Security Orchestration, Automation and Response (SOAR) tooling is intended to increase efficiency and consistency. These tools also promise to diminish the cost of operating a Security Operations Center (SOC) for most organizations. If used properly, these tools can do all of these things. The challenge is that the tools are frequently bought to avoid the one thing that most organizations don\'t seem to be able to do on their own: figuring out...

You are probably aware and knowledgeable about MITRE ATT&CK, BUT what happens when its not applied well? With the pandemic, it brought the rise of working remotely, which increased inefficient communications and burnout and adversaries used it in their favor when exploiting companies around the world. With a 400% increase of breaches in 2020, companies need to become much more aware of techniques that adversaries use to attack, in order to...

The 2nd annual SANS Cyber Solutions Fest aims to connect cybersecurity professionals of all levels with the latest solutions, tools, and techniques to combat today's cybersecurity threats. Featuring 4 unique levels: Threat Hunting & Intel, SOC & SOAR, MITRE ATT&ACK®, and Cloud Security Network in real-time with over 30 sponsors and learn from top industry experts Join interactive panel discussions, discover job opportunities, c...

Every year at major security conferences, you can tell the trends in security because seemingly every product and service is being positioned as look at how we make things easier/cheaper/better. A few years ago, that was cyber threat intelligence (CTI). Then, it inexplicably changed to threat hunting. But practitioners know that you cant really separate threat hunting and threat intelligence any more than you can separate logs from a SIEM. Jus...

As more organizations shift to using a wide variety of cloud services, the nature of many security controls weve relied on is changing, and in some cases vanishing. With the new threat surface cloud brings, theres a definitive need for new, more cloud-friendly security tools and services that can help align with SaaS, PaaS, and IaaS deployments across all business cases. The focus we need to look at is what comes next in Cloud Security. Cyber...

This year's report, "DFIR Cloud Report: Partly Cloudy with a bUnch of DFIR," sought answers to some enduring questions, including: Why is cloud so important? Who relies on it and what do they need to consider when selecting cloud repositories? Are there security concerns What about personal vs. business cloud accounts? On this webcast, sponsor representatives will join the author to offer their answers to those questions, as well as share thei...

Visibility is considered the basis of progress as it enables monitoring and optimizing security improvements. However, the way most organizations currently approach visibility is insufficient. Advanced security teams are measuring visibility and predicting risks related to assets using scientific methodologies. At the base of such approach is a shift from thinking in ‘assets at risk’ to ‘attack graphs’, and from ...

Today’s buildings do more than provide a comfortable place for people to live, work, or play. To enable the occupants and owner to enjoy a safe, secure, cost-effective environment, they have become part of a new fabric that integrates people, technology, lifestyle, and sustainability. In this webcast, Michael Chipley, Tim Conway, and Fortinet’s Richard Peters explore how the rapidly changing “building” concept has ramif...

Cloud data is something that is always trending when it comes to data storage, privacy and access. Why is cloud so important? Who relies on it and what do they need to consider when selecting cloud repositories? Are there security concerns? What about personal vs. business cloud accounts? This webcast explores our 2021 report, "DFIR Cloud Report: Partly Cloudy with a Bunch of DFIR," which examines all you need to know about cloud data and why...

Is your IoT dryer transferring 1GB+ of traffic daily? Does your Tesla phone home to the mothership? Is your employer monitoring you at home? Learn a quick, easy, free method for using a Raspberry Pi to gain visibility into your home network with Corelight. We'll teach you to find out what your smart (and not-so-smart) devices are doing using ZeekⓇ logs and Suricata alerts ' two flagship open source technologies ' skills transferable to y...