Name: Under the Hoodie: Lessons from a Season of Penetration Testing
Start: 2019-08-27T18:00:00Z
End: 2019-08-27T18:01:02.000Z
Location: BrightTALK
Rating: 4.7

Rapid7 is creating a more secure digital future for all by helping organizations strengthen their security programs in the face of accelerating digital transformation. Our portfolio of best-in-class solutions empowers security professionals to manage risk and eliminate threats across the entire threat landscape from apps to the cloud to traditional infrastructure to the dark web. We foster open source communities and cutting-edge research–using these insights to optimize our products and arm the global security community with the latest in attackers methods. Trusted by more than 10,000 customers worldwide, our industry-leading solutions and services help businesses stay ahead of attackers, ahead of the competition, and future-ready for what’s next.

Découvrez comment Rapid7 peut unifier votre surface d'attaque pour anticiper les menaces et gérer les risques dans vos environnements hybrides.

Avec l'expansion de votre surface d'attaque, disposer d'une vue fiable de l'ensemble de votre environnement et être en mesure de cibler les expositions les plus critiques au sein de celui-ci, constitue un défi de taille. Les équipes de sécurité rassemblent des vues cloisonnées et s'efforcent d'obtenir une image fiable qui leur permette de prendre des mesures prioritaires au sein de leur organisation. 

Rapid7 Exposure Command répond à ce besoin fondamental du marché. Obetenez une visibilité étendue sur votre écosystème (interne et externe) que vous pouvez utiliser en toute confiance pour identifier les failles de sécurité, découvrir le shadow IT et rassembler le contexte risque pertinent des menaces qui facilite et accélère les activités de priorisation et de remédiation.

Participez à ce webcast avec Julien Soukhavong, Threat Detection & Response Lead, Southern Europe Rapid7, pour découvrir comment vous pouvez maîtriser votre surface d'attaque et contrôler votre environnement de risque.

Prenez le contrôle de votre surface d'attaque avec Rapid7 Exposure Command

The surge in sophisticated cyber threats, ransomware attacks on critical infrastructure, and the increasing impact of AI and machine learning on cybersecurity have made the attack surface more volatile than ever. 

Join us for Rapid7's annual security predictions webinar. Our security experts will discuss the evolving face of cybersecurity, providing insights and priming SecOps teams to take command with proactive strategies to help navigate the opportunities and challenges ahead in 2025 and beyond.

This 45-minute session will explore the anticipated shifts, emerging trends, and disruptive forces shaping cybersecurity in the coming year. Don't miss this opportunity to gain a forward-looking perspective on Risk and Threats.

Join our expert panel to gain a greater understanding of:

- Previous security trends, impacts, and lessons learned
- Top security predictions
- Security success in 2025

The session is ideal for business leaders and IT practitioners looking to prepare teams for potential vulnerabilities next year.

[NA] Top Security Predictions for 2025

[EMEA] Top Security Predictions for 2025

[APAC] Top Security Predictions for 2025

An essential session for leaders and practitioners, this 30-minute session provides a comprehensive overview of the current security landscape, examining macro influences on organizations and Security Operations Center (SOC) teams.

The session explores the dynamic forces at play, from emerging threat vectors to evolving regulations and geopolitical dynamics. Gain proactive guidance on navigating these challenges and empower your organization to respond confidently to emerging security risks.

Take advantage of this opportunity to stay ahead of the curve and strengthen your defenses against evolving threats. Register now to fortify your security posture and safeguard your organization's digital assets.

[NA] The State of Security

[EMEA] The State of Security

[APAC] The State of Security

A modern approach to exposure management is a combination of process and technology. New solutions designed to help organizations understand and manage their attack surface include External Attack Surface Management (EASM) and Cyber Asset Attack Surface Management (CAASM), these can give security practitioners a 360-degree view of their environment, with the relevant context and insights to prioritize exposure remediation effectively.

Join Rapid7’s panel of experts for part 3 in the “Command Your Attack Surface” series, as we will look at the critical use cases driving the adoption of attack surface and exposure management technologies:
  -Identifying security coverage gaps & non-compliant assets.
  -Detecting Shadow IT & ungoverned assets.
  -Prioritizing vulnerabilities based on risk and business context.
  -Improving Incident Response efficiency

Meeting the Exposure Management Challenge: Key use cases for success

Security teams are increasingly challenged by the loss of traditional perimeters and the complexity of the threat landscape, which tilts the advantage toward attackers. This webinar will explore how advanced AI solutions and AWS tools can enhance the efficiency of security operations centers (SOCs) enabling teams to manage their workloads more efficiently

