Blue Teams are definitely the underdog in this fight against sophisticated malware and advanced persistent threats (APTs) - the top level cyber threat actors of today.  These threat actors and APTs have thousands of exploits and hacks at their disposal, along with volumes of knowledge, expert tools and training to facilitate their efforts.

There are literally thousands of exploits and pathways into systems that can be exploited, and the attack surface grows with more devices, apps, protocols, etc.  Threat actors and APTs only have to make it through one of these several entry points within this large and often exposed attack surface.  They have a full menu of tools and options to exploit systems, and make it look easy!

Blue Team Defenders, on the other hand, have it very difficult and challenging to mount a good defense.  The Blue Team has to block each and every possible way in, it seems.  If the Blue team fails to block just one attack, even by accident or lack of skill, their network and systems (and data) can get pwned quickly and perhaps permanently.  This can happen in hours if not minutes and perhaps even seconds today. 

This cyber struggle is definitely not a fair fight and the odds are entirely stacked against Cyber Defenders.  Nonetheless, this blog is dedicated to the valiant efforts of Blue Teams, the Cyber Defenders of the Domain, to keep out all evil and find brilliant ways to mount a proper defense.  Join me on this journey, a rare blog that is dedicated to the Blue Team, rather than the Red Team, for a change!  This is sorely needed and about bloody time - more than ever before!