►
From YouTube: OSS-SIRT - Identify Core Services 2 (October 31, 2022)
Description
No description was provided for this meeting.
If this is YOUR meeting, an easy way to fix this is to add a description to your video, wherever mtngs.io found it (probably YouTube).
B
Protection
duh,
two
all
right,
I'll,
probably
just
share.
Probably
the
easiest
thing.
B
I'm,
getting
there
first
up
was
you
could
find
the
zoom
window
there.
We
go.
B
Basically,
just
yeah
editing
in
things
that
were
messy,
I
didn't
get
fully
finished.
I
two
Dot
four
seems
to
be
a
subset
of
2.2
I.
Don't
we
can
leave
them
separate,
but
I.
Think
I
put
a
note
in
here.
A
B
Can
decide
at
the
last
minute
I
think
you
know
it's
easy
enough
to
yeah
move
the
headings
around
it
does
as
of
this
moment,
but
you
know
it's
finally
leave
it
separate
for
the
moment,
but
I
have
a
note
in
there.
So
let
me
let
me
scroll
for
a
minute
and
see
if
there
are
questions
or
yeah,
but
I
worked
backwards.
This
time
at
least
so,
but
section
2.1
then
got
the
least
attention.
D
B
Have
anything
sort
of
outstanding
like
questions
that
I
have
for
the
group
that
need
a
decision?
Maybe
it
makes
some
sense.
I
realized.
No
one's
had
any
any
notice
on
this,
but
to
review
some
bits.
I,
don't
know
what
the
best
best
use
of
time
this
year,
Chrome
again
I
have
more
editing
to
do,
but.
A
Well,
if
it
was
my
section
I
would
ask
folks
to
take
the
balance
of
the
meeting,
reviewing
this
and
providing
any
comments
or
feedback
and
then
adjourn.
But
it's
not
my
reading.
D
B
B
Personally,
have
that
problem
here,
I
mean
nothing
is
blocking
me,
it's
just
a
matter
of
time
and
integrating
things
and
deciding
so
which
part
they
go
in,
and
you
know
teasing
out
the
Big
Blob
of
text
into
some
some
bullets.
B
I,
don't
know
if
there's
consistency
or
a
thing
here
previously
we
were
talking
about
sort
of
calendar
time.
You
know
this
will
take
a
month,
but
I
don't
think
that
was
22
days
of
eight
hours
a
day
time.
B
But
it's
hours
and
is
it,
is
it
eight
hour
day
yeah
calendar
time
or
elapsed
time?
It.
A
B
Okay,
that
will
make
things
easier,
because
I
had
both
in
here
and
it
was
I-
was
tripping
over
that.
A
So
if,
if
we
could
fix
that
before,
I
have
to
recombine
the
plan,
that
would
be
awesome.
Okay,.
B
A
And-
and
we
always
can
have
additional
meetings
or
kind
of
meetings
on
slack,
there's
a
lot
of
different
ways.
We
can
do
this,
but
you
know
unless
something
says
we
need
to
spend.
You
know
one
month
of
contiguous
time
and
just
put
hours
we'll
figure
it
out
got
it
we'll.
Do
we're
not
going
to
put
this
in
a
Gantt
chart,
so
don't
worry
I.
B
Yes
again,
it
very
coarse
level,
but
still
right,
calendar
time
versus
ever
time.
So,
okay,
good,
let
me
scroll
quickly,
but
otherwise.
I
think
I
will
take
the
advice,
I
heard
to
give
back
time
and
ask
folks
to
review
so
2.1.
B
Got
the
least
recent
attention,
so,
if
folks
are
going
to
review,
do
it
do
it
in
reverse
number
order,
because
those
got
the
other
ones
got
more
attention.
B
Engagement
model
right
heavily
depends
on
what
the
services
are
and
without
without
pulling
out
Randall's
favorite
number
of
10
cases
a
year.
Sorry
I
really
had
to
say
something.
C
B
B
Whatever
the
number
is
yep,
we
got
to
decide
that
number
and
what
services
we'll
need.
You
know
so
engagement
models,
a
lot
of
process
stuff,
it's
tied
to
sort
of
Staffing
resource
needs,
but
it's
not
the
Staffing
plan
directly
itself.
