Know Your Adversary | Special Guest Vladlen Rotshteyn (Ep. 15)
Source: YouTube · SpecterOps · published Sep 15, 2026 · 34:05
Vlad Rostein explains that attack surface management depends on visibility, context, and data-driven prioritization—not chasing CVEs 6:39-7:07.
Key Takeaways:
• Vlad pivoted from 15 years of enterprise IT into security via CISSP and shadowing, leveraging deep tribal knowledge 1:43-2:37
• ASM spans external presence, perimeter, internal assets, and identities—"you can't protect what you can't see" 7:07-7:46
• Context beats raw severity: the same CVE on an exposed vs. isolated asset is a different problem 8:31-9:20
• Gap coverage matters more than traditional vuln management—enterprises over-rely on point tools 11:27-12:08
• He surfaces findings while teams closest to each system make changes, since they know business impact 18:43-19:15
• BloodHound's privileged collection (local admins, sessions, groups) provides underrated "connective tissue" visibility 23:41-25:21
• AI won't fix basic hygiene—"garbage in, garbage out"—validate outputs and know what you're asking 29:28-30:13
Bottom line: see what you need to protect and get your house in order before reaching for AI—metrics may worsen as visibility improves 16:21-17:27.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
[music] [music] Welcome back to the Know Your Adversary podcast. I'm Jared Atinson. >> I'm Justin Kohler. >> And today we're joined by Vlad Rostein. Uh Vlad, you want to introduce yourself? Maybe tell us a little bit about your background and how you got into cyber security? >> Yeah, sure. So, um I'm Vlad. Um I've been doing uh essentially you know enterprise uh IT work since early 2007. So uh got into the industry kind of in a a roundabout way. So uh could started college and computer science then kind of dropped that but always maintain know the interest in IT and stuff. So eventually you know I ended up with a degree in chemistry but I was like all right well what am I supposed to do with chemistry but also how to do uh computer stuff. So ended up um you know uh getting uh really lucky …