space of dimension m plus n. We've got a pretty obvious map if you take, if you've got points x1 up to xm and points y1 up to yn. This just gives you a vector x1 up to xm, y1 up to yn, not very difficult. In terms of coordinate rings, you've got the coordinate ring here, which would be the ring of polynomials in m variables, and you've got a ring of polynomials in n variables. And the ring of polynomials of this affine space is just more or less the tensor products of these. So we've got kx1 up to xm tensored over k with ky1 up to yn, which is just more or less the ring of polynomials in all these variables. If you're looking at algebraic sets, it's not much more difficult. So I suppose we've got an algebraic set defined by an ideal i in this ring, and suppose we've got an algebraic set y defined by an ideal j, so let's call that algebraic set x, then x times y is just the set of points divided by the ideal generated by i and j in this product ring. So i and j are both ideals of this, and you can just take the ideal generated by them. So that's pretty straightforward. Now let's try the analog from projective space. So the first question is, what is the product of projective space of dimension m and n? If we can figure this out, then it's not too difficult to do the case of projective sets. Well, is it pm plus n? Let's try the first obvious guess. And the answer is no. The problem isn't pm plus n. In fact, this isn't true even topologically. For instance, p1 of r times p1 of r, the reals, is just a torus s1 times s1, so it looks something like this, so it's a surface. On the other hand, p2 of r is non-orientable, so I can't really draw it because non-orientable surfaces don't fit in three space. So topologically, these are quite different things. Similarly, over the complex nums p1 of c, p1 of c, is isomorphic to a product of s2 times s2. In particular, the second homology group is z plus c, whereas p2 of c can be written as a union of a point plus a copy of c, plus a copy of c squared in a nice way, and you can read off its homology from that, and its second homology group is just z. So p1, pm times pn and pm plus n are not the same. They're still closely related, in particular, they're birational. So this contains a copy of a m times a n as an open subset, and this contains a copy of a m times a n as an open subset, too. So these have dense open subsets that are isomorphic, which is more or less what is meant by birational. So they're similar but not the same. So let's try copying. So you remember we had a map here from a m times a n to a m plus, and what happens if we try and copy this for projective space? So we take x0 up to xm in projective space, pm, and we take the point y0 up to yn in pn, and let's try mapping this to x0, x1, xm, y0, up to yn.  The problem is that this has to be the same point if you multiply all the x's by constant lambda, but if you multiply all these x's by lambda, it's not the same point in p whatever this is, n plus n plus 1. So this construction just doesn't work at all. Cross it out. It's just a blunder. Well, the trouble was that these numbers were not homogeneous of the same degree in x. So these have degrees 0 in x and these have degree 1 in x. So in order to get a map from x from the x's times y0 up to yn to something, we've got to arrange for everything to be of the same degree in x and y. Well, there's an obvious way to do this. We can just take x0, y0, x1, y0, xm, y0, and we just keep on going x1, y0, x1, y1, and so on. All the way up to xmyn. And this now gives us a perfectly map from projective space pm times pn to, well, there's a bit of a problem here because this is projective space of dimension pmn plus m plus n, which has completely the wrong dimension. So this map is certainly not on 2. So if we call this, well, it's not on 2. We'll see in a moment that it's a closed subset. And to see it's a closed subset, we want to write down some relations between all these. So let's number these as what? w0, n0, w1, n0, and so on, wm, n0. All the way up to wm, nn. I guess that should be coons, not commas. And now there are some obvious relations between all wij's. So we've got wij is equal to xiyj. So we see that w... wij times wkl is equal to wi... Let me just get this right around. This is a bit confusing. wik times wjl. Wait a minute, I think I have got confused. Let me see, wij should be wil and that should be wkj. Incredibly easy to get muddled up about this. Okay, so we've got some relations between the wij's. So we would like to check this as on 2.  So if you've got a point in k to the m plus one, another point in k to the n plus one, then you can get a point. So let's call this point v and this point w. Then we get a point v, v tensor w in the space km plus one tensor kn plus one. So a point of projective space is defined by non-zero vector in m plus one-dimensional affine space. So v and w more or less represent points in projective space if you think of a line spanned by v rather than w. So we can find a point in this space here which represents a point in the corresponding projective space pm plus n plus pmn plus n plus n. And if you unravel everything, you find this map taking v and w to v tensor w is more or less just this map down here. So this is a sort of computational way of defining this map and this is a more abstract way of defining the map. It's just taking a tensor product of vectors. Anyway, so we've got a map from pm times pn to some subset and we would like to know is this subset defined by all these equations here? Well, we want to show the map is onto. So we want to show the map from pm times pn to the vectors w naught, nought, octon, wmn satisfying w i, j, w k, l equals w i, try and get it right around this time, w i, l, w, j, w k, j. Yeah, it's still getting confused by this. So we want to show this as onto. So let's take a point like this. We can assume w naught, nought equals one because one of these w i's must be non-zero and just by rearranging coordinates we may as well take it to be w nought, nought. Then we find w k, k, l is equal to w nought, l times w k nought, which is equal to y l times x k assuming which we'll write as y l times x k. So all these w k l's are determined by the numbers w