<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Andrew Hay</title>
	<atom:link href="http://www.andrewhay.ca/feed" rel="self" type="application/rss+xml" />
	<link>http://www.andrewhay.ca</link>
	<description>the website of a devastatingly handsome author, sporadic blogger, bbq junkie, and security strong man</description>
	<lastBuildDate>Thu, 02 Sep 2010 20:01:55 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>LogChat Podcast 1: Anton Chuvakin and Andrew Hay Talk Logs</title>
		<link>http://www.andrewhay.ca/archives/1506</link>
		<comments>http://www.andrewhay.ca/archives/1506#comments</comments>
		<pubDate>Thu, 02 Sep 2010 20:01:55 +0000</pubDate>
		<dc:creator>Andrew Hay</dc:creator>
				<category><![CDATA[Podcast]]></category>

		<guid isPermaLink="false">http://www.andrewhay.ca/?p=1506</guid>
		<description><![CDATA[&#8220;LogChat&#8221; Podcast is born! Everybody knows that all this world needs is a podcast devoted to logs, logging and log management (as well as SIEM, incident response and other closely related subjects). And now you have it &#8211; through the sheer combined genius of Anton Chuvakin and myself, Andrew Hay. Administrative items first: We need [...]]]></description>
			<content:encoded><![CDATA[<p><strong>&#8220;LogChat&#8221; Podcast is born!</strong> Everybody knows that all this world needs is a podcast devoted to logs, logging and log management (as well as SIEM, incident response and other closely related subjects).</p>
<p>And now you have it &#8211; through the sheer combined genius of Anton Chuvakin and myself, Andrew Hay.</p>
<p>Administrative items first:</p>
<ol>
<li>We need a new name! We are not entirely happy with &#8220;LogChat&#8221; and, sadly, &#8220;LogTalk&#8221; is taken. Please suggest a name &#8211; if we pick yours, you get a free signed  copy of Anton&#8217;s <a href="http://www.pcicompliancebook.info/">PCI Compliance&#8221; book</a>.</li>
<li>We will post the transcript, not just the MP3 file &#8211; in a few days. If you have ideas for a good/inexpensive transcribing service, we are all ears. We will try Amazon Mechanical Turk first, but it might not be good enough for a technical podcast.</li>
</ol>
<p>Please also suggest topics to cover as well &#8211; even though we are not likely to run out of ideas for a few years. Our first topic today is new log source integration &#8211; if it sounds boring&#8230;well&#8230;listen first/judge second <img src='http://www.andrewhay.ca/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
<p>We plan for this to be a monthly podcast. So, the next one will happen sometime early October.</p>
<p>Any other feedback is HUGELY useful. Is it too long? Too loud? Not enough jokes? Too few mentions of the &#8220;cloud&#8221;? Feedback please! Who knows&#8230;maybe there are more PCI books left in my secret stash and you too will earn that glorious prize for the most useful piece of feedback  <img src='http://www.andrewhay.ca/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
<p>And now, in all its, glory &#8211; the podcast: <a href="http://www.chuvakin.org/LogChat_podcast/LogChat%20Podcast%201%20Anton%20Andrew%2009022010.mp3">the link to MP3 is here</a> [MP3].</p>
<p>Enjoy the log chat!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.andrewhay.ca/archives/1506/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
<enclosure url="http://www.chuvakin.org/LogChat_podcast/LogChat%20Podcast%201%20Anton%20Andrew%2009022010.mp3" length="11876650" type="audio/mpeg" />
		</item>
		<item>
		<title>links for 2010-08-18</title>
		<link>http://www.andrewhay.ca/archives/1505</link>
		<comments>http://www.andrewhay.ca/archives/1505#comments</comments>
		<pubDate>Wed, 18 Aug 2010 20:02:21 +0000</pubDate>
		<dc:creator>Andrew Hay</dc:creator>
				<category><![CDATA[Suggested Blog Reading]]></category>

