►
Description
No description was provided for this meeting.
If this is YOUR meeting, an easy way to fix this is to add a description to your video, wherever mtngs.io found it (probably YouTube).
A
A
C
B
B
B
For
some
reason,
Zoom
decided
that
I'm
going
to
try
to
launch
it
in
Chrome.
It
just
didn't
want
to
do
anything.
B
E
B
B
E
Okay,
so
I
put
a
couple
of
things
into
this
first
one
just
as
a
first
pass
to
see
if
the
Matrix
made
sense.
It
is
making
mostly
sense
to
me
and
all
that
I've
done
so
far
is
so
I
just
skipped
over
the
SKF
159
Labs.
That
need
to
be
sorted.
E
B
All
right,
let's
walk
across
the
the
spreadsheet
and
just
validate
that
everyone
is
cool
with
what
we've
got
in
each
of
the
columns.
You
may
have
any
suggestions,
it's
time
to
speak
up,
speak
through
an
ID
number
in
the
First
Column.
That
should
not
be
too
controversial.
We
have
the
title
hyperlink
to
The
Source
in
the
second
column
also
should
not
be
too
controversial.
B
Column
C
is
content
type.
So
if
I
jump
over
here
currently
content
type
is
what
we
have
listed
in
column
A.
B
F
D
D
E
B
F
A
E
Yeah
so
maybe
we
title
that
live
presentations,
conferences
and
then
below
static
guides
and
talk
and
documentation.
D
F
E
B
D
C
E
Okay,
how
about
skill
based
project
is
that
what
this
would
be
defined
as
because
we've
got
demos
which
is
me
repeating
somebody
else's
work,
but
a
skills-based
project
implies
that
I've
done
something
new
with
knowledge.
E
F
Actually
go
ahead,
yeah
and
I'll
swap
what
they
have
is
projects
I
can
send
you
a
demo,
for
example,
is
what
somebody
just
submitted
to
SKF
but
like
it's,
for
example,
like
this
guy
did
another
front
end
for
like
the
requirements
tool,
so
you
can
go,
he
has
a
project
or
you
can
go
in
there
select
a
bunch
of
like
things
like
my
app
is
gonna.
Do
this
and
basically
it
generates
a
requirement
like
tool.
So
that's
what
they
would
Define
as
projects
is
people
doing
stuff
like
that.
A
So
Professional
Security
Training
vendors,
like
security
Journey,
once
you
reach
a
certain
level,
they
ask
for
you
to
demonstrate
a
skill
yeah.
So
here's
what
your
objective
is
go
ahead
and
code
it,
and
then
that
project
is
turned
in
and
reviewed
for
completeness,
so
yeah
I
think
we
need
to
keep
it.
I
would
like
to
get
rid
of
the
example,
and
maybe
we
can
figure
out
a
way
to
rephrase
it.
Somebody
had
a
better
suggestion
before
is.
E
At
the
end
of
the
material,
very
materially
different,
it's
so
it
it's
exactly
what
they
just
said.
So
this
would
be
the
cap
Zone.
Essentially
so
after
they've
done,
the
Hands-On
I
need
them
to
be
able
to.
Can
they
drive
it
without
autopilot
on
and
if
not,
I
can't
start
them
there.
So
that
I
would
see.
I
would
say:
that's
a
skills-based
project
or
skills
demonstrating
project.
A
Skills-Based
project
and
I
also
like
to
add
you
know,
slash
Capstone
I,
think
that.
C
E
Have
to
do
we
have
to
because
that's
I
mean
honestly,
that's
how
this
has
to
be
fundamentally
different,
there's
so
many
curated
training
resources
right
now
and
no
one
can
get
jobs
because
no
one
can
demonstrate
still
without
being
in
a
job.
That's
our
biggest
Gap!
So
yeah,
it's
going
to
be
red
all
over
the
place.
