Hands-On Defense: Markus Schober on DFIR, Labs, and Building Better Blue Teamers

Episode notes

In this episode of Simply Defensive , Josh Mason and Wade Wells sit down with Markus Schober , founder of Blue Cape Security, to talk all things digital forensics, incident response (DFIR), and why hands-on training beats theory every time. We dig into: The hidden value of building your own cyber range How IR pros train using real attacks (and why they need red team skills) Eric Zimmerman's forensics tools and practical lab setups Ransomware war stories from Fortune 100 response The role (and limitations) of AI in forensics How to break into DFIR as a practitioner - not just a paper tiger Whether you’re building detections, teaching DFIR, or just figuring out where to start, this one’s for you. Timestamps & Resources 0:00 Intro & ThreatLocker sponsorship 2:00 Markus' journey from responder to trainer 5:00 What makes a good DFIR workshop? 7:00 Building a cyber range that doesn’t suck 10:00 Favorite open-source tools (hint: Zimmerman) 14:00 Consulting vs. in-house IR 19:00 APT10, ransomware, and real-world incidents 24:00 Can AI replace forensic analysts?

Related episodes across the Index

Other episodes covering the same guests and topics, from across The B2B Podcast Index.

• CMMC Level 2: Documentation, Costs, and Audit Readiness | Interview with Bruno LecoqSecure & Simple · on Cybersecurity89 / 100
• Mastercard CEO: AI Shopping Agents, Machine-to-Machine Payments, and the New Infrastructure of CommerceMotley Fool Hidden Gems Investing · on Cybersecurity88 / 100
• Navigating AI Risks with Trevor Horwitz from TrustNetB2B Automation Spotlight · on Cybersecurity79 / 100
• Moving from Product Partnerships to Revenue: Jira Cooley on Owning the NumberBetween Product and Partnerships · on Cybersecurity76 / 100
• Pipeline Gives Permission to Invest Big on Brand with Jennifer JohnsonThe B2B CMO Podcast with Jon Miller and Sydney Sloan · on Cybersecurity74 / 100
• S5E4: Authenticity Over 'Fake It': Lessons in Leadership and Life with Reese GiffordProductly Speaking: Real Stories for Product Managers · on Cybersecurity65 / 100

• S6:E3 - Tom Dejong - Inside the BHIS SOC: Triage, Curiosity, and Career Growth51 / 100
• S6E2: John Hammond on Security Research, Storytelling, Deception, and Getting Hired in Cybersecurity75 / 100
• From Blue Team Challenges to AI Innovations: A Conversation with Jason Haddix91 / 100
• From Pre-Law to FLARE: How Josh Stroschein Became Google's Malware Analyst86 / 100
• Building Zero Trust Tools: Inside ThreatLocker with Product Manager Yuriy Tsibere