Welcome to the Blueprint Podcast!
Blueprint: Build the Best in Cyber Defense
Blueprint: Build the Best in Cyber Defense
Real conversations with the people building and running security operations. Practical insights from practitioners defending actual networks, not surface-level trends. Blueprint brings you in-depth discussions on detection engineering, SOC operations, incident response, and the tools and techniques that matter. Hosted by John Hubbard, SANS Cyber Defense Curriculum Lead, and brought to you by the SANS Institute.
Jan. 5, 2026

Infiltration Alert! How to Catch Fake IT Employees in Your Network with Zak Stufflebeam

Infiltration Alert! How to Catch Fake IT Employees in Your Network with Zak Stufflebeam

Click here to send us your ideas and feedback on Blueprint! This episode is a big one! We kick off 2026 with a critical lessons learned on how to detect and prevent the threat of fake IT workers infiltrating your organization through the story of a REAL compromise. In this episode, repeat guest Zak Stufflebeam shares a detailed case study involving a major investigation of multiple counterfeit IT employees within a company. The episode provides valuable insights and actionable detection tacti...

Click here to send us your ideas and feedback on Blueprint!

This episode is a big one! We kick off 2026 with a critical lessons learned on how to detect and prevent the threat of fake IT workers infiltrating your organization through the story of a REAL compromise. In this episode, repeat guest Zak Stufflebeam shares a detailed case study involving a major investigation of multiple counterfeit IT employees within a company. The episode provides valuable insights and actionable detection tactics, covering everything from unusual VPN activity and AI-generated resumes to suspicious interview responses and unauthorized access requests.

With the rise of remote work, this episode is essential listening for cyber defenders aiming to ensure their networks are clean and defensible in the new year.

Check out John's SOC Training Courses for SOC Analysts and Leaders:

Follow and Connect with John: LinkedIn

Send a Voicemail