{"id":89,"date":"2023-02-20T06:08:18","date_gmt":"2023-02-20T06:08:18","guid":{"rendered":"https:\/\/kentprotect.com\/?p=89"},"modified":"2023-03-06T09:55:52","modified_gmt":"2023-03-06T15:55:52","slug":"2023-atlassian-and-envoy-breach","status":"publish","type":"post","link":"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/","title":{"rendered":"2023 Atlassian and Envoy Breach"},"content":{"rendered":"<div class='booster-block booster-read-block'><\/div>\n<p class=\"wp-block-paragraph\">(Photo credits: Atlassian, 2016)<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>One-sentence summary: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A misconfiguration by Atlassian allowed SiegedSec to obtain employee credentials and pivot to Envoy, stealing Atlassian floor plans and employee data of allegedly 13,000 employees. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Who was involved?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Atlassian, Envoy, and SiegedSec. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What was the timeline?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">February 15: The data leak was posted online by SiegedSec (SOCRadar, 2023). Confirmation was quickly made by Atlassian (Abrams, 2023).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">February 17: Envoy says Atlassian was breached, pivoting into their network (Abrams, 2023). <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What occurred?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Initially, Atlassian accidentally pushed a user&#8217;s credentials to a public repo, allowing SiegedSec to harvest the credentials and gain initial access into Atlassian (Abrams, 2023, para. 20). From there, SiegedSec pivoted into Atlassian&#8217;s partner, Envoy. Floor plans and employee data for allegedly 13,000 employees were exfiltrated (SOCRadar, 2023). Both parties allege the incident was contained in their own environment and other &#8220;customer&#8217;s data&#8221; was not accessed (Abrams, 2023). Atlassian promptly initiated incident response and disabled the compromised account, effectively containing the incident (Abrams, 2023, para. 23). <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Estimated costs:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Potential incident response costs. Outside IR costs are not clear. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Involved laws: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TBA. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Root cause: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Misconfiguration: public read access of credentials (Abrams, 2023, para. 20). <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Lessons learned: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Enact and enforce a doer &amp; checker validation system in DevOps workflows to prevent mistakes. Configure DLP in public repositories to automatically quarantine sensitive information (Polymer, 2023). Audit repo pushes and commits for sensitive information. Review and scan repos on a continual basis for misconfiguration and sensitive information. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Sources: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Abrams, L. (2023, February 17). <em>Atlassian data leak caused by stolen employee credentials<\/em>. BleepingComputer. Retrieved February 19, 2023, from https:\/\/www.bleepingcomputer.com\/news\/security\/atlassian-data-leak-caused-by-stolen-employee-credentials\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Atlassian. (2016, September 1). <em>File:Jira-software rgb blue(1).svg<\/em>. Wikimedia Commons. https:\/\/commons.wikimedia.org\/wiki\/File:Jira-software_rgb_blue%281%29.svg<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Polymer. (2023, February 4). <em>Data Loss Prevention for GitHub &#8211; Polymer DLP<\/em>. Retrieved February 19, 2023, from https:\/\/www.polymerhq.io\/github-dlp\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">SOCRadar. (2023, February 17). <em>Atlassian Hacked: SiegedSec Hacker Group Leaks Company\u2019s Data<\/em>. SOCRadar\u00ae Cyber Intelligence Inc. Retrieved February 19, 2023, from https:\/\/socradar.io\/atlassian-hacked-siegedsec-hacker-group-leaks-companys-data\/<\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Photo credits: Atlassian, 2016) One-sentence summary: A misconfiguration by Atlassian allowed SiegedSec to obtain employee credentials and