W1-3/3 FACT course (6/28)

 On Thursday we traveled to West Virginia to take part in the Foreign Affairs Counter Threat course (FACT). The FACT course is made to provide general information and training to austere and high threat environments. We covered moving out of a burning building safely in the case that fire is being used as a weapon, observed general risks, how to react to directed gunfire/explosives, and medical training.

   In the case of a burning building everybody needs to get low to avoid the heat and smoke. Then they need to remain in contact as they proceed to the nearest exit. While doing so they should keep in contact with one of the walls and communicate with each other. I have personally had to escape a burning building and I found the training to be very appropriate.

    The general self-defensive was interesting as it was a course for any and everybody, even elderly or physically impaired or political officials who are not intended to participate in combat should have some knowledge in self-defense. It is best to make an individual as capable as possible even if that is more difficult or if their potential peak is substantially lower than the average individual. This is a very important lesson, we shouldn't hinder ourselves more than our capabilities already do nor should we judge someone who is attempting self-improvement in the face of adversity.

   In the risk of surveillance training we learned that eavesdropping is like a puzzle and even the most benign things can be put together to find more critical data. Each little detail is part of a dangerous mosaic. Various government establishments and private industries must be aware of the risk of surveillance and espionage. Thus, when protecting information, one should be super careful even in casual interactions.

   When reacting to gunfire or explosives one should seek robust and safe cover and if nothing else concealment. A person has 3-5 seconds to run while being shot at before they are likely to be hit. Thus, they should run in bursts from cover to cover and trying to gain as much distance as possible.

   In the medical training we learned how to properly use a tourniquet and pack a wound. A tourniquet should be applied above the wound towards the heart. A person has about 30 seconds in most cases of massive hemorrhaging to apply a tourniquet properly. When packing a wound, find the cavity where the wound is bleeding from and pack it, then pack any other wounds and apply pressure with the excess gauze.

   I really enjoyed this course and feel better if I ever need to put these skills into application. Hopefully I never need to. I also found the issue of surveillance risk to be very interesting.

Comments

Post a Comment

Popular posts from this blog

W7-2/3 On Being Prepared & Further Recommendations (8/11)

   One can never be fully prepared. There is always more that a person can do to prepare themselves. I wish that before starting this internship that I would have had a better understanding of the basic concepts of cyber security (e.g. passive and active defense, vulnerability factors, etc.). I also wish that I had prior experience with all the tools and software I used. If you can find out the tools used at an internship, then it’s a good idea to try and learn some of those tools. Your internship will require less training and more application which will make the experience more productive for you. If you cannot find out what tools your internship will use, then it isn’t a bad idea to browse freeware related to that field (e.g. Maltego and Zed Attack Proxy for digital forensics and pen testing respectively). Most places are trying to save money, so they probably use freeware to some capacity. The most popular freeware is your best bet and even if they don’t use it, the...
Read more

W2-2/3 Network Mapping (7/5)

On Thursday we covered network mapping. The process of network mapping usually consists of four phases: identify the space of IP addresses you are monitoring and partition the space into different categories (1). Examine the IP space (2), identify blind and confusing traffic (3), and identify clients and servers (4).    During phase one the mapping of the inventory is undetermined and remains to be IP space. A security inventory should monitor every resource's address (that it is able to) on the network (i.e. anything within or on the network an attacker can access), what resources a service is running on, at the very minimum. During phase two cyber security personal should also consider enumerating roles to make searching easier; identifying VPNs, NATs, DHCP, and proxies; keep centrality or volume metrics (e.g. monthly ephemeral summaries); per-host white lists; and monitoring the versions of all services on a particular resource. Ask what addresses make up the network?...
Read more

W1-2/3 Prioritization (6/27)

   On Wednesday we covered prioritization. What is the most important thing to respond to first? How do we determine what is and what isn't more important? How do we assess the risk being taken? How much risk is too much risk? While some matters may be more general, a lot of prioritization will be based upon what the establishment is doing, who would target them, what resources does the establishment have for defense, etc. The effectiveness of cyber response teams is determined by how appropriate the prioritization of incidents is. Randomly responding and less formalized response protocols/orders (e.g. stacks/LIFO or queues/FIFO) will hinder the potential security capabilities of an establishment. One cannot prioritize for random or abstract orders and expect any type of long-term success. It is best to make decision making and risk taking as formalized as possible. What you do is just as important as what you do first. Basically, some things are more important to attend to ri...
Read more