Cybersecurity incident response teams have choices when it comes to communication tools: Microsoft Teams, Slack, Zoom and numerous others. Some require a subscription or commercial license — others are free. Some are niche tools specifically designed for incident response. Some are generic business communication tools that IR teams have adapted for use during a cybersecurity incident.

Professionals working in incident response know that sometimes, in a live event situation, normative communication channels unexpectedly may be unavailable for reasons that you can’t control. For example, if ransomware has brought down your Exchange server, good luck sending emergency emails to your team. If Slack is your main tool and channels are clogged with malicious traffic, team communications can be compromised.

This potential for communication disruption means that having multiple tools and pathways that team members can use can mean the difference between rapid resumption of communications and costly time spent trying to figure out a way to restore business as usual. With this in mind, one unorthodox choice to consider adding to your team’s toolbox is the collaboration tool
Discord.

Discord registered daily users

Now I know what you’re thinking: “Isn’t Discord for gaming? Incident response is way too serious for fun and games.”

It turns out, though, that Discord is not a toy. Instead, it’s a full-featured communications platform with tons of features that incident response teams can make use of right away. At a bare minimum, it’s another communication channel to have available should your preferred ones be unavailable — but I suspect that after you’ve used it, you’ll come to realize it has some advantages over other platforms.

What Is Discord and What Does It Do?

At its core, Discord is a system designed to allow real-time voice and text communication. Designed originally with gaming in mind, the platform since has evolved to be much more. Just as streaming platforms like Twitch have adapted to include content beyond gaming (performance art, live music, news and educational content), Discord has expanded its horizons with features that lend themselves to tasks beyond gaming.

For example, collaboration within Discord is fluid and seamless — you can have synchronous voice communication happening at the same time as asynchronous text exchanges.

It’s free and easy to use, and you can bring new members on in a manner of a few seconds.

It allows rapid file and other information sharing, and it works across device platforms (from Windows, macOS and Linux to iOS and Android). Need access quickly from some other platform? There’s a browser client that will let you do that too.

It’s easy to get started using Discord. You can download the Discord client or simply use it in your browser. Pick a user name, supply your email address, and verify with captcha.

Conversations within Discord are organized into “servers” — groups consisting of users that can be public or restricted by invitation (how you would use it in an incident response context).

After gaining access to the platform, users are free to search for existing servers or start their own. Team members even have access to a Discord bot that automatically will notify them or others when there is a change or update on the server.

Using Discord in Your Program

Communications take place inside servers, which can contain multiple “channels.” This approach is very flexible. For example, you might create a server for your security operations center, IT department, or any group of users who might need to collaborate during an incident.

In fact, you can have multiple servers and switch between them to increase efficiency and scale, or to adapt to different environments. You might have a text channel for sending pictures or documents from your laptop. You might use a separate channel for voice communications from your mobile phone. Or you could do both at the same time.

You probably see the power of this already. For example, after sharing artifacts like code, packet captures, samples or log data, team members instantly can join a voice channel to talk through those samples. They can establish private chat sessions in the tool to work individually. Switching among voice, text and file-sharing channels can be significantly faster than it is with other tools.

Of course, the elephant in the room that you’ll need to address with the powers that be in your organization is the security of the platform. Can Discord be trusted to facilitate conversations of such importance?

It turns out that Discord takes security very seriously. It uses TLS1.3 for user connections, so information is encrypted in transit. Images and links are proxied through the system to prevent DDoS attacks against individual users. When you click on a link there is pop-up that lets you know you’re leaving the site.

Discord has built-in IP location tracking, so when you log in from a different IP address you must confirm it’s still you. It has two-factor authentication capability and built-in virus scanning.

One potential consideration is that, according to the
Discord Terms of Service, you cannot “upload or transmit (or attempt to upload or transmit) files that contain viruses, Trojan horses, worms, time bombs, cancelbots, corrupted files or data, or any other similar software or programs or engage in any other activity that may damage the operation of the Service or other users’ computers.”

This has the potential to constrain usage somewhat, as to remain in strict adherence to the terms, you would not be able to directly share malware or other samples. Should you adopt the tool for security use, you would need to take care that engineers would not violate the terms inadvertently, by informing them of this constraint clearly and in advance.

My closing argument is that Discord provides robust communication and collaboration capabilities that can be incorporated directly into an incident response team’s available resources. It has the advantage of being “youth friendly” — meaning, new entrants to your team would have a much higher likelihood of already knowing how to use the tool right from the get-go.