		<guid isPermaLink="false">http://www.andrewhay.ca/archives/1505</guid>
		<description><![CDATA[Anton Chuvakin Blog &#8211; &#34;Security Warrior&#34;: SIEM-related Job: Principal SIEM Consultant (tags: siem jobs) Digital Forensics: Introducing ForensicArtifacts.com (tags: forensics website)]]></description>
			<content:encoded><![CDATA[<ul class="delicious">
<li>
<div class="delicious-link"><a href="http://chuvakin.blogspot.com/2010/08/siem-related-job-principal-siem.html?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+AntonChuvakinPersonalBlog+%28Anton+Chuvakin+Personal+Blog%29&amp;utm_content=Google+Reader">Anton Chuvakin Blog &#8211; &quot;Security Warrior&quot;: SIEM-related Job: Principal SIEM Consultant</a></div>
<div class="delicious-tags">(tags: <a href="http://delicious.com/andrewsmhay/siem">siem</a> <a href="http://delicious.com/andrewsmhay/jobs">jobs</a>)</div>
</li>
<li>
<div class="delicious-link"><a href="https://blogs.sans.org/computer-forensics/2010/08/17/introducing-forensicartifactscom/?utm_source=rss&amp;utm_medium=rss&amp;utm_campaign=introducing-forensicartifactscom">Digital Forensics: Introducing ForensicArtifacts.com</a></div>
<div class="delicious-tags">(tags: <a href="http://delicious.com/andrewsmhay/forensics">forensics</a> <a href="http://delicious.com/andrewsmhay/website">website</a>)</div>
</li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.andrewhay.ca/archives/1505/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Andrew Hay, as seen on PBS</title>
		<link>http://www.andrewhay.ca/archives/1498</link>
		<comments>http://www.andrewhay.ca/archives/1498#comments</comments>
		<pubDate>Fri, 13 Aug 2010 01:26:26 +0000</pubDate>
		<dc:creator>Andrew Hay</dc:creator>
				<category><![CDATA[News]]></category>

		<guid isPermaLink="false">http://www.andrewhay.ca/?p=1498</guid>
		<description><![CDATA[With a special thanks to Matt Johansen&#8216;s keen eye, it turns out that I was captured in the background at Blackhat talking with David Mortman as a PBS special on cyber-warfare was being filmed. The full video can be seen here but I was able to snag a capture of the exact point where we [...]]]></description>
			<content:encoded><![CDATA[<p>With a special thanks to <a href="http://twitter.com/mattjay">Matt Johansen</a>&#8216;s keen eye, it turns out that I was captured in the background at <a href="http://www.blackhat.com">Blackhat</a> talking with <a href="http://twitter.com/mortman">David Mortman</a> as a PBS special on cyber-warfare was being filmed. The full video can be <a href="http://www.pbs.org/newshour/bb/science/july-dec10/cybersec_08-10.html">seen here</a> but I was able to snag a capture of the exact point where we appear (4:50 to 4:55ish).</p>
<p><center><img src="http://lh3.ggpht.com/_yM_EM44Zqb4/TGShAd45GMI/AAAAAAAAA_k/LbOAWt0vGwc/s800/Screen%20shot%202010-08-12%20at%207.18.43%20PM.png" alt="andrew and dave" /></center></p>
]]></content:encoded>
			<wfw:commentRss>http://www.andrewhay.ca/archives/1498/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>links for 2010-08-12</title>
		<link>http://www.andrewhay.ca/archives/1497</link>
		<comments>http://www.andrewhay.ca/archives/1497#comments</comments>
		<pubDate>Thu, 12 Aug 2010 20:02:21 +0000</pubDate>
		<dc:creator>Andrew Hay</dc:creator>
				<category><![CDATA[Suggested Blog Reading]]></category>

