Hi [[ session.user.profile.firstName ]]

SANS 2020 Women in Cybersecurity Survey

Women are rising through the cybersecurity ranks to become recognized leaders, experts, and mentors. The 2020 SANS Women in Cybersecurity Survey drew on the shared experiences of successful women in cybersecurity to provide practical advice on becoming leaders in their organizations.

Watch the webinar and learn why opportunities for women in security have never been better, including survey data points such as:

- More than 70% of respondents feel respected by their teammates

- 64% report that they are sought out for their opinions on cybersecurity issues

- 37% are advancing rapidly, moving into a senior position within one to four years

In this on-demand webcast, we discuss gender bias, the effects of mentorship, and practical advice on how to get ahead.
Recorded Mar 18 2020 60 mins
Your place is confirmed,
we'll send you email reminders
Presented by
Heather Mahalik of SANS, sponsored by LogRhythm
Presentation preview: SANS 2020 Women in Cybersecurity Survey

Network with like-minded attendees

  • [[ session.user.profile.displayName ]]
    Add a photo
    • [[ session.user.profile.displayName ]]
    • [[ session.user.profile.jobTitle ]]
    • [[ session.user.profile.companyName ]]
    • [[ userProfileTemplateHelper.getLocation(session.user.profile) ]]
  • [[ card.displayName ]]
    • [[ card.displayName ]]
    • [[ card.jobTitle ]]
    • [[ card.companyName ]]
    • [[ userProfileTemplateHelper.getLocation(card) ]]
  • Channel
  • Channel profile
  • Ransomware Prevention Report: How to Address a Pervasive and Unrelenting Threat Recorded: Nov 13 2020 64 mins
    Justin Henderson, SANS Instructor
    Ransomware is a fast-growing threat affecting thousands of government agencies and municipalities, and now it's even targeting critical ICS/SCADA operations. This webcast will explain why and how ransomware is spreading, as well as introduce standards and provide guidance for detecting and recovering from ransomware based on US-CERT and NIST resources.

    Specifically, the webcast will cover how attendees can:

    - Adapt their architectures to enable more effective ransomware detection and response
    - Secure their systems against phishing, USB, web drive-bys and other attack vectors
    - Reduce vulnerabilities through appropriate policies and user training
    - Use baselining, monitoring, logging and analysis to detect ransomware
    - Engage reporting, forensics and secure storage in the battle against ransomware
    - Address RIPlace ransomware and its abuse of the Rename operation

    Attendees will also learn about special considerations that ICS/SCADA organizations need to address.

    Watch this on-demand webcast to get up to speed on the latest in ransomware and how to best defend your organization from this type of attack.
  • The Modern and Evolving Security Leader: Security Executive Panel Recorded: Nov 11 2020 69 mins
    James Carder, Karen Holmes, Kip James, Christopher Mitchell, Dilip Singh
    During our RhythmWorld 2020 Security Conference, a panelist of five security executives met to discuss some of the major challenges, changes, and opportunities facing chief information security officers (CISOs) today.
    The Modern and Evolving Security Leader: Security Executive Panel, explores insider secrets on:

    •Building deeper organization consensus
    •Finding security advocates
    •Boosting board buy-in
    •And much more!

    Register now to gain access to the replay on our BrightTALK channel for a limited time. You'll have one month to get the inside scoop from industry veterans James Carder, Karen Holmes, Kip James, Christopher Mitchell, and Dilip Singh. Watch the panel before it expires on November 30, 2020!
  • Cybersecurity Awareness: A Cross-Functional Roundtable Recorded: Oct 29 2020 46 mins
    Barry Krauss (Training Director), Justin McNichol (Global Service Desk Manager) and Rob Sweeney (Technical Account Manager)
    It’s an oft-repeated adage in cybersecurity: employees are your first line of defense. And while security awareness is being discussed now more than ever, statistics show that this defense could stand to improve.

    For example, 43% of employees are still unaware that clicking a suspicious link or attachment could lead to a malware infection.* But of course, making meaningful improvements in security awareness is often easier said than done.

    Now is the time to re-examine the state of security awareness so you're better equipped to facilitate those improvements: what are the biggest gaps in awareness, what tactics can organizations implement to address these gaps, and how will security awareness evolve as the workforce evolves?

    Addressing these questions requires a variety of perspectives, so we brought together LogRhythm experts from across the organization. The following folks joined us for this discussion:

    - Barry Krauss, Director of Training and Enablement
    - Justin McNichol, Manager of LogRhythm’s Global Service Desk
    - Rob Sweeney, Technical Account Manager and former LogRhythm customer

    Watch this on-demand webinar to get answers to the above questions and more!

