David Spark

Anyways, it was thrilling to see everybody, but it was just sort of a shock when you don't see people for that long.

Because people change after they turn 18, I've noticed.

It does happen.

I would hope so.

And slightly mature.

Yes.

All right, let's get to today's show at hand because we're not going to be talking about my reunion.

If someone wants to call me or talk to me or email me about my reunion, happy to chat with them about that later.

But let's not waste any more time here.

It's a guest we've had on many times before.

We adore him.

He supports us.

We support them.

It is the CEO of ThreatLocker, our sponsored guest, Danny Jenkins.

Danny, thank you so much for coming back.

Once again, we've got identity issues.

Quote, authorization is not the same as appropriateness.

A perfect guard tries to cut through the identity is the perimeter consensus.

He points out that IAM, Identity Access Management, can confirm an agent was allowed to access the system, query something like a salary database, and join it with performance reviews, but it can't tell you whether it should have.

Agents need broad standing permissions to function at all, access patterns we'd never grant a human employee, or at least never admit to doing.