nought, l and w k nought and we can fix these to be anything we like by choosing the y's and the x is correct. So any point satisfying these equations here is in the image of p m times p n. I should say this map is called the Segre embedding. So we've managed to show that the products of two projective spaces is a projective variety given by a surprisingly large number of equations in a space of quite high dimension but whatever it works. As I said, now that we've embedded product of projective space it's really completely straightforward to show that the product of any two projective varieties is also a projective variety just by more or less copying the argument we did for affine spaces. Anyway, let's see what this map looks like in the simplest non-trivial case. So let's try and embed p1 times p1, see what happens. Well, here we've got points x nought x1 and here we've got a point y nought y1. So we're going to map this to p3. So this is 1 times 1 plus 1 plus 1 and we map these two points to the point x nought y nought x nought y1 x1 y nought x1 y1 in p3. And if we call these numbers, let's call these numbers w nought w1 w2 w3. We find there's only one, we only get one relation between these, which is w nought w3 equals w1 w2. So this is a quadric in p3. Now if we're working over an algebraically closed field, any two non-singular isomorphic, it just means a quadratic homogeneous degree to polynomial and saying it's non-singular means it essentially means it must use all the variables and in fact any two non-singular quadrics by completing the square or something from linear algebra must be just x nought squared plus x1 squared plus plus x n squared equals zero. Possibly let's say algebraic closed field of characteristic not equal to two because things always go wrong in characteristic two and I'm too lazy to think about what happens in this case. So we see over again over an algebraically closed field of characteristic not two, any quadric in p3 is isomorphic to p1 times p1. In particular it's got two sets of lines on it because p1 times p1 obviously is two sets of lines you can fix a point in this and then you get a lot of lines there or you can fix a point there and then you get a lot of lines in that one. For example, suppose we take a sphere x squared plus y squared plus c squared equals one. So this is over the real numbers this is just a sphere and what I'm going to do is I need to claim that this sphere actually has two sets of straight lines on it. That seems a little bit odd because a sphere in r3 obviously doesn't have any straight lines whatsoever on it like I don't mean g or d6 as in differential geometry I mean actual straight lines. Well it has lines over the complex numbers it doesn't have lines over the reels of course for instance I can give you one example of a line there are a couple of there are a few lines that are easy to spot we can just set x equals one y equals i times z. This is obviously a straight line in the complex numbers because all the numbers are just linearly dependent on z and it obviously satisfies this equation here so I'm going to leave it as an exercise find all straight lines on the sphere x squared plus y squared plus z squared equals one over the complex numbers of course. Might want to notice that this equation can be put into more or less the same form as this equation if we write it as x plus iy times x minus iy equals one minus c one plus c. So if we homogenize we would change these ones to some variable say w and then this would be something times something equals something times something which is optimal linear transformation the same as this equation here.


okay why won't my hang on don't record yet because now I can't there we go okay so welcome to resumes 101 uh thanks for coming today we have a pretty good crowd so that's great um well oops my thing is going crazy hang on let's go back there we go so uh to start again what is a resume okay so we're resume in short is a demonstration of your qualifications and suitability for the type of position or employment that you're seeking okay it outlines your education your experience and your skills it's also a summary of your abilities accomplishments and attributes and we're going to go into this in a little bit more detail and this is really important it's your opportunity to stand out from other applicants so you want to use it to the best of your ability uh here's some just overarching tips for you to keep in mind when you are composing your resume don't think of it as a list of job descriptions but you want to think of it as a list of successes skills and strengths some people go into great detail describing what they did and it's better to focus more on sort of a summary of the skills you were utilizing and if there were any positive successes during that experience for you to highlight those you don't need to list every single thing that you did you want to think about how you did your job as opposed to what you did in terms of the what you really want to focus like I said above on the skills not so much the duties unless the duties are really implying a skill so your resume should be visually pleasing you want it to be consistent consistent concise and professional uh you also want to leave some white space on there keep it uncluttered and the rule is generally one to two pages but those pages should be full so you don't want to do one and a half pages they should be full pages so if you're getting like one and a quarter you you're going to want to see how you can be a little more concise and get that on to one full page this is important think about information architecture you want to create a hierarchy and and a structure to your resume and stick to it dates have one format job titles have a format places of employment have their own format and you want to repeat that structure through your resume so it's really easy for the viewer to find the information they're looking for you want to focus on skills and experience that are relevant and when I say relevant I mean relevant to the particular job that you are applying for and you really want to punch those points and the best way to do this is I usually recommend people create a master resume so that