In a pinch and when the chips are down, why stand on ceremony? Make use of a valuable tool that can help you do what you need to get done — even if the tool in question originally was designed for gaming.

The opinions expressed in this article are those of the author and do not necessarily reflect the views of ECT News Network.


Nathan Ivinjack is a customer success technician at
Minim, an AI-driven residential managed WiFi and IoT security platform for service providers.



Source link

98 COMMENTS

  1. We’re a group of volunteers and opening a new scheme in our community. Your website offered us with valuable info to work on. You’ve done a formidable job and our entire community will be thankful to you.

  2. I simply want to tell you that I’m very new to weblog and certainly savored you’re blog. Likely I’m likely to bookmark your website . You absolutely have superb well written articles. Regards for sharing with us your website.

  3. Hello. Very nice web site!! Man .. Excellent .. Superb .. I will bookmark your site and take the feeds also…I am satisfied to locate so much useful information here in the post. Thanks for sharing.

  4. When I originally commented I clicked the -Notify me when new comments are added- checkbox now whenever a comment is added I receive four emails sticking with the same comment. Possibly there is any way you can get rid of me from that service? Thanks!

  5. May I simply just say what a comfort to discover a person that actually understands what they are discussing on the net. You actually know how to bring an issue to light and make it important. More and more people need to read this and understand this side of the story. I was surprised you aren’t more popular given that you certainly possess the gift.

  6. I have realized some considerations through your blog post post. One other stuff I would like to express is that there are lots of games on the market designed mainly for preschool age young children. They involve pattern acceptance, colors, wildlife, and models. These normally focus on familiarization rather than memorization. This makes children and kids engaged without experiencing like they are learning. Thanks

  7. Your style is very unique compared to other people I’ve read stuff from. Many thanks for posting when you’ve got the opportunity, Guess I’ll just bookmark this blog.

  8. Sapid Agency is a Search Engine Optimization company in New York City that provides SEO Services. Their proprietary SEO strategies help struggling websites and aspiring business owners to rank their websites higher in multiple search engines like Google , Yahoo and Bing. They provide local and gmb map ranking for businesses in NYC and many other local areas. Find more at https://www.sapidagency.com/ @ 145 E 57TH NEW YORK, NY 10022, USA, +1 971 341 5608 USA

  9. I absolutely love your site.. Excellent colors & theme. Did you create this website yourself? Please reply back as I’m wanting to create my own personal blog and would like to know where you got this from or just what the theme is named. Many thanks!

  10. I just want to inform you that I am new to wordpress blogging and absolutely cherished your write-up. More than likely I am probably to save your blog post . You really have magnificent article materials. Value it for discussing with us your favorite url information

  11. Can I just say what a comfort to discover someone that genuinely understands what they’re talking about online. You certainly realize how to bring a problem to light and make it important. A lot more people must look at this and understand this side of the story. I was surprised that you aren’t more popular since you most certainly have the gift.

  12. MetroClick specializes in building completely interactive products like Photo Booth for rental or sale, Touch Screen Kiosks, Large Touch Screen Displays , Monitors, Digital Signages and experiences. With our own hardware production facility and in-house software development teams, we are able to achieve the highest level of customization and versatility for Photo Booths, Touch Screen Kiosks, Touch Screen Monitors and Digital Signage. Visit MetroClick in NYC at http://www.metroclick.com/ or , 121 Varick St, New York, NY 10013, +1 646-843-0888.

  13. Hey very nice web site!! Guy .. Beautiful .. Wonderful .. I’ll bookmark your web site and take the feeds additionally…I’m satisfied to seek out a lot of helpful information here in the publish, we want work out extra strategies on this regard, thanks for sharing.

  14. Good post. I learn something totally new and challenging on websites I stumbleupon on a daily basis. It’s always interesting to read content from other writers and practice a little something from their web sites.

  15. After checking out a few of the blog posts on your web site, I truly appreciate your way of writing a blog. I saved it to my bookmark website list and will be checking back in the near future. Please check out my web site as well and tell me how you feel.

  16. Having read this I believed it was really enlightening. I appreciate you spending some time and effort to put this article together. I once again find myself personally spending way too much time both reading and commenting. But so what, it was still worthwhile!

  17. May I simply say what a relief to discover somebody who genuinely understands what they are discussing online. You certainly know how to bring an issue to light and make it important. More people really need to read this and understand this side of your story. I was surprised that you aren’t more popular since you surely possess the gift.