    *Source: https://searchsecurity.techtarget.com/infographic/7-security-awareness-statistics-to-keep-you-up-at-night
  • Extending DevSecOps Security Controls into the Cloud - A SANS Survey Recorded: Oct 28 2020 62 mins
    Eric Johnson (Principal Security Engineer at SANS)
    In previous years, SANS research has examined how security and risk management leaders are leveraging modern technologies, such as infrastructure as code, containerization and security automation, to manage security in fast-paced Agile and DevOps environments.

    In this years survey, authors Jim Bird and Eric Johnson will continue to explore how organizations are extending their DevSecOps security controls beyond their on-premises environments into the public cloud to secure their cloud networks, services and applications. Some highlights from the survey investigations include:

    - How the cloud helps organizations move faster
    Whether organizations are putting their emphasis more on the left (Dev) or the right (Ops) of DevSecOps as implemented in the cloud
    - How InfoSec can take advantage of DevOps feedback loops and experiments to continuously assess, learn and improve the security of systems
    - How cloud continuous integration, continuous delivery and configuration management tools are being used compared with on-premises options
  • Maze Ransomware: Use Threat Research & MITRE ATT&CK to Turn Analysis into Action Recorded: Oct 13 2020 60 mins
    Randy Franklin Smith (Ultimate Windows Security), Dan Kaiser (LogRhythm) and Sally Vincent (LogRhythm)
    Threat research can be an invaluable asset to security teams when attempting to formulate a proactive stance or reactive response. Whether the subject is a previously undocumented attack type or a new variant of a well-known threat, research can provide needed context and insight that help practitioners identify and resolve gaps in their security program in order to avoid being exploited.

    But techniques, methods, and actions found in threat research don’t always easily translate into practical steps you can take to prevent, detect, mitigate, or respond should a particular attack occur. While research can offer up specifics that can educate you on what occurs during an attack, what you really need is for those details to be transformed into strategies and actions based on the cybersecurity frameworks you rely on — including MITRE ATT&CK and NIST — to make the research truly valuable.

    So, how can you take third-party threat research and turn it into actionable takeaways for your specific team?

    During this on-demand webinar, Dan Kaiser and Sally Vincent from the LogRhythm Labs team walked through their process for reviewing third party reports using the real-world example of Maze ransomware, demonstrating how threat research can be truly useful in protecting your organization from the latest developments in cyberattacks. Specifically, they reviewed how to:

    - Turn threat details into new monitoring and threat hunting techniques
    - Configure your security solution to incorporate those actionable takeaways
    - Use samples of Maze that have been reverse engineered to test your newly configured solution

    They also demonstrated how to map third-party threat reports to ATT&CK techniques that can be used to develop mitigation, detection and response actions including:

    - Initial Access
    - Execution
    - Persistence
    - Privilege Escalation
    - Discovery
    - Lateral Movement
    - Impact

    Listen to this on-demand webinar to learn how to make the most of threat research.
  • Automating Attestation: A Critical Step in Security Risk Management Recorded: Oct 9 2020 47 mins
    Andy Smith (Centrify), Allen Moffett (Atos); Eric Uythoven (LexisNexis Risk), James Carder (LogRhythm)
    As the number of identities an organization manages explodes, making sure the right resources (human and non-human) have the right access can be overwhelming. Whether driven by compliance requirements or security risk management, attestation processes can provide periodic visibility into dynamically changing access – who has access, who granted it and who approved it. Automating those processes is a critical step to keeping access rights in line with the principle of least privilege and more importantly, can be automatically triggered as a result of a high-risk event.

    In this panel, part of the Security Outcome Deep Dive Series, identity and security experts will provide real world examples about the role of attestation processes in a security risk management program, the key stakeholders involved and how it can be achieved using technologies that may already be deployed
  • The State of the Security Team: Are Executives the Problem? Recorded: Sep 15 2020 39 mins
    Andrew Hollister, Head of LogRhythm Labs & Security Advisor to the CSO
    Working in security can sometimes feel as though you are sitting on top of a powder keg. It’s a fact that cybersecurity professionals are reporting higher levels of stress than they did just two years ago. We wanted to learn the causes of tension and anxiety — as well as understand potential ways teams might alleviate and remediate the potential of job burnout.

    Our global survey of more than 300 security professionals and executives investigated the reasons behind increased stress on security teams, solution capabilities, deployment strategies, technology gaps, and more. In this webinar, we explored some of the key findings from this research, including:

    - Why security professionals say they have more work stress than they did just two years ago.
    - Just how many teams feel that they have adequate executive support.
    - How capable teams say they are to detect known security threats.
    - The number one reason security professionals say they would leave their jobs.