means everything that you've ever done and it doesn't matter how long that resume is because you're not going to use it you're going to use that resume as a starting point because you're going to customize it for each specific job that you're applying for so it'll get into that one or two full pages by the time you're submitting it and I'm going to do a little demo on this a little bit later so you can kind of see a an example of of how to do this okay there's a few different types of resumes uh chronological resume that lists all experience in reverse chronological order so that means the most recent job first and then moving back in time uh functional resume and that's where you split things out into um headings like communication skills and other kinds of skills and followed by a list of places that you worked and you would also have education there but we'll go through what order you would place things in a minute um most often I would recommend a combination of the above so you're going to list most recent first but you're going to separate things out into different categories and I'll show you what I mean by that okay so starting from the top generally of your resume this is what you want to include a correct contact uh listing for yourself and that includes your name your address your email you want to put your uh links to your online presence there not necessarily social media but more like your online portfolio um make sure you list a phone number and make sure that somebody can leave a message at that phone number um you don't want somebody to call and your messages are full uh then you're there's a sentence or a listing that happens right under your contact info that I'm going to call highlights of qualifications this used to be sort of a career objective that that's a category that it we're sort of moving away from now it seems like what's more helpful in that space now is what I'm referring to is a career profile you can call it a professional summary you can call it a professional statement something like that and it's really can be a sentence that sort of demonstrates your suitability for the job that you're applying for and with that you're using that resume for and I've got some examples that I'll show you there's a lot of different ways that you can do that then you're going to want to list your education you do not need to put your high school on there um high school completion is implied by the fact that you're listing your post-secondary education and you can put your current degree up there you can just project the graduation date forward or you could put to present with whichever you want okay skills is usually the next heading you can get to and I this is a category that a lot of people miss and it's a really key part of your resume and this is where you can really punch up in point form how you match the skills that they're looking for on the job posting and that's really really important to do then they can find it really easily it's not buried in a description below a job somewhere you're going to list your experience and this is it can be job experience but it can also be other types of experience so sometimes what's helpful is to separate this experience section out into related or relevant experience and additional experience what this does is it it really helps you pull the most relevant experience right up front and center for the viewer to find instead of it being buried down there in a reverse chronological order you can still go in reverse chronological order but you know you might be working at Starbucks and you don't want that to be the first thing that they see it's super valid and valuable to show that you worked at Starbucks there's a lot of good skills that you gain working in frontline services like that but now you can move Starbucks down lower in document to additional experience and I'll show you later what I mean yeah you can totally include class projects and collaborations whether they were for credit or not just your own projects that you're working on and that really helps if you feel like you don't have a lot of related experience you do actually have related experience it's just not in the form of a professional job so I demo that in some later you'll see it and it doesn't matter if you were paid it's okay to list things as relevant experience even if you weren't paid you want to put some volunteer experience there if you have some it's always positive to include volunteer experience in your resume it looks good and then you might have some additional information that you want to list their achievements and certifications you might have that are relevant to the position okay now we're going to talk a little bit about skills okay so I've put together some lists of skills uh skill sets and and don't don't get overly focused on how I've titled them you you may want to title them in a way that works best for that job posting and and you'll see what I mean but you know for example here's some example of some good communication skills that you might want to list um I won't reread them all out um it might be helpful to highlight team and leadership skills if that's something that's they're looking for in the job posting um critical thinking skills these are really good and you know with your education at Emily Carr don't underestimate these these are very valuable skills to highlight in a job application they're really really um hireable skills in the in the work market um here's some organizational skills that you might want to highlight uh some more now these are also things I often see students in my advising that are are forgetting to list these types of skills so I'm just going to pull them all up here but um on the left here you can see creative skills and studio skills um you could even combine these and say creative and studio skills and then list uh you know a combo of things but these are really great um you know collaboration which was in the last slide is a great one um you know the fact that everybody experiences um critique here that's really valuable in the workplace that you know how to effectively take feedback and incorporate it into your work it's really important skills so don't forget about that and