During the webinar, you’ll learn about our 24/7 elite SOC’s use of AI for automated report generation, SOC assistants, and auto-triaged alerts, empowering analysts to focus on critical threats and scale their operations

We’ll discuss:
- Considerations for model selection
- Highlight AWS tools like SageMaker and Bedrock
- How AI improves customer security experiences by reducing noise

Join us to discover how integrating AI into SOC workflows can close the security gap and create a safer landscape

[NA] Enhancing MDR with AI: Real-World Use Cases & Security Insights

[EMEA] Enhancing MDR with AI: Real-World Use Cases & Security Insights

[APAC] Enhancing MDR with AI: Real-World Use Cases & Security Insights

Join Rapid7 Labs’ threat analytics and vulnerability intelligence leaders as they take a deep dive into the brand new 2024 Attack Intelligence Report. By examining recent notable vulnerabilities and high-impact attacks, the experts of Rapid7 Labs have identified trends every SecOps team should pay attention to, adding valuable context so you can command your attack surface.

Get the data and insights that your business can use to better understand and guard against some of the most significant attacks and TTPs occurring in today’s cyber threat landscape, directly from the researchers behind the report.

[NA] Know Your Adversary: Insights from the 2024 Attack Intelligence Report

[EMEA] Know Your Adversary: Insights from the 2024 Attack Intelligence Report

[APAC] Know Your Adversary: Insights from the 2024 Attack Intelligence Report

In a world where adversaries are relentlessly seeking weakness, they only need one small win to breach your defenses. Meanwhile, organizations face the challenge of defending a vast, constantly changing attack surface. With 76% of organizations falling victim to attacks from unmanaged or unknown internet-facing assets, the risks are greater than ever.

Join us to discover how Vector Command, by combining external attack surface scanning with continuous red teaming, empowers you with proactive, expert led security insights to move against adversaries and close critical gaps before they can be exploited.

In this webinar you’ll learn:
- How continuous red teaming reveals hidden vulnerabilities
- The benefits of continuous insights over point-in-time testing
- Expert-led strategies for prioritizing and remediating tasks
- How to strengthen your defenses against evolving cyber tactics

[NA] Vector Command: Continuous Red Teaming in Action

[EMEA] Vector Command: Continuous Red Teaming in Action

[APAC] Vector Command: Continuous Red Teaming in Action

Modern IT environments are far from one-size-fits-all. The composition of an organization’s digital estate can look very different depending on the specific needs of their business, even relative to their peers. This dynamic makes prioritizing an often overwhelming volume of risk signals a daunting task. This webinar will explore how practitioners can leverage the comprehensive attack surface visibility, powerful analytics engine and querying capabilities of Rapid7 Surface Command to build a custom risk scoring methodology that’s completely tailored to their environment and specific business needs.

During the webinar, we’ll go over how Surface Command helps security teams:
- Overcome challenges associated with traditional and generalized scoring approaches
- Aggregate data and risk findings across various security and ITOps tools with over 110+ connectors
- How to build complex queries using Cypher to tailor risk scores to your business needs

Join us to discover how Surface Command can transform your security landscape, providing clarity and control over your attack surface.

[NA] Mastering Risk Prioritization: Custom Scoring with Rapid7 Surface Command

In 2017, Rapid7 launched the “Under the Hoodie” project to shed light on the “dark art” of pen testing by revealing the process, techniques, and tools that go into it, as well as the insights that can be extracted. The 2019 Under the Hoodie report continues to provide visibility into this often occult niche of information security. Based on the results of about 180 engagements conducted in the most recent season of penetration testing, as well as real-world anecdotes from our engineers and investigators, our research explores recent trends and patterns derived from penetration testing.

Join Rapid7 experts for an engaging discussion where you will learn:

1. The report’s most significant findings, including the most commonly exploited vulnerability classes and network misconfigurations
2. The most effective methods our team has found to compromise high-value credentials
3. How you can use the data in the report to effectively detect and prevent breaches on your own network

Under the Hoodie: Lessons from a Season of Penetration Testing

Penetration Testing

Pentest

Cybersecurity

Vulnerabilities

Vulnerability Management

Vulnerability Scanning

Breach Detection

Breach Prevention

Incident Response

Information Security

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

Healthcare

Join this new, vibrant community to learn and connect with top thought leaders, startups and banks who are disrupting the financial services industry. Keep up with the latest news and trends in Fintech and take part in lively debates on topical issues and challenges.

Fintech

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Finance

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Under the Hoodie: Lessons from a Season of Penetration Testing

Presented by

About this talk

More from this channel