B
This
one
got
a
good
bit
of
attention,
except
this
last
bit
they
didn't
quite
break
out.
All
the
way
didn't
get
the
estimates.
Staffing
requirements
again
depends
on
the
first
couple.
Yeah
you
need
to
do
some
I
think
we
have
consensus.
So
the
the
plan
here
is
a
significant
volunteer
commitment
from
folks.
So
we're
going
to
have
a
significant
volunteer
staff.
Is
the
plan
so
I
didn't
leave
that
open
for
a
question.
I
just
said:
there'll
be
significant,
volunteer
stuff
thanks.
A
B
Got
it,
let
me:
do
you
find
it
hi
write
this
down.
A
C
A
A
B
A
Like
for
the
many
of
these
tasks
are
going
to
be
completed
by
us
directly
here,
so
those
I
generically
refer
to.
As
you
know,
Sig
volunteers,
if
I
need
like
Jennifer's
time
in
marketing,
I,
would
call
that
a
foundation
volunteer.
A
Okay,
it's
a
covered
cost
and
if
she
needs
to
get
like
a
a
graphic
designer
through
an
agency,
that's
you
know
an
external
cost
and
then,
like
I,
will
have
to
figure
out
kind
of
what
you
know
that
when
we're
asking
the
members
to
donate
people
kind
of
what
time
commitment
we're
looking
for
you
know
so
many
hours
per
month
or
quarter,
we
need
to
kind
of
pass
that
out.
I
mean
I
would
state
that
as
cert
volunteers.
B
B
B
And
then
Sig
volunteer.
B
A
We
could
get
community
volunteers
right.
That
would
be
fine
yeah.
If
there's
a
need
for
that
and
then
you
know
Foundation
voluntold
versus
we
need
to
hire
a
person
and
that's
you
know
a
new,
a
new
sure
right.
A
Again,
that's
people
like
Jory,
like
we
need
administrative
help
on
or
kind
of
coordination
or
like
Jennifer
from
marketing,
or
you
know.
We
need
bellendorf's
time
for
him
to
go
around
and
write
a
speech
to
the
governing
board.
Until
you
work
he's
an
employee
of
the
foundation,
I
I,
you
know,
I
can't
tell
him
what
to
do,
but
I
can
ask,
say:
hey
Brian
I've
got
16
hours
of
work
for
you.
Can
you
please,
you
know,
agree.
A
B
All
right,
I
think
I
can
organize
with
that.
B
All
right,
we
already
said
we
want
actual
effort
hours,
please
actual,
where
a
staffing
requirements.
B
And
then
there's
a
this
maybe
gets
calculated
when
these
get
reassembled.
But
it's
go
time.
A
lot
of
these
Milestones
are
developing
docs
and
doing
a
bunch
of
planning
and
stuff,
and
then
the
cert
can
kick
in
right
and
do
stuff,
which
could
it's
going
to
be
months?
Probably
yes
from
from
go
time,
hopefully
not
12,
but
at
least
three.
Maybe
six
right,
yeah
yeah.
A
Actually
doing
cert
is
going
to
be
I
would
say
no
less
than
mid
next
year.
No.
B
B
Kicking
official
program
kicks
off
officially
able
to
perform.
First
service
is
yeah
a
time.
Yeah.
Okay,
I
had
something
else.
B
Compensation
and
funding
stuff,
but
I'm
not
going
to
write
that
in
here
am
I
I'm,
not
really
right,
I,
don't
even
know.
What's
I,
don't
know
what
it
is.
Even
what
are
going
rates
for,
Foundation,
volunteers
or
I
mean
well.
A
Yeah
yeah.
A
C
It's
not
important
I'll.
Let
you
guys
finish.
B
Yeah
I
can
also
frame
it.
As
you
know,
these
are
a
lot
of
these
are
Milestones
or
things
need
to
get
done.
So
if
someone
needs
to
figure
out
compensation,
Etc,
but
I'm
not
going
to
put
the
I'm
not
going
to
put
the
hourly
rate
in
this
stock,
yeah.