B
E
A
B
E
Well,
why
don't
we
just
okay,
so
I'm
gonna,
recommend
it
or
remove
the
label
of
demo
so
that
we
enable
ourselves
to
have
a
direct
pathway
from
what
I
would
recommend
right
is
like
blogs.
Entry
to
a
live
presentation
on
context
goes
to
a
webinar
on
the
subject,
goes
to
a
Hands-On
lab
goes
to
skillsbury's
project,
so
I
want
them
to
have
exactly
the
skills
that
they
need
and
then
to
immediately
transpose
that
onto
a
new
domain.
F
E
F
A
B
E
F
E
Yeah
so
there
I
would
say.
Maybe
we
should
consider
these
as
there's
contextual
content,
which
is
blogs,
webinars
Statics?
Well,
not
Statics,
just
the
general
content,
then
we've
got
our
sort
of
four-part
pathway
where
you'd
go
to
like
a
webinar
presentation,
Hands-On
lab
skills
based
and
then
I
think
the
hackathons
are
kind
of.
B
A
B
B
F
F
I
just
want
to
share
this,
that
a
lot
of
people
have
this
ideology
that
they
never
have
to
learn
coding
in
security,
and
it
was
really
hard
sometimes
to
get
people
to
understand,
fundamentals
that
were
just
because
they
were
in
terminal
and
people
were
like.
No,
it
needs
to
have
a
UI.
E
F
E
Okay,
so
I'm
also
kind
of
thinking
that
a
Persona
we're
not
considering
here
is
that
level
of
learner.
So
there's
a
good
amount
of
like
management
material
out
there
that
we
could
bring
into
this
like
devsecops
management,
but
also
I,
think
something
that
I
would
love
to
see.
And
this
is
just
a
me
note
and
wouldn't
happen
in
year.
One
and
probably
not
even
on
this
track,
but
like
I,
was
talking
to
a
bunch
of
policy
makers
about
Ai
and
ML
and
open
source
on
Monday
and
I.
E
Couldn't
it
was
awful,
it
was
awful
and
I
came
up
with
this
metaphor
and
I
hope
they
weren't
too
offended.
But
I
was
like
it's
like
you're
all
trying
to
regulate
the
automotive
industry,
but
you're
all
pathologically
afraid
to
learn
how
to
drive
a
car.
This
is
so
stupid,
step
away
from
my
machines,
so
yeah
I
think
maybe
there's
not
a
lot
of
cluster
of
Education
around
that,
which
is
why
I'm
still
having
to
sit
my
body
on
panels,
but
if
I
can
pull
some
together,
a
like
policy,
CSO.
E
Person,
Persona
might
be
something
we're
missing
for
this.
F
They,
like
the
new
graduate
Persona
you
had
saw
me
because
I
would
actually
put
those
people,
because
there's
other
talks
that
I've
had
in
Gen
2
about
how
the
terminal
security
has
changed
over
the
years,
and
your
education,
like
in
your
definition
of
security,
really
depends
on
what
year
you
kind
of
went
to
school.
I.
F
Well,
yeah,
if
you
have
a
video
crop,
I'd
like
to
see
it
after.
E
A
So
my
question
around
personas
Sal,
you
had
changed
on
the
Matrix
Tab
and
you
added
in
app
security
down
to
new
security,
persona
and
I'm
fine
with
those
categories,
but
they
we've
I,
think
we've
lost
things
like
we
just
identified
ospo
executive,
even
we
originally.
This
whole
group
at
the
very
first
meeting
was
talking
about.
How
do
we
help
college
students?
How
do
we
help
primary
and
secondary
education
students?
How
do
we
help
people
that
are
changing
careers
and
I?
Don't
see
how
the
things
you
have
listed
address
those
perspectives.
E
Yeah
yeah,
so
I
think
just
one
clarification
here
and
then
I
think
all
we
need
is
a
clarification
on
another
column,
so
we're
gonna
need
two
separate,
matrixes
and
I
think
we're
under
scoped
and
the
way
that
we're
defining
right
now
the
learner
level
and
audience.