		<guid isPermaLink="false">http://www.andrewhay.ca/archives/1497</guid>
		<description><![CDATA[Logblog: Next Generation Log Management – The Platform Principle (tags: log) Metasploit: W3AF: An Open Source Success Story (tags: w3af) “My God, What Have [They] Done?” &#124; the dialog (tags: log siem esim) Airing Private Cloud’s Dirty Laundry… &#124; Rational Survivability (tags: cloud) Our Solr system &#124; Loggly (tags: log)]]></description>
			<content:encoded><![CDATA[<ul class="delicious">
<li>
<div class="delicious-link"><a href="http://blog.loglogic.com/2010/07/next_generation_log_management_the_platform_principle.php?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+loglogic%2FnPtK+%28Logblog%29&amp;utm_content=Google+Reader">Logblog: Next Generation Log Management – The Platform Principle</a></div>
<div class="delicious-tags">(tags: <a href="http://delicious.com/andrewsmhay/log">log</a>)</div>
</li>
<li>
<div class="delicious-link"><a href="http://blog.metasploit.com/2010/07/w3af-open-source-success-story.html?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+metasploit%2Fblog+%28Metasploit+Blog%29&amp;utm_content=Google+Reader">Metasploit: W3AF: An Open Source Success Story</a></div>
<div class="delicious-tags">(tags: <a href="http://delicious.com/andrewsmhay/w3af">w3af</a>)</div>
</li>
<li>
<div class="delicious-link"><a href="http://blog.logrhythm.com/read/my-god-what-have-they-done">“My God, What Have [They] Done?” | the dialog</a></div>
<div class="delicious-tags">(tags: <a href="http://delicious.com/andrewsmhay/log">log</a> <a href="http://delicious.com/andrewsmhay/siem">siem</a> <a href="http://delicious.com/andrewsmhay/esim">esim</a>)</div>
</li>
<li>
<div class="delicious-link"><a href="http://www.rationalsurvivability.com/blog/?p=2384">Airing Private Cloud’s Dirty Laundry… | Rational Survivability</a></div>
<div class="delicious-tags">(tags: <a href="http://delicious.com/andrewsmhay/cloud">cloud</a>)</div>
</li>
<li>
<div class="delicious-link"><a href="http://www.loggly.com/2010/08/our-solr-system/">Our Solr system | Loggly</a></div>
<div class="delicious-tags">(tags: <a href="http://delicious.com/andrewsmhay/log">log</a>)</div>
</li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.andrewhay.ca/archives/1497/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>UPDATE: My BrightTALK Log Management Summit Presentation</title>
		<link>http://www.andrewhay.ca/archives/1493</link>
		<comments>http://www.andrewhay.ca/archives/1493#comments</comments>
		<pubDate>Mon, 09 Aug 2010 22:13:44 +0000</pubDate>
		<dc:creator>Andrew Hay</dc:creator>
				<category><![CDATA[Presentations]]></category>

		<guid isPermaLink="false">http://www.andrewhay.ca/?p=1493</guid>
		<description><![CDATA[As I mentioned earlier, my upcoming BrightTALK Log Management Summit presentation entitled “The Integration Lifecycle: Loving Long Logging Lifecycles” is scheduled for August 19th, 2010 at 12:00pm EDT (9:00am PDT). Now, thanks to the nice folks at BrightTALK, I&#8217;ve been provided with a nifty embedded widget that will allow you to register for and view [...]]]></description>
			<content:encoded><![CDATA[<p>As I <a href="http://www.andrewhay.ca/archives/1488">mentioned</a> earlier, my upcoming BrightTALK Log Management Summit presentation entitled “<a href="http://www.brighttalk.com/webcast/21954">The Integration Lifecycle: Loving Long Logging Lifecycles</a>” is scheduled for August 19th, 2010 at 12:00pm EDT (9:00am PDT). Now, thanks to the nice folks at BrightTALK, I&#8217;ve been provided with a nifty embedded widget that will allow you to register for and view the presentation:</p>
<p><object width='705' height='660' classid='clsid:D27CDB6E-AE6D-11cf-96B8-444553540000' id='myChannel'><param name='movie' value='http://www.brighttalk.com/clients/flashplatform/viewerdefault/loader.swf?'></param><param name='allowscriptaccess' value='always'></param><param name='allowfullscreen' value='true'></param><param name='allowscriptaccess' value='always'></param><param name='flashvars' value='channelid=188&#038;commid=21954&#038;autoStart=false&#038;fromdc=false&#038;isViewer=true'></param> <embed src='http://www.brighttalk.com/clients/flashplatform/viewerdefault/loader.swf' type='application/x-shockwave-flash' width='705' height='660' flashvars='channelid=188&#038;commid=21954&#038;autoStart=false&#038;fromdc=false&#038;isViewer=true' wmode='transparent' allowfullscreen='true' allowscriptaccess='always'></embed></object></p>
]]></content:encoded>
			<wfw:commentRss>http://www.andrewhay.ca/archives/1493/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
