Name: Under the Hoodie: enseignements tirés d’une année de pen-tests (FR)
Start: 2020-04-23T09:00:00Z
End: 2020-04-23T09:00:44.000Z
Location: BrightTALK
Rating: 4.5

Rapid7 is creating a more secure digital future for all by helping organizations strengthen their security programs in the face of accelerating digital transformation. Our portfolio of best-in-class solutions empowers security professionals to manage risk and eliminate threats across the entire threat landscape from apps to the cloud to traditional infrastructure to the dark web. We foster open source communities and cutting-edge research–using these insights to optimize our products and arm the global security community with the latest in attackers methods. Trusted by more than 10,000 customers worldwide, our industry-leading solutions and services help businesses stay ahead of attackers, ahead of the competition, and future-ready for what’s next.

There are so many different tools for endpoint, perimeter, and end-user protection. Over time the numbers are increasing. But bringing them together is a challenge and creates a blind spot in your detection and increases your risk. Security does not have to be complex and hard. It needs to be set into context, ease-of-use, and integrated out of the box into your other tools and system with automated process flows. So you can focus on developing and hardening the security program.

Please join Christian Jacobsen, Cloud Specialist, and Monika Lisica, Nordics Account Executive at Rapid7  to find out how to:

- Uncover risks earlier, prioritize and shrink your attack surface
- Automate your process for Infrastructure to Application and Identity & Entitlement in your context
- Secure environment from development to production with the same controls and policies

Robust Protection: Identifying Risk and Threats in a Hybrid Environment [NORDICS

The cloud offers unparalleled agility and scalability but introduces complex challenges, from managing multi-cloud environments to navigating intricate asset landscapes.

Join Jaya Baloo, Chief Security Officer at Rapid7 and a panel of cloud specialists sharing their experiences on unravelling the intricate web of cloud security to empower teams with the knowledge and strategies needed to safeguard your digital assets effectively.

The final episode in the cloud security webinar series aims to demystify the cloud complexities and provide practical strategies moving into 2024 and beyond.

Speakers: 
- Jaya Baloo, Chief Security Officer, Rapid7
- C.J. Spallitta VP, Detection and Response Services
- Devin Krugly, Practice Advisor, Vulnerability Risk Management 
- Jeffrey Gardner, Practice Advisor - Detection & Response

Cloud Security Series Part 2/2: Deconstructing Cloud Complexities [APAC]

Cloud Security Series Part 2/2: Deconstructing Cloud Complexities

Cloud computing has revolutionized how organizations store, process, and access applications and data, resulting in unparalleled flexibility and efficiency. However, the rapid adoption of these cloud services has placed higher demands on security professionals to manage the associated risks and threats.

By understanding the cloud's complexities, security professionals can develop proactive and adaptive security strategies to safeguard digital assets and maintain trust in the digital landscape.

Join Jaya Baloo, Chief Security Officer, Rapid7 and a panel of experts in discussing the most impactful cloud strategies for 2024 and beyond. This webinar is the part 1 of the Cloud Security Series. 

Speakers: 
- Jaya Baloo, Chief Security Officer, Rapid7
- C.J. Spallitta VP, Detection and Response Services
- Devin Krugly, Practice Advisor, Vulnerability Risk Management 
- Jeffrey Gardner, Practice Advisor - Detection & Response

Cloud Security Series Part 1/2: Commanding Cloud Strategies [APAC]

Cloud Security Series Part 1/2: Commanding Cloud Strategies

You have likely heard of Velociraptor - the leading open source DFIR platform! Velociraptor provides unprecedented deep visibility into the endpoint with an impressive number of built in and community contributed analysis modules.

With all the capabilities that Velociraptor comes with, it can be hard to know exactly which artifact to collect when responding to any one situation. This can be even harder when the clock is ticking while containing an incident!

In this real world, practical walk through of Velociraptor, Mike Cohen, the main developer of Velociraptor will work through a typical DFIR investigation: Detecting and containing an attacker who gains a foothold on a network. We will examine techniques for hunting at scale for the attacker to identify their foothold and reconstruct the event timeline. We then detect attacker persistence to prevent re-infection. Finally we remediate the network by removing the adversary's access.

Join us to gain a practical understanding of core capabilities of Velociraptor, and how it can be leveraged to quickly identify and contain attackers.