So
this
we
need
both
of
those
matrixes
together.
I
think
if
we
have
this
Matrix
as
many
percent
as
we
can,
that
is
our
end
point
to
the
kind
of
education
we
need
at
the
end
of
two
years.
E
But
right
now
we
really
and
I
think
this
is
kind
of
the
bummer
here.
I'm
really
struggling
to
get
us.
Those
like
long
range
like
to
even
get
us
that
full
app
SEC
from
right,
maybe
even
high
school,
all
the
way
up,
because
we're
missing
a
lot
of
those
resources.
But
for
that
could
we
just
make
the
learner
level
in
column
P
more
nuanced.
E
Because
right
now
it's
just
beginner
intermediate
Etc
and
we
could
make
this
the
like
student,
new,
grad
and
then
and
then
I
kind
of
think,
I
kind
of
think.
The
Persona
of
like
career
changer
can
just
be
slash
osbo
because
that's
sort
of
the
same
knowledge
they
kind
of
made
a
bucket
of
everything,
but
not
super
high.
F
A
It
I
also
don't
want
to
get
into
IP
subnetting
right,
but
there's
a
lot
of
things
that
exist
within
the
security
domains
that
we
don't
necessarily
want
to
focus
in.
On.
C
F
A
F
Right,
but
what
I
was
gonna
say
was
it's
just
it's
it's.
It's
yeah
I
forgot
what
I
was
gonna
say,
but
but
yeah
you
get
my
place
early.
It's
like
6
a.m.
For
me
so
and
I
have
it
I've
been
up
all
night
retooling
lvm
on
gen
2.,
so.
A
And
I
think
from
like
an
SKF
perspective,
you
know
the
the
career
paths
or
career
types
Sal
has
listed
here
under
personas
on
the
Matrix
tab.
I,
don't
know
that
you
are
as
interested
about
that.
Okay
you're
focused
on
the
content
and
eventually
we
will
figure
out.
Oh,
we
need
to
borrow
you
know
these
three
labs
and
this
podcast
and
this
class,
and
that
makes
endpoint
mobile
security,
training
I.
F
And,
yes,
that's
what
I
think
one
of
our
people
suggested.
We
have
yet
to
really
talk
about
it,
but
that
was
one
of
the
suggestions
of
how
to
handle
that
and.
E
D
E
A
B
Just
yeah,
if,
if
I
may,
pull
us
back
to
the
information
on
the
spreadsheet
for
now
those
are
those
are
good
call
outs.
If
you
please
like
to
add
those
into
the
agenda,
so
we
don't
forget
to
to
follow
up
on
those
different
things.
I
would
appreciate.
D
B
But
I'm
going
to
pull
us
back
to
the
the
task
at
hand
here
for
the
personas
that
we
have
listed
I.
Think
from
what
I'm
hearing?
Generally
speaking,
we
have
agreement
on
these
I
had
one
suggestion
which
is
very
nitpicky
instead
of
saying
new
security,
Persona,
say
other
security
Persona.
So
people
don't
misunderstand
that
oh
I'm,
a
new
security
person.
So
that's
me
yeah,
but
beyond
that
I
have
no
issue
with
these
personas.
Does
anyone
have
anything
they'd
like
to
to
change
or
ADD
to
what's
listed
here.
A
I,
don't
know
that
our
purview
is
churning
out
identity
and
access
band
being
a
20-year
veteran
of
identity
and
access
management.
I
don't
feel
that
our
purview
is
necessarily
creating
more
of
me.
Okay,.
A
A
E
E
I
want
to
keep
those
separate
I
do
think
those
are
separate,
but
I
kind
of
think.
It's
not
totally
the
same,
but
cloud
and
supply
chain
can
be
will
be
going
more
together
over
time,
but
I
would
keep
them
separate
for
now.
