Скачать или смотреть When I grow up I want to be a Threat Hunter

Analysts are well aware of the need for an evidence based toolset. Being able to investigate alerts and find the necessary data to inform the resolution and remediation is key. But despite that, many SOCs are still struggling to work through the ever increasing volumes of alerts and detections. Even knowing that some detections will have false positive rates in the high 90%, they still remain - just in case.

We will be discussing how organisations can start to pivot from a reactive, alert driven approach, progressively replacing those ineffective detections with evidence based threat hunts, increasing analyst efficiency and improving awareness as you go.