Hello everybody and welcome back. So before we jump into
the material, let's talk about a few disclaimers. I
want you to pay special attention to what we're getting ready
to talk about because it could save you some trouble in the
long run.
So when you're working on a pin test or
something of that nature security test you're using tools keep in
mind that there may be some laws and legal stuff that you need
to be aware of. So in order to keep yourself out of jail always
make sure that you're doing work with permission explicitly that
there's no room for kind of
gray area that you're doing everything within a kind of a scope
of service or scope of work and that you know,
that's protecting yourself anytime you get ready to
work on a system. Make sure you've got some addendification and damage control
in place kind of like with a surgeon before you you know,
you going to get a procedure done. They warn you about all the gruesome
things that could happen and it's just
a way to cover yourself and make sure that there's no surprises and that
you're crying isn't upset or disturbed by you know, kind of
if something happens along the way if you've got
a client that wants you to do like a hat back like hey, I've been hack.
Can you have to hacker don't do it that can get you landed in jail.
Just stay away from doing that type of retaliatory work.
Licenses and certification may be applicable to your area.
So just give those a look and make sure that you're doing everything you can
to stay above board and that you don't run into any issues
with respect to being legitimate in your work. Then
you endure addiction can get a little fuzzy if you're working
on a New York on a pentest in South Carolina with systems
in you know, Pennsylvania. You know, where's the where's the
Line in the Sand where do you know? You know what the
laws are what you follow just figure those things out in
your legal work and your contracts privacy issues. If
you gain access to sense of information such as piano I
which is personally identifiable information or sometimes of confidential
data. What do you do? How do you react how do
you report that Etc who owns
your reports and information is a big part of any contract and
work that you do and duty to warn that should be
defined in a contract with respect to how do you report a
breach. Do you have an obligation to report a breach
Etc. So just make sure that you're above boarding anything
that you're doing and that you're using these tools respons.
Ultimately, what we're trying to do here is we're trying to stay on
a jail because I I'm I for one I don't
like jail. I don't think jail is fun. I don't think it's anything that
anybody wants to do. So, let's just make sure as we
move forward and we work together that we use these tools responsibly. So
I look forward to working with you and let's go ahead and
jump right into our material.