D
E
D
A
B
I
would
like
to
skip
over
stack
language
momentarily
and
talk
about
column
o,
which
is
content,
theme
kerb
and
I
had
some
conversations
around
this
the
other
day
we
have
a
proposal
we'd
like
to
pitch
to
the
group
here.
As
far
as
changing
this
from
content
theme
to
domain
and
crew,
did
you
want
to
discuss
yeah.
A
There
you
go
so
within
the
world,
there
is
a
cyber
security
education
organization
called
ISC
squared
they
produce
a
certification
that
is
incredibly
well
peer-reviewed,
continually
updated,
called
the
csslp
and
they
arrange
application
security
into
eight
domains,
and
this
is
informed.
They
have
academics,
industry
people,
it's
a
very
well
reviewed
and
maintained.
So
my
proposal
is
for
Content
theme.
A
A
Show
you
how
all
that
aligns
to
the
eight
domains,
cool
and
then
Glenn
and
Randall
have
been
talking
about
asvs,
so
I
took
that
content
and
that's
all
the
things
highlighted
in
green
and
show
how
it
lines
up
with
the
domain
model.
A
Oh
pardon
me
dope,
yeah
and
if
you
like,
look
at
column
f,
for
example,
in
all
of
our
conversations
we
seem
to
have
a
gap.
A
We
don't
talk
about
life
cycle
management
at
all,
so
we
don't
talk
about
dependence,
management,
we're
not
talking
about
curating,
anything
we're
not
talking
about
having
a
update
policy
or
how
to
get
things
out
into
the
world.
So
you
know
you
leveraging
this
model
I
think
we
can
quickly
see
where
we
have
a
lot
of
content
so
like
the
asvf
asvs
stuff,
which
is
predominantly
what's
already
in
SKF.
A
A
And
I
know:
David
talked
about
David
I've
talked
a
lot
about
security
architecture
principles
in
the
year,
so
I
know
we
have
information
there.
We
can
leverage,
but
you
know
if
we
go
with
the
domain
model
and
categorize
things
here,
so
categorize
it
at
the
broad
level,
and
you
can
see
that
the
secure
software
implementation
and
programming
bucket.
We
have
a
lot
of
available
content
in
that
category,
so
we're
not
losing
that
information,
but
we're
able
to
kind
of
up
level
things
to
speak
generically
to
a
category
okay.
E
I
think
that
sounds
very
good
to
me
and
then
we
can
just
make
it
in
the
spreadsheet
so
that
as
soon
as
I
choose
the
broader
category,
I
can
only
choose
from
the
sub
ones.
And
then
you
know
curation
issues.
Thank
you,
I
think
I
could
use
from
sko
like
if
we
can
hyperlink
or
what
is
the
best
way,
because
right
now,
there's
159
Labs
that
I.
F
E
D
Yeah
no
I
think
at
the
moment
not
the
idea
was
actually
like
Randall
already
mentioned,
in
the
call
to
link
them
to
the
specific
course
material,
for
example,
from
David
wheeler.
To
start
with,
we
do
have
a
spreadsheet
where
we
actually
correlated
them
all
with
the
testing
guide,
so
that
is
more
the
offensive
security,
part
and
security
testing,
so
that
that
area
we
already
met,
but
we
also
need
to
do
similar
for
the
asps
and
thus
also
all
the
categories
that
you
see
here.
D
But
that
is
something
that
we're
busy
with.
Actually
it's
for
the
testing
guide.
We
we
have
it.
So
we
are
offensive
Security
card.
D
So
I
will
probably
look
up
the
link,
the
Excel
that
we
created
and
try
to
share
it
in
a
moment
at
least,
and
you
see
what
the
coverage
is
from
yeah
the
the
testing
guide.
The
offensive
part.
E
E
F
B
B
C
B
All
right
now
for
learner
level,
again
I
think
we
agreed
that
we
were
going
to
switch
this
up
into
more
of
a
matrix
style
like
we
do
with
personas
I.