Faster DFIR Outcomes Utilizing Velociraptor [NA]

Faster DFIR Outcomes utilising Velociraptor [EMEA]

In an ever-evolving digital landscape, businesses face unprecedented challenges in securing their critical assets from a myriad of cyber threats. Particularly at enterprise scale, it’s not uncommon to have hundreds of thousands of resources running across your cloud environments at any given time, these resources are all interconnected which can mean that if one resource or account is compromised, the whole system is at risk. Should a bad actor gain access to your systems via an open port, there are a number of avenues for them to move laterally across your environment, and even across environments, if your cloud environment is connected to your on-premises network.

Join us for our insightful webinar,  where Jane Man (Dir. Product Management, VRM) and Jeffrey Gardner (Practice Advisor, D&R) will delve into the innovative approach of identifying and mitigating threats posed by toxic combinations. This session will empower security professionals, IT administrators, and decision-makers with the knowledge and tools needed to bolster their organisation's defense strategy.

Webinar Highlights:
- Toxic Combinations Unveiled: Explore the concept of toxic combinations and understand how seemingly benign actions can cascade into critical security breaches. Learn about real-world examples that demonstrate the impact of such attacks.
- Attack Path Analysis: Visualise real-time risk across cloud environments
- Case Studies and Best Practices: Delve into case studies that showcase the successful application of attack path analysis in different industries.

Uncover and Remediate Toxic Combinations with Attack Path Analysis [APAC]

Bank Negara’s Malaysia latest update to its Risk Management in Technology policy document puts a new focus on cloud security, governance and compliance.

Cloud enables transformation with flexibility, fast time-to-value and cost optimisations. But it can also change your security requirements by adding dynamic scale, complexity to your organisation’s technology footprint.

Join Robin Long, Rapid7 APAC Field CTO, on an exclusive webinar to discover how you can build secure cloud capabilities that also address your RMiT compliance requirements. Robin will share his expertise on:

- The challenges of securing cloud
- How to get more visibility of your cloud assets
- Why you should unite risk and threat detection
- How you can access tools to meet RMiT policy requirements.

Compliance with the latest Bank Negara RMiT Updates [Malaysia]

We know the risks to attackers successfully deploying ransomware into a customers environment - offline time, loss of revenue, customer trust, actual payment to a threat actor. What if we could place a price tag on ransomware deployment at each stage? What costs do companies stand to actually incur if Ransomware is effectively deployed in their environment? 

 

In this webcast, sit down with former CISO Jeffrey Gardner as he breaks down what companies realistically pay to find and stop a breach - from engaging Incident Responders to business costs that can affect continuity and everything in between.

The Cost of a Breach [NA]

The first half of 2023 has been a prolific period for attacker activity, particularly in the ransomware and extortion space. In Rapid7’s Mid-Year Threat Review, our research and managed services experts share insights and trend data from attacks Rapid7 has observed and tracked so far this year.

In this webinar, Rapid7 research leaders Caitlin Condon and Christiaan Beek will walk through the findings of the report, highlighting trends found in the first half of the year and offering guidance designed to help organizations protect themselves from common threats. The report itself features research into:

- Widely Exploited Vulnerabilities
- Ransomware
- Dark Web Marketplaces

Please join us for this informative and timely webinar. We hope to see you there!

Findings from the Rapid7 Mid-Year Threat Review [EMEA]

Faster DFIR Outcomes utilising Velociraptor [APAC]

Uncover and Remediate Toxic Combinations with Attack Path Analysis [EMEA]

Findings from the Rapid7 Mid-Year Threat Review [APAC]

Nearly two-thirds of CEOs make business decisions based more on feelings than facts. * C-level executives ignore data and “trust their gut” all the time. How do you win when decision-makers bounce from rational to irrational with no warning? This two-part webinar will help cybersecurity leaders walk into the room and win no matter what. You have to be first among equals today, the economic stakes are that high. 

Part 1, “Narrative,” is a how-to about telling a compelling story, and we’ll get practical. Whether you’re in person or online, stories have tried-and-true building blocks, arcs, and most important, very real effects. Nobody wants more information, we have information overload. We want to be engaged. To know what things mean. 