pivot<\/p>\n","protected":false},"author":4,"featured_media":90,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[58,60,68,3,12,13,76,63,75,61,11,10,77,78,74,14,66,64,25,69,71,72,70,57,8,27,73,67,62,65,59,15,79,80],"class_list":["post-89","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-breach-report","tag-atlassian","tag-australia","tag-been-pwned","tag-breach-report","tag-breaches","tag-ciso","tag-cloud","tag-computer-security","tag-cyber-security","tag-cybercrime","tag-cybersecurity","tag-dallas","tag-dark-web","tag-darkweb","tag-data-breach","tag-executive","tag-hack","tag-hacker","tag-hacking","tag-have-been-pwned","tag-have-i-pwned","tag-i-been-pwned","tag-i-have-been-pwned","tag-jira","tag-kent-protect","tag-kentprotect","tag-password","tag-pwned","tag-security","tag-security-hacker","tag-siegedsec","tag-summary","tag-the-darkweb","tag-tor"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>2023 Atlassian and Envoy Breach - Kent Protect<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"2023 Atlassian and Envoy Breach - Kent Protect\" \/>\n<meta property=\"og:description\" content=\"(Photo credits: Atlassian, 2016) One-sentence summary: A misconfiguration by Atlassian allowed SiegedSec to obtain employee credentials and pivot\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/\" \/>\n<meta property=\"og:site_name\" content=\"Kent Protect\" \/>\n<meta property=\"article:published_time\" content=\"2023-02-20T06:08:18+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-03-06T15:55:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/02\/Jira-software_rgb_blue1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"447\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kyler Kent CISSP\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kyler Kent CISSP\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/02\\\/20\\\/2023-atlassian-and-envoy-breach\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/02\\\/20\\\/2023-atlassian-and-envoy-breach\\\/\"},\"author\":{\"name\":\"Kyler Kent CISSP\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\"},\"headline\":\"2023 Atlassian and Envoy Breach\",\"datePublished\":\"2023-02-20T06:08:18+00:00\",\"dateModified\":\"2023-03-06T15:55:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/02\\\/20\\\/2023-atlassian-and-envoy-breach\\\/\"},\"wordCount\":312,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/02\\\/20\\\/2023-atlassian-and-envoy-breach\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/Jira-software_rgb_blue1.png\",\"keywords\":[\"atlassian\",\"australia\",\"been pwned\",\"breach report\",\"breaches\",\"ciso\",\"cloud\",\"computer security\",\"cyber security\",\"cybercrime\",\"cybersecurity\",\"dallas\",\"dark web\",\"darkweb\",\"data breach\",\"executive\",\"hack\",\"hacker\",\"hacking\",\"have been pwned\",\"have I pwned\",\"I been pwned\",\"I have been pwned\",\"jira\",\"kent protect\",\"kentprotect\",\"password\",\"pwned\",\"security\",\"security hacker\",\"siegedsec\",\"summary\",\"the darkweb\",\"tor\"],\"articleSection\":[\"The Breach Report!\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/02\\\/20\\\/2023-atlassian-and-envoy-breach\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/02\\\/20\\\/2023-atlassian-and-envoy-breach\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/02\\\/20\\\/2023-atlassian-and-envoy-breach\\\/\",\"name\":\"2023 Atlassian and Envoy Breach - Kent Protect\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/02\\\/20\\\/2023-atlassian-and-envoy-breach\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/02\\\/20\\\/2023-atlassian-and-envoy-breach\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/Jira-software_rgb_blue1.png\",\"datePublished\":\"2023-02-20T06:08:18+00:00\",\"dateModified\":\"2023-03-06T15:55:52+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/02\\\/20\\\/2023-atlassian-and-envoy-breach\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/02\\\/20\\\/2023-atlassian-and-envoy-breach\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/02\\\/20\\\/2023-atlassian-and-envoy-breach\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/Jira-software_rgb_blue1.png\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/Jira-software_rgb_blue1.png\",\"width\":1920,\"height\":447,\"caption\":\"(Atlassian, 2016)\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/02\\\/20\\\/2023-atlassian-and-envoy-breach\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kentprotect.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"2023 Atlassian and Envoy Breach\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"name\":\"Kent Protect\",\"description\":\"Starring the Breach Report! and other security and cybersecurity series\",\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kentprotect.