Think
the
I
think
the
ask
Salvage
that
you
brought
up
is
to
make
it
a
little
bit
more
granular
than
we've
got
for
beginner
intermediate
Advanced
yeah.
E
And
we've
defined
those
I
think
in
plan
one
for
defining
personas.
Let
me
see
what
I
can
bring
up.
A
Same
one,
three.
B
A
B
I'll
have
to
put
a
comment
in
there
for
that,
so
all
right
all
right.
So,
let's
jump
back
here
to
column
and
we
have
listed
here's
stack
language
which
corresponds
to
what
we
have
in
column,
B
right
now
on
the
X
graph
table.
Not
everything
is
going
to
have
a
language,
obviously
right.
So
how
do
we
need
to
add
more
information
to
this?
Do
we
need
to
to
adjust
the
the
intent
of
this
column,
or
do
we
just
leave
it
blank
for
things
that
are
not
language.
E
D
A
D
Sorry
go
ahead,
Glenn
no
I
want
to
say
potato
quote:
yeah
I
got
the
idea,
but
you
know
if
you
really
want
to
teach
something
about
your
building.
You
know
the
devils
and
the
details
right.
If
you
use
the
the
note,
the
safe
library
for
I
don't
know,
yamo
call
loading
and
python
you're
good.
If
you
use
the
normal
notes,
function
lights
in
that
library,
then
your
screens,
then
you
have
a
code
execution
when
you
load
your
mobile
costs
is
really
the.
E
F
D
A
And
I
would
propose,
since
not
every
artifact
we
have
is
going
to
be
directly
affiliated
with
the
language.
If
I
think
we're
happy
with
this
initial
list,
and
we
always
can,
if
there's
different
languages
or
different
techniques,
we
can
talk
about
adding
that
because
there's
plenty
of
space
within
the
column
to
add
those
as
we
start
categorizing
things
yeah
but
I-
think
no
language
in
multi-language
are
very
useful,
but
you
know
for
talking
to
somebody
about
gdpr.
That's
not
necessarily
directly
related
to
a
language.
B
B
C
Later
sorry
to
go
back,
I'm
I'm,
also
it's
my
brain,
that's
slow
enough
down!
Let's
computer
today
did
we
included
space
for
our
other
language
to
catch,
go
on
any
other
things.
E
E
E
E
C
B
A
C
Keeps
putting
miscategorizing
absolutely
everything?
Actually,
that's
a
good
point
with
regard
to
some
of
the
descriptions
today.
Only
for
I
was
here.
I
might
not
understand
how
to
categorize
certain
things.
So
thank
you
for
certain
explanations
today,
so
whom,
when
we
are
collecting
the
content,
I
presumed
it's
other
people
that
are
not
on
this
call,
that's
going
to
collect
content.
A
B
A
But
no
that's
very
valid
point
Judy
and
I'll.
You
know
because
this
will
be
we're.
Gonna
have
a
a
freeze
so
to
speak
at
some
point
where
we
stop
writing
content
for
year,
one
taking
submissions,
but
we
want
to
make
sure
that
the
list
is
always
available
for
people
to
put
ideas
for
our
backlog
for
future
work.
So
again,
that's
submitted
by
I
think
would
be
useful
just
to
say:
hey
Dave.
What
you
know.
Why
do
you
think
this
class
about
gdpr
is
useful
to
us?
A
And
maybe
eventually
this
sheet
gets
turned
into
a
database
and
we
have
some
type
of
front-end
submission
form,
but
you
know
I
think
today
do
we
think
this
is
good
enough
to
start
moving
forward
once
we
get
the
cleanup
on
it.
B
Rails,
anybody
else
have
phosomatics
I,
think
that
we've
accomplished
what
we
set
out
to
do
here
to
get
the
the
initial
version
of
this
categorization
and
such
put
together.
I.
C
Think
this
is
really
helpful
for
collecting
the
information
rather
than
just
throwing
it
into
a
g-doc.