then there's um obviously sometimes you can list software skills as technical skills and maybe combine it with the studio skills um and I've put some interpersonal skills there too take your cues from the job posting as to what skills you think you could best highlight you don't want a list of like 30 things you just want sort of highlights okay so let's get into some example resumes okay this is in our handout and I'm going to put the handout in the chat it's called how to get hired and we have another one called resume builder um at the very end I'll put it in the chat um so that you can download it from there but you can also download it from the resource section in arts work um they're they're all there too so this is an example of a resume that um is for somebody very early still in their education they really don't have any relevant professional experience so um I've kind of added these categories of um you know this is this is kind of skills but I've I've listed this is a student who's focusing on animation and illustration I've even listed relevant course work here because there isn't a lot of work to list yet uh notable projects here um the skills are here but I've just focused on um computer that could actually say software skills and studio skills and some leadership skills here uh are good to mention because they happen to be in this person's wheelhouse and you see here how I've moved the you know the London drugs and JJ bean experience way down here into additional it's still valuable but if I used just uh experience as one category then they would be way up there at the top and they would be some of the first things that the um the viewer would see so they're valuable but now we can move them down here so that because all of this is relevant to professional creative work and this is just kind of a bonus so um that's just kind of a demo of that um here's somebody who is um in design and um just a small note about design resumes it's good to highlight your design skills in a design resume and I mean I'm not a designer so don't judge me on this one but I was kind of attempting to do that but you just want to make sure that you don't over design it you don't want the design to overshadow the information that you want people to find okay so I've listed here skills and ability and technical skills and I've kind of combined software and studio skills in here um and then here's the degree the education listed and you can see how the information I've gone forward sorry you can see how the information here is very easy to find you know it for somebody viewing it they don't have to like do this deep diagnostic into the um resume to find the information that they're looking for uh this is actually this is kind of a visual arts resume and it's a hybrid between uh an artist CV and a professional resume so this would be if you're in visual arts and you want to apply to internships and art related jobs and you can see how at the bottom the select exhibitions are listed very much like an artist CV and I'll talk a little bit about artist CVs later um but the professional experience section is it follows more of a format of a resume you know it's got freelance work it's got student monitor work for Emily Carr that kind of thing but it's listed more like a resume than an artist CV and the studio expertise is right front and center even above the education there okay just a couple of things to keep in mind that you do not want to put on your resume um you don't want to put your age your gender your nationality or a picture of yourself um you know it's fine to put your pronouns I think but I think that these types of categories are in certainly in Europe and other places these are standard but in North America it's not standard to have this information on a resume you wouldn't include it so if you're applying for positions in North America you wouldn't want to include that kind of information um references so some people put references on their resume that's not where they belong um they used to be a sort of a trend of putting at the bottom of your resume references available upon request that trend seems to have faded so you don't need to list anything to do with references on your resume but what you do want to do is prepare a separate sheet that lists your references name title place of employment phone number and email and if you are applying for positions just reach out to the the folks on that document and make sure that they know they might get a call um you might want to send them the copy of the resume um that you're using for that application and you might want to give them a line or two about oh this is maybe even send them the job description just so that they're ready for a call if if uh if you're being shortlisted um okay customizing your resume this we talked about this earlier and this is kind of a demo it's important to remember that the resume doesn't get you the job it it gets you shortlisted hopefully for an interview or at least for the first stage before an interview could be a phone call um the number of resumes that employers receive for postings can be over a hundred or more um you know some of the pretty hot internships they could easily get hundreds or over a thousand applications so please keep in mind that your resume is going to get like a 30 second scan this is why it's so important that you're punching the information that they're looking for and not making them look for it because they might miss it you know imagine reviewing a hundred resumes yourself after like the 20th you're scanning seriously um sometimes resumes are scanned by shortlisting software so this is why it's so important to look through the job posting for the keywords and phrases uh that that show you what the employer is looking for um and then you're going to repeat these in your resume because if it is being scanned by software you're going to want to make sure it picks up those keywords and phrases okay here's a job posting this is we're going to kind of work through this so this is for um a design intern at bc children's hospital and this job was up on arts work a couple weeks ago um so what the exercise i would recommend is that you go through and you highlight what you interpret as the keywords in that job posting so i've done that you'll find those in the job description you'll find it in the list of qualifications that they're looking for and then sometimes they list uh you don't have to have this but it's a bonus kind of that nice to have so i would certainly highlight those two and see if there's any way if i have that experience that i can demonstrate it in my resume so from that i make myself a list of these things and then this is kind of my roadmap for editing my master resume down to make sure that i've included all of these things and and used some of the keywords that they're looking for so remember our graphic design um resume example so now you go through your own resume and you highlight where you've mentioned it and then you just go ahead and put a tick next to your list of keywords that was on the previous slide you may want to rephrase some things like you might notice at the top here um emerging visual designer with a focus on innovative brand connection uh creation i've i've edited that and i changed it to emerging design methodologies and technology because they mentioned that in the job description so it's a different way of saying the same thing but i'm going to use their words uh same with down below under the find me infographic here um you know a group project created an infographic as part of a group project i've changed group project to team because they use the word team like three times in that job posting so i'm going to use their term um then i'm going to go back after i've worked everything in and i'm going to do another pass so i can see that anything that is not highlighted i've worked that in and then i'm going to look and say oh i missed a few so at that point i can work those into my resume or i can say okay i'm going to mention that in my cover letter then instead um the ones in yellow were those nice to have so i don't need to worry if i don't have that experience i don't need to speak to it because it was just something that they mentioned would be a bonus okay now i'm going to talk just a little bit about cv's as opposed to resumes so a cv would contain information um that would not then generally be listed on a resume so academic and professional information like publications award scholarships um or grants you received teaching experience any workshops courses programs that you taught even if that was at a day camp or something it's still valuable um some you know if you had any professional memberships organizations or affiliations that you were a part of you would list those on your cv you would also list content that is public that would not necessarily be listed on your resume like um your exhibitions and you can list those group exhibitions solo exhibitions select exhibitions however you want whatever seems to work best for the the scope of experience you have with exhibitions um screenings and film festivals if you are in film or animation you would list those here uh any residencies you'd participated in commissions uh collections that um you know if someone had purchased your work and um collaborations and projects like for instance a public art project a mural or something like that you would list that on your cv couple of example cv's so here's an artist cv as someone who just finished fourth year so um you know uh it's good to get involved in um sorry my phone is ringing I apologize um it's it's good to get involved in things while you're in school uh everybody participated in the foundation show so you can definitely put that down um you know the woo newsletter letter is always looking for submissions so that's a great thing for you to submit your work to and then it's a great thing that you can list on your cv a couple of honors and awards down there at the bottom uh this is one with more of a um a film focus so um and it's it's actually a little bit more of a hybrid because you can see it has the professional statement there at the top um and some um technical skills and things like that but it includes awards and achievements so um it's it's a bit a little bit more of a hybrid uh it really depends on what the job posting is asked for sometimes they will specifically ask for a cv um an artist cv or something like that so um but don't be afraid to hybrid hybridize it a little bit like this um before we finish I'll just see a little bit about your application as a whole things to keep in mind um it's really important that you read the application thoroughly look for instructions and make sure that they follow it if they've asked for things uh they they've asked for links make sure you give them links um and if they've asked for specific formats then give them that make sure that you follow the instructions um you definitely want to begin early and apply early don't start your application the day it's due you won't have time to review it and and um also it's really important to note that certain postings may have a closing date but often they will close early if they reach their threshold of applications so don't wait till the last minute it's good to just get right on that and get that in early we even have postings on arts work where um the job appears we post it and then it disappears and we have to pull it down and we've estimated a a closing date because the the job didn't list one so just be aware of that definitely reread in uh read and reread the position um that exercise earlier I can't stress it enough you want to make sure that you've addressed the skills and experience that they've asked for in your application um it's really important to send your resume and cover letter and examples of your work if they ask for that as one PDF all is one PDF to avoid people having to download and and keep opening different documents if if you have 200 applications that's a huge time waste for them um you should always include a cover letter with your resume it may not be requested in the job posting but it is implied and it really does give you an advantage over other applications that didn't include one um we are offering a presentation on cover letters tomorrow presented by our director Shannon McKinnon so I really encourage everyone to attend that one too uh if you can't then we are going to hopefully put that up and on the arts work resources page as well so you can you can watch the video later um I can't stress this enough either proof read your application and get somebody else to read it um you tend to miss your own typos uh so it's really important for someone else to um to look at it it can be a friend a family member the writing center will review them and also us uh you can make one-on-one appointments uh with us um but don't send it to me if it's due at four o'clock and you send it to me in 330 and say can you review this before the closing's in an hour because um I might be in an advising session or something and I likely won't have time so if you can't get me or you can't get the writing center at the very least try and get a couple of other people to to just read it over for typos before you send it um that's it for my presentation um I already introduced my colleagues Jeff and Shannon and just to remind people that we are available for virtual advising that would be with me and you just have to email co-op at ecuad.ca in order to um make an appointment and I'll I'll leave that slide up okay I'll stop talking Jeff any questions just pop them in the chat okay just leave your microphones muted but pop it in the chat and Jeff can tell me what they are no questions no questions okay I was really that thorough okay so just lane do you want me to um to to pop something into the chat yeah I can do that right now how to get hired and the resume builder absolutely and how to get hired has a little bit of info on cover letters too there's actually some info repeated over those two documents um so yeah oh I see a question okay I see a question when a company has a requirement of three years but you haven't had enough experience is there a way to convey that through the cover letters um if you haven't had enough experience I guess I would say and Shannon might want to add to this my advice would be don't pretend that you have it all boils down to what you consider experience you know if you're working on class collaborative projects say in design like that bc children's hospital job posting then that is experience but if they say three years of professional experience and you have zero then you can't really pretend that you have had that you can refer to yourself as an emerging designer just finished your degree but you can't really say I have three years of professional experience if you don't Shannon do you want to add to that um no I agree with you I but I think that you can use your your class projects as experience so when you but you yeah because they'll catch you out on it and it happens so you you have to be honest in your in your resume so and you really do um I see another question here could you show the slide between the two types of resumes from Anita uh okay so the two types of resumes do you mean between cv oh do you mean it's the resume examples yes yeah okay I'll go back to that slide well um you guys are looking at this question oh my animation sorry this is probably not the most so um yeah and somebody asked a question about um being in foundation this answers it too yeah absolutely and so this resume is a good one to um have a look at ester for really early um educate early in your education uh I mean in foundation you don't even know your major yet but you have taken uh creative process class a studio class you know you can you can list your project work in there that that's fine and as you move through your education and you get more experience then you're going to replace those uh you know and you're going to remove things like relevant coursework because it's you're going to have actual um project experience that you can list instead um okay so I'm going to flip to the next resume just to show those those ones again this resume is actually in the handout this one is not but I'm I'm going to try and add it uh some more resumes we're actually reviewing those resources um hopefully in the spring so um this one I just made for the presentation so there's a design resume okay any other questions Jeff um if I have an award from an international competition but I received it when I studied in middle school it's kind of related related um creative writing competition um can I include it I just answered yes in my chat so I would say yes and I do I agree with Shannon my director um because and I would really look again at the job posting particularly if writing is part of the job description and I think it's great to demonstrate that you got an award for your writing skills anything else Jeffy um not yet uh there's a question here that Delvin is saying that she's there having problems downloading so maybe just email us and I'm going to put our co-op email to co-op so yeah thank you also Jeff if you could put the arts work URL there in the chat um those resources are available for download among others there's other resources there um on arts work on the resources page I'm just scanning here okay everybody's thanking me you're very welcome and don't forget that um really you can take what I've talked about you can look at the handouts um don't be afraid to google things like you know design resumes and and kind of have a look at a scope of um of what's out there and um you know and then do a draft and then make an appointment to come and see us and we can go through it together and it's great if you bring the job posting because it really helps you kind of need the job posting because you want to tailor it to that um I see a question here will we be able to download this zoom meeting as a video um yes eventually um we're still working through the technical so this so we're going to give the presentation tomorrow and then we're going to get it into a format that's postable and we're going to try to get it up in the arts work resources page by the end of the year and then hopefully at some point in the spring we're going to try and create a resources page on the website so you don't have to go into arts work to get them but right now we don't have that uh we don't have permission we're not allowed um we don't own that part of the website uh okay so that's great thanks for your questions I guess we can stop record