  18. This is the right website for anyone who would like to understand this topic. You realize so much its almost hard to argue with you (not that I personally would want to…HaHa). You certainly put a fresh spin on a subject that’s been discussed for many years. Great stuff, just great.

  19. Hi! I could have sworn I’ve been to this website before but after looking at a few of the posts I realized it’s new to me. Nonetheless, I’m definitely pleased I stumbled upon it and I’ll be bookmarking it and checking back often.

  20. Hi there, I do think your blog may be having web browser compatibility issues. Whenever I look at your blog in Safari, it looks fine however, when opening in IE, it has some overlapping issues. I merely wanted to provide you with a quick heads up! Aside from that, great site.

  21. Good morning here, just turned out to be aware of your blogging site through Google, and discovered that it’s quite informational. I will truly appreciate should you carry on this approach.

  22. An impressive share! I’ve just forwarded this onto a co-worker who had been conducting a little research on this. And he actually ordered me breakfast due to the fact that I discovered it for him… lol. So allow me to reword this…. Thank YOU for the meal!! But yeah, thanx for spending some time to discuss this issue here on your website.

  23. Sapid Agency is a Search Engine Optimization company in New York City that provides SEO Services. Their proprietary SEO strategies help struggling websites and aspiring business owners to rank their websites higher in multiple search engines like Google , Yahoo and Bing. They provide local and gmb map ranking for businesses in NYC and many other local areas. Find more at https://www.sapidagency.com/ @ 145 E 57TH NEW YORK, NY 10022, USA, +1 971 341 5608 USA

  24. MetroClick specializes in building completely interactive products like Photo Booth for rental or sale, Touch Screen Kiosks, Large Touch Screen Displays , Monitors, Digital Signages and experiences. With our own hardware production facility and in-house software development teams, we are able to achieve the highest level of customization and versatility for Photo Booths, Touch Screen Kiosks, Touch Screen Monitors and Digital Signage. Visit MetroClick in NYC at http://www.metroclick.com/ or , 121 Varick St, New York, NY 10013, +1 646-843-0888.

  25. An outstanding share! I have just forwarded this onto a coworker who was conducting a little research on this. And he actually bought me lunch simply because I found it for him… lol. So allow me to reword this…. Thank YOU for the meal!! But yeah, thanks for spending time to talk about this issue here on your blog.

  26. Varick Street Litho , VSL Print is one of the top printing company in NYC to provide the best Digital Printing, Offset Printing and Large Format Printing in New York. Their printing services in NYC adopts state of the art digital printing services and offset digital printing for products postcards, business cards, catalogs, brochures, stickers, flyers, large format posters, banners and more for business in NYC. For more information on their digital printing nyc, visit http://www.vslprint.com/ or http://www.vslprint.com/printing at 121 Varick St, New York, NY 10013, US. Or contact +1 646 843 0800

  27. After checking out a few of the articles on your site, I truly like your technique of writing a blog. I bookmarked it to my bookmark webpage list and will be checking back in the near future. Please visit my web site as well and let me know your opinion.

  28. Aw, this was a very nice post. In idea I want to put in writing like this additionally – taking time and actual effort to make a very good article… but what can I say… I procrastinate alot and certainly not seem to get one thing done.

  29. Everything is very open with a really clear explanation of the issues. It was really informative. Your site is very useful. Thank you for sharing!

  30. Usually I do not learn article on blogs, however I would like to say that this write-up very compelled me to check out and do it! Your writing taste has been surprised me. Thank you, very great post.|

  31. I need to to thank you for this very good read!! I definitely enjoyed every little bit of it. I have you book-marked to check out new stuff you post…

  32. I’m impressed, I have to admit. Seldom do I come across a blog that’s both equally educative and amusing, and without a doubt, you’ve hit the nail on the head. The problem is something which not enough men and women are speaking intelligently about. I am very happy I stumbled across this during my search for something relating to this.

  33. I simply want to say I’m beginner to blogs and actually liked your page. Most likely I’m planning to bookmark your website . You definitely have awesome well written articles. Thanks for sharing with us your blog site.

  34. I’m very pleased to uncover this page. I need to to thank you for your time just for this wonderful read!! I definitely loved every bit of it and I have you saved as a favorite to see new information in your web site.

LEAVE A REPLY

Please enter your comment!
Please enter your name here