Part 2 of the webinar, “Numbers,” is about the rational side of things. Metrics help tell a story, they aren’t the story. We’ll discuss how to figure out what data matters, and strategies for using it in your story.

* “CXOs still trust gut instinct over data,” ZDNet,  Sept. 30, 2020

Lost Bots 2/2 Narrative & Numbers: Security Leader’s Playbook for C-Suite [EMEA]

When things are a bit chaotic, opportunities arise for infiltrators to unleash malware as they seek cracks in your security armor. As organizations shift employees from offices to homes and back again, expect defenses to be less effective and watch for an increase in nefarious ransomware, the scourge of the internet. During this event, share with our audience your solution to the problem, whether it's a human-centric solution or a technology-driven one.

Ransomware - Access, Preparation, & Remediation

Administrar o seu risco na Cloud não deveria requerir um mosaico de soluções de segurança. Exija uma nova abordagem que consolide, simplifique e automatize tudo, desde análise e resposta até fluxos de trabalho de remediação. Assim, consegue gerir perfeitamente os crescentes riscos que surgem na infraestrutura de cloud dinâmica.

Junte-se a Leandro Alencar
- Descubra os riscos antes, priorize e reduza a sua superfície de ataque
- Corrija o risco desde a infraestrutura até à aplicação, à identidade e ao seu contexto
- Ambiente de Cloud seguro desde o desenvolvimento até à produção com processos de remediação automatizados
- Detete, responda e organize a segurança da sua Cloud e aplicações, a partir de um ponto único.

Como começar a controlar a Cloud

Kaum ein Wort im Cybersecurity-Umfeld wird gerade so inflationär benutzt wie MDR (Managed Detection and Response). Schaut man sich die Thematik im Detail an, stößt man auf sehr viele Bedeutungen und verschiedenste Definitionen – speziell bei den Lösungsanbietern.

Wir von Rapid7 beschäftigen uns seit langer Zeit mit dem Thema und verfügen über umfangreiche und belastbare praktische Erfahrungen im MDR-Umfeld. Vor diesem Hintergrund kommen wir den steigenden Kundenanforderungen entgegen und haben ein neues Bundle geschnürt, was neben einem MDR-Service mit Unlimited Incident Response, Unlimited InsightVM und Unlimited Data noch viele weitere Benefits bietet.

Wie wir das Thema MDR/Managed SOC sehen und was unser Managed Threat Complete-Bundle insgesamt beinhaltet, stellt Ihnen Nico Feitsma, Account Executive Commercial West bei Rapid7, in unserem Webinar vor.

Kick-start your security posture - MDR neu gedacht mit Managed Threat Complete

[Enregistrement de l’atelier Rapid7 aux Assises de la Sécurité 2019]

En 2017, Rapid7 a lancé le projet «Under the Hoodie» afin de mettre en lumière sur «l'art obscur » du pen-testing en révélant le processus, les techniques et les outils utilisés, ainsi que les types d’informations pouvant être compromises. Le rapport Under the Hoodie 2019 continue de fournir une visibilité sur cette niche d’informations souvent occulte de la sécurité de l'information. Sur la base des résultats de près de 180 engagements réalisés au cours de la dernière saison de tests de pénétration, ainsi que des anecdotes réelles de nos ingénieurs et chercheurs, notre recherche explore les tendances récentes et les modèles dérivés des tests de pénétration.

Découvrez dans cette intervention les leçons d’une année de tests d’intrusion chez nos clients : 
• Les principales conclusions de notre rapport, notamment les vulnérabilités et les erreurs de configuration les plus exploitées
• Les méthodes mises en oeuvre pour compromettre les cibles et accéder à de la donnée sensible
• Des suggestions sur comment utiliser les données du rapport pour détecter et prévenir efficacement les failles sur votre réseau
• Une ouverture sur comment cette vision de l’attaquant est au coeur de nos solutions de gestion de vulnérabilités, test applicatif web, SIEM/UBA/EDR.

Under the Hoodie: enseignements tirés d’une année de pen-tests (FR)

Security

Threat Analysis

Penetration Testing

Exploit

Breach Detection

Breach Prevention

Network Security

Researcher

Hackers

Vulnerability Intelligence

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Under the Hoodie: enseignements tirés d’une année de pen-tests (FR)

Presented by

About this talk

More from this channel