Josh Zelonis – Medium

Josh Zelonis
in
The Recovering Analyst

Your Security Data Strategy Sucks Because You Don’t Have One

Stop managing alerts and develop a successful data strategy. Important lessons from the data economy and how to improve your SOC.

5 min readOct 14, 2022

--

Festive halloween cookies.

--

Josh Zelonis
in
The Recovering Analyst

How I Learned To Stop Worrying And Love… Autonomous Security?

Hating the term autonomous security isn’t going to make it go away. Here’s a guide to understanding the promise and a plea for…

3 min readJun 17, 2022

--

How I Learned To Stop Worrying And Love… Autonomous Security?

--

Josh Zelonis
in
The Recovering Analyst

When Scale Outpaces Human Intervention, It’s Not a People Problem

Manual processes are rubbish. People are slow. Automation is the only way we can keep up with the automation leveraged by our adversaries.

4 min readMay 12, 2022

--

Sprinters lined up on the starting blocks, ready to race!

--

Josh Zelonis
in
The Recovering Analyst

The MITRE ATT&CK Evaluation Needs To Evolve

A recovering analysts thoughts on how MITRE has moved the industry and how it now needs to evolve to support enterprise companies.

3 min readApr 5, 2022

--

Tractor driving into the sunset.

--

Josh Zelonis
in
The Recovering Analyst

Demystifying Zero Trust

Zero Trust is a fundamental approach to securing an environment and no one really understands it… Let’s fix that.

4 min readJun 29, 2021

--

A graphic containing the words “Zero Trust”.

--

Josh Zelonis
in
The Recovering Analyst

XDR Requires SOAR In Enterprise Environments

Don’t settle for half baked SOAR capabilities slapped on an XDR solution when your organization requires enterprise response…

4 min readMay 25, 2021

--

Mosquito trapped in amber, a reference to the movie Jurassic Park.

--

Josh Zelonis
in
The Recovering Analyst

Don’t let Vendor Exuberance Distract from the Value of the MITRE ATT&CK Evaluation

The MITRE ATT&CK Evaluation is published as a scientific data set to enable you to interpret information about specific products such as…

4 min readApr 23, 2021

--

A representation of the attack lifecycle showing that protection, detection, and finally threat hunting are the order defensive technologies work to protect your organization.

--

Josh Zelonis
in
The Recovering Analyst

Can XDR Survive Outside of SIEM?

Analyzing the threat detection market through the lens of EDR, XDR, and SIEM to predict the next 5 years of innovation in the space.

4 min readMar 23, 2021

--

1

Two old steam locomotives, having been in a head on collision, may be viewed as a singular object now.

--

1

Josh Zelonis
in
The Recovering Analyst

Reframing Cybersecurity’s Contribution To The Business

Musings on cybersecurity risk and how the risk equation doesn’t quite capture what we need to understand about business risk.

4 min readFeb 18, 2021

--

“Change my mind” meme of a man sitting at a table with a sign stating, “Likelihood is the most important part of the Risk Equation — Change my mind.”

--

Josh Zelonis
in
The Recovering Analyst

Detection Using Indirect Observation and Indicators of Consequent

It doesn’t always make sense to create custom threat detections when realization of the threat leaves other artifacts in the environment.

2 min readFeb 8, 2021

--

Concentric ripples on a pond showing interaction with the surface of the water.

--

Josh Zelonis

Josh Zelonis

Josh Zelonis is a Director of Security Strategy for Palo Alto Networks, a former Forrester analyst and cybersecurity tech founder.

Help
Status
About
Careers
Blog
Privacy
Terms
Text to speech
Teams