Mandiant is Google's incident response consulting business. Having worked for many years in that field myself (though not for Mandiant), they're probably sick of going to the same old engagements where companies have been getting owned the same way over and over again for the last 15 years.

What releases like this do is give IT ops people the ammunition they need to convince their leadership to actually spend some money on fixing systemic security problems.

▲

alfiedotwtf 3 hours ago | parent [-]

> Mandiant is Google's incident response consulting business

Consulting business? I was under the impression (from Google Reader) that if users aren’t in the millions, then they’ll kill the project. How could they also run a high-touch consultancy?!

> they're probably sick of going to the same old engagements

Hmm… consultancies love this type of recurring revenue - it’s easy money

▲

wolpoli 3 hours ago | parent | next [-]

> Consulting business? I was under the impression (from Google Reader) that if users aren’t in the millions, then they’ll kill the project. How could they also run a high-touch consultancy?!

Google also has the Project Zero which doesn't fit into Google business culture either. I wonder if Mandiant is paying for their payroll.

▲

bri3d 3 hours ago | parent [-]

Project Zero has been around for 8 years before the Mandiant acquisition.

	▲	wolpoli 43 minutes ago \| parent [-]
		My bad. Still not sure which business unit is paying for their payroll.

▲

hiddencost an hour ago | parent | prev [-]

Google is a quarter million person company (if you count full time, temps, vendors and contractors).

Google Cloud is basically an entirely different company than Search or Maps. Cloud will happily sell you $10m in compute a year and a value add $400k of security consulting.