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\",\"name\":\"Kent Protect\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"width\":209,\"height\":161,\"caption\":\"Kent Protect\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\",\"name\":\"Kyler Kent CISSP\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"caption\":\"Kyler Kent CISSP\"},\"description\":\"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \\\"SOC Analyst Career Guide\\\" (ISBN-13: 9781835467466). https:\\\/\\\/linktr.ee\\\/kentprotect.com Corrections: corrections@kentprotect.com\",\"sameAs\":[\"http:\\\/\\\/kylerkent.com\"],\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/author\\\/kylerkent\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"2023 Atlassian and Envoy Breach - Kent Protect","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/","og_locale":"en_US","og_type":"article","og_title":"2023 Atlassian and Envoy Breach - Kent Protect","og_description":"(Photo credits: Atlassian, 2016) One-sentence summary: A misconfiguration by Atlassian allowed SiegedSec to obtain employee credentials and pivot","og_url":"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/","og_site_name":"Kent Protect","article_published_time":"2023-02-20T06:08:18+00:00","article_modified_time":"2023-03-06T15:55:52+00:00","og_image":[{"width":1920,"height":447,"url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/02\/Jira-software_rgb_blue1.png","type":"image\/png"}],"author":"Kyler Kent CISSP","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kyler Kent CISSP","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/#article","isPartOf":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/"},"author":{"name":"Kyler Kent CISSP","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116"},"headline":"2023 Atlassian and Envoy Breach","datePublished":"2023-02-20T06:08:18+00:00","dateModified":"2023-03-06T15:55:52+00:00","mainEntityOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/"},"wordCount":312,"commentCount":0,"publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/02\/Jira-software_rgb_blue1.png","keywords":["atlassian","australia","been pwned","breach report","breaches","ciso","cloud","computer security","cyber security","cybercrime","cybersecurity","dallas","dark web","darkweb","data breach","executive","hack","hacker","hacking","have been pwned","have I pwned","I been pwned","I have been pwned","jira","kent protect","kentprotect","password","pwned","security","security hacker","siegedsec","summary","the darkweb","tor"],"articleSection":["The Breach Report!"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/","url":"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/","name":"2023 Atlassian and Envoy Breach - Kent Protect","isPartOf":{"@id":"https:\/\/kentprotect.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/#primaryimage"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/02\/Jira-software_rgb_blue1.png","datePublished":"2023-02-20T06:08:18+00:00","dateModified":"2023-03-06T15:55:52+00:00","breadcrumb":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/#primaryimage","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/02\/Jira-software_rgb_blue1.png","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/02\/Jira-software_rgb_blue1.png","width":1920,"height":447,"caption":"(Atlassian, 2016)"},{"@type":"BreadcrumbList","@id":"https:\/\/kentprotect.com\/index.php\/2023\/02\/20\/2023-atlassian-and-envoy-breach\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kentprotect.com\/"},{"@type":"ListItem","position":2,"name":"2023 Atlassian and Envoy Breach"}]},{"@type":"WebSite","@id":"https:\/\/kentprotect.com\/#website","url":"https:\/\/kentprotect.com\/","name":"Kent Protect","description":"Starring the Breach Report! and other security and cybersecurity series","publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kentprotect.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/kentprotect.com\/#organization","name":"Kent Protect","url":"https:\/\/kentprotect.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","width":209,"height":161,"caption":"Kent Protect"},"image":{"@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116","name":"Kyler Kent CISSP","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","caption":"Kyler Kent CISSP"},"description":"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \"SOC Analyst Career Guide\" (ISBN-13: 9781835467466). https:\/\/linktr.ee\/kentprotect.com Corrections: corrections@kentprotect.com","sameAs":["http:\/\/kylerkent.com"],"url":"https:\/\/kentprotect.com\/index.php\/author\/kylerkent\/"}]}},"_links":{"self":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/89","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/comments?post=89"}],"version-history":[{"count":2,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/89\/revisions"}],"predecessor-version":[{"id":93,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/89\/revisions\/93"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media\/90"}],"wp:attachment":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media?parent=89"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/categories?post=89"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/tags?post=89"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}