So
thanks
for
everybody,
my
question
is
how
now
to
business
might
get
very
long.
It
could
be
many
duplicates
if
we're
all
a
lot
of
us
are
just
go
to
the
same
places.
To
find
our
information.
Is
that
going
to
be
another
step
that
we
go
down
through
for
duplicates
and
things
like
that
or
how
we
got
to
manage
that
I
might
name
something.
F
A
E
So
sorry,
so
I
think,
if
we
can,
what
I'd
recommend
right
now
is
that
we
take
so
I've
started
doing
this,
that
I'm
just
taking
the
links
off
of
all
of
these
other
spreadsheets
on
this
and
putting
them
to
this
top
front
Matrix,
so
that
we've
all
got
the
same
reference
number
for
an
object.
The
only
thing
I
haven't
done
to
SKF.
E
If
you
all
could
do
this
for
your
Labs
just
because
I'm
not
going
to
commit
to
159
evaluations,
but
if
we
can
have
them
with
all
of
these
indexes
on
them,
then
we're
in
a
really
really
golden
spot.
E
So
I
would
recommend.
Let's
use
just
this
front.
Matrix
page
it's
traceable!
So
even
if
anybody
erases
at
all
we'll
get
it
back,
don't
worry
and
then
my
last
request
is
that
we
could
meet.
We
hold
on
to
the
submitted
by
column
only
until
this
becomes
a
like
actual
object
living
on
a
server
at
which
time
I
would
like
my
provenance
removed
from
it.
So
I'm
not
responsible
for
maintaining
it.
Please
cool,
okay,
good
chat.
E
B
E
B
E
Yeah
I
mean
for
data
like
not
hygiene,
just
for
sanity.
I
would
start
with
just
like
copying
these
columns
and
putting
them
like
on
top
on
your
page
and
just
organizing
that
whole
subset.
Of
course,.
B
Yeah
yeah
and
if
I
can
ask
if
we
could
wait
until
Monday
before
we
start
loading
a
bunch
of
information
into
the
sheet,
give
give
myself
and
maybe
Crow
a
chance
today
tomorrow,
just
to
get
things
straightened
up
on
here,
I'm
going
to
send
an
email
out
to
the
Sig
on
Monday
and
know
that
the
spreadsheet
that
we've
got
is
the
the
final
version
1.0
and
then
please
absolutely
feel
free
to
start
loading.
Information
in
here
I
got
it.
Thank
you.
C
B
There's
a
number
of
folks
who
have
asked
about
when
they
start
putting
information
here
so
I
think
people
have
data
that
they
want
to
start
loading
in
and
if
they
want
to
do
that,
that's
great
I
think
we
should
try
and
do
some
someone's
Organization
for
for
going
out
to
places
we
have
not
already
looked
at
and
skfs
obviously
is
covered.
B
But,
like
you
said,
Judy
I
offered
to
do
ISE
square
there's
a
couple
other
ones
we
had
written
down,
so
yeah
I
think
we're
gonna,
ask
people
to
to
go
in
certain
places
and
try
and
reduce
the
duplications
as
much
as
possible.
F
Did
you
want
me
to
wait
on
the
email
or
the
communication
for
the
Jennifer
blight
for
the
call
to
add
stuff
to
the
sheet.
A
Let's
wait
until
we
get
the
sheet
done
like
Dave
mentioned.
Let's
talk
about
it.
He's
gonna
send
an
email
out
Monday.
You
said.
F
D
F
A
B
All
right,
just
on
my
share,
so
I
actually
see
everybody
again
cool.
Well,
hey!
Thank
you
very
much.
Everybody
for
joining
and
participating.
We
were
able
to
get
through
this
I'm.
Very
much
appreciated
we'll
have
this
wrapped
up
by
the
end
of
the
week.
Wait
for
the
email
on
Monday
then
proceed
to
add
your
information
and
we'll
talk
again
at
the
next
meeting
one
week
from
now.