A
Not
hourly
rate,
but
for
whatever
rate,
but
what
does
it
come?
What
does
Google
get
for
volunteering
two
incident
responders,
for
you
know
six
months,
yeah?
Okay,
how
do
we
help
them?
Make
that
decision
easy?
A
Like,
for
example,
if
like
for
like,
if
a
security
researcher
comes
to
us
at
some
point,
like
looking
for
a
bounty
or
a
maintainer,
fixes
something
and
when
I
reward
them,
we
probably
should
have
some
talks
about
that
or
say
we
will
intentionally
wait
on
this
or
push
them
to
sos.dev
or
whatever.
Whatever.
C
A
B
B
Looking
at
2.4.
B
Yeah
I,
don't
think
I
was
ripping
too
much
out,
but
this
sort
of
default
to
figure
out
the
engagement
model
and
then
right,
there's
a
maybe
initial
criteria
and
then
the
people
actually
doing
the
work
refine
that
to
make
it
actually
work
for
them.
B
You
know,
there's
a
it's
tied
to
the
processes
and
it's
very
tied
to
the
engagement
model.
Obviously,
and
then
you
know
create
it
and
publish
it
and
then
review
it
because
I'm
guessing
it'll
the
there'll
be
an
early
review
that
probably
will
be
desired,
just
a
guess
in
advance.
So.
A
A
Don't
think
so?
No!
Okay!
Let
me
let
me
look
it's
okay,
yeah,
because
three
is
really
focused
on
acquiring
and
setting
up
the
tools
and
I'm
going
to
put
the
program
manager
in
there
and
that's
you
know,
taking
the
plan
and
you're
making
it
happen.
A
B
Whatever,
okay
to.
B
Or
okay,
all
right
so
I
did
a
few
things.
I
guess
to
ask
about,
but
I
still
don't
have
anything
consensus,
discussion,
sort
of
decision
blocking
things
to
ask
so.
B
B
Here
we
go,
the
mail
would
be
great
if
you've
got
any
comments.
See
me
I
need
to
put
on
mail,
and
you
could
probably
skip
commenting
on
2.1
as
it
currently
exists,
because
it's
going
to
get
at
least
cleaned
up.
The
material
of
2.1
is
I,
think
mostly
stable.
It's
just
not
organized
so,
and
you
know
no
comments
are
fine.
I
realize
I
just
pushed
the
stuff
moments
ago.
So.
B
A
Right
I
will
be
glad
to
spend
15
minutes
or
so
looking
through
this
and
providing
you
some
feedback.
A
B
A
D
C
B
C
I
can
paste
it
to
you.
If
you
want,
is
that
out.
C
A
B
We're
on
yeah,
okay
I
can
grab
it
from
there.
I
yeah
thanks
I
the
table
across
my
mind
as
well,
but
then
I.
A
C
B
Yeah,
hey
I
can
rent
I
can
thank
you.
I'll
I'll
be
able
to
grab
it
from
there.
I
won't
be
ready
for
it
right
away.
I
considered
a
table
also,
but
the
way
my
stuff's
laid
out.
D
Yeah,
it
took
me
a
second
and
and
I
realized
that
some
of
mine
were
like
completely
out
of
like
because
sometimes
I
have
two
volunteers
at
this
time,
and
then
I
have
others
that
are
like
this
time.
With
two
volunteers,
I
was
like
I'd
better
to
make
a
table.
B
A
D
B
Sure,
no
sort
of
more
the
whole
development
to
date
has
not
been
I,
have
not
been
oriented
on
Counting
hours
for
things.
So
you
know
some
of
the
some
of
the
bullets
are
a
milestone.
This
is
done
or
not
check
off
that
we
made
it.
Some
are
commentary.
Some
are
yes,
eight
hours
of
this
16
of
that
kind
of
a
mix
so.
A
B
B
Stupid
slack:
okay,
yeah
mail.
If
you
got
feedback,
if
you
don't
that's
fine
I'm
working
until
trick-or-treat
time
on
on
this,
so
all
right
got
it.
Thank
you
all
right.
Thanks
all
bye,
everybody
thanks
thanks,
bye.