    If you work in security, hearing that stress is impacting your space is likely no surprise.

    Listen to this on-demand webcast to learn from Andrew Hollister, Head of LogRhythm Labs & Security Advisor to the CSO at LogRhythm, about why your team may be experiencing more stress than ever before, the effect executive support has on your program and some indicators on how to alleviate some of the issues your team may be facing.
  • Keeping Pace with Ransomware Tactics and Strategies: Lessons Learned from 1 Year Recorded: Aug 20 2020 70 mins
    Randy Franklin Smith (Ultimate Windows Security) and Brian Coulson (LogRhythm)
    Today, ransomware attackers won’t simply back down if an organization refuses to pay the demanded sum in order to get their files back. Even companies who have great backups and a fast recovery process are vulnerable to an emerging strategy: exfiltrating the victim’s most private data before demanding ransom. Then if the victim refuses payment and initiates restoring their systems, the attacker reveals what information they have exfiltrated and threatens to post it online if the ransom goes unpaid.

    That threat is a completely different from the standard ransomware threat. This is because we’ve now shifted from an Integrity and Availability threat to a Confidentiality threat. And of course there is the possible nightmare of privacy and other compliance regulations depending on the nature of the data that’s been exfiltrated.

    During this webcast, Randy Franklin Smith from Ultimate Windows Security provided an overview of some recent high-profile attacks that have employed this strategy, including those against Honda, Xerox and Garmin. He also discussed detection methods and MITRE ATT&CK® techniques commonly used in ransomware attacks, such as:

    - Phishing (T1566)
    - System Services (T1569)
    - Command and Scripting Interpreter (T1059)

    Then, Brian Coulson from LogRhythm’s Threat Research team demonstrated how to detect and respond to these types of threats using MITRE ATT&CK, UEBA capabilities, and more.

    Watch the on-demand webcast now to learn about the latest trends in ransomware and how you can protect your organization from them.
  • Closing the Critical Skills Gap for Modern and Effective SOCs Recorded: Jul 30 2020 57 mins
    John Pescatore, SANS Institute Director of Emerging Security Trends
    Any successful security operations center (SOC) will combine skilled people, effective processes and efficient technology. Previous SANS surveys have shown that the skills of the people are the prime prerequisite to enable organizations to define critical SOC processes; create use cases, hypotheses and plans; architect effective security solutions; and efficiently deploy, operate and maintain security systems. From that skills base, sophisticated technology and tools can be used as a force multiplier. CISOs and SOC managers who can reduce or close their critical skills gaps have the highest probability of minimizing business impact from cyberattacks when budgets and staffing are constrained.

    Watch the webcast to learn:

    - Where hiring managers turn when sourcing potential new hires
    - Which skill areas are most sought after
    - What technologies employers wish new hires had hands-on experience using
    - Which security technologies are perceived as enabling organizations to delay or mitigate the need for additional staff
  • Measuring and Improving Cyber Defense Using the MITRE ATT&CK Framework Recorded: Jul 22 2020 61 mins
    John Hubbard, SANS Institute
    In this webcast, SANS reviews findings from a recent report, providing expert guidance to help cyber defense professionals learn how to best leverage the MITRE ATT&CK Framework to improve their organization’s security posture.

    The Adversarial Tactics, Techniques & Common Knowledge (ATT&CK) project by MITRE is an initiative started in 2015 with the goal of providing a knowledge base of adversarial tactics, based on real-world observations and accessible globally. With its rapid uptake by vendors and information security teams, ATT&CK now provides a key capability that many organizations have traditionally struggled with: A standard language of attack techniques, groups that use them, and the data sources that detect them.

    This webcast reviews key ideas and strategies for using ATT&CK to inform security defenses, improve them, and quantify and demonstrate that improvement.

    Watch the webcast to learn more as John Hubbard from SANS presents his findings.
  • Securing Telemedicine: The Current Landscape and Future Risks Recorded: Jul 9 2020 53 mins
    James Carder (CSO and VP of LogRhythm Labs, LogRhythm) and Kevin McDonald (Healthcare Cybersecurity Advisor)
    The healthcare industry already faces a number of unique challenges and threats. The data that these organizations collect includes extremely sensitive — and therefore valuable — information, making those organizations a target among cyberattackers. As telemedicine continues to grow, healthcare providers will have to address the proliferation of these threats, as well as the new cybersecurity concerns that come with a rise in adoption.

    Listen to this on-demand webinar to learn about the current telemedicine landscape and the future risks and requirements healthcare organizations will need to address if they want to secure ongoing and evolving telemedicine initiatives. You’ll hear from James Carder, LogRhythm’s CSO and former healthcare security director, and Kevin McDonