Hands-On Defense: Markus Schober on DFIR, Labs, and Building Better Blue Teamers

https://is1-ssl.mzstatic.com/image/thumb/Podcasts221/v4/44/58/16/4458165e-5d4e-004e-b1ab-c6672973b197/mza_5716674385327015277.jpg/600x600bb.jpg

Simply Defensive

Simply Cyber Media Group

36 episodes

2 days ago

Join us for Simply Defensive, a podcast dedicated to exploring the world of defensive cybersecurity through the lens of real-world experts. In each episode, we'll interview leading professionals from the cybersecurity industry, delving into their experiences, challenges, and innovative solutions. Whether you're a seasoned cybersecurity veteran or just starting to learn about the field, Simply Defensive offers valuable insights and practical advice to help you stay ahead of the curve. Tune in as we discuss the latest threats, emerging technologies, and best practices for protecting your organization from cyberattacks. ========================= Connect with your hosts: Josh Mason: https://www.linkedin.com/in/joshuacmason Wade Wells: https://www.linkedin.com/in/wadingthrulogs ========================= Simply Cyber empowers people who want a rewarding cybersecurity career 💪 ========================= ========================= All the ways to connect with Simply Cyber https://SimplyCyber.io/Socials =========================

All content for Simply Defensive is the property of Simply Cyber Media Group and is served directly from their servers with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.

Technology

Business,

Careers

Hands-On Defense: Markus Schober on DFIR, Labs, and Building Better Blue Teamers

Simply Defensive

30 minutes

1 month ago

Hands-On Defense: Markus Schober on DFIR, Labs, and Building Better Blue Teamers

In this episode of Simply Defensive, Josh Mason and Wade Wells sit down with Markus Schober, founder of Blue Cape Security, to talk all things digital forensics, incident response (DFIR), and why hands-on training beats theory every time.

We dig into:
🔹 The hidden value of building your own cyber range
🔹 How IR pros train using real attacks (and why they need red team skills)
🔹 Eric Zimmerman's forensics tools and practical lab setups
🔹 Ransomware war stories from Fortune 100 response
🔹 The role (and limitations) of AI in forensics
🔹 How to break into DFIR as a practitioner — not just a paper tiger

Whether you’re building detections, teaching DFIR, or just figuring out where to start, this one’s for you.

👇 Timestamps https://www.bluecapesecurity.com/& Resources
0:00 Intro & ThreatLocker sponsorship
2:00 Markus' journey from responder to trainer
5:00 What makes a good DFIR workshop?
7:00 Building a cyber range that doesn’t suck
10:00 Favorite open-source tools (hint: Zimmerman)
14:00 Consulting vs. in-house IR
19:00 APT10, ransomware, and real-world incidents
24:00 Can AI replace forensic analysts?
27:00 Where to find Markus' courses
29:00 Parting wisdom for aspiring defenders

📚 Check out Blue Cape Security:
→ https://www.bluecapesecurity.com/
→ Hands-on IR & Forensics Labs
→ Certification (coming soon!)

🔗 Follow the hosts:
Josh Mason: https://www.linkedin.com/in/joshuacmason/
Wade Wells: https://www.linkedin.com/in/wadingthrulogs/

💡 Brought to you by ThreatLocker – Secure your business with zero trust application control.