Question to the community from another community member (e.g. not a mod): would megathreads make sense for some big events, like the ongoing Ivanti stuff or such? Basically a place to organize the coverage and resources rather than individual posts?
Thoughts?
I think the problem is defining what a “big event” is.
If your org uses Ivanti VPN, then it’s a big deal for you. My company does not use Ivanti, so it’s a non-issue for us, for example.
log4j and Citrix (the original) were examples of the megathreads we did
by “big event” it’s less about what it is for any end user and instead the quantity/value of material coming out from cybersecurity companies, researchers, etc. thinking that a megathread would help organize it.
We have in the past, but now there is are so many
In short they are useful and anyone can do them here.
I lived this
https://www.reddit.com/r/blueteamsec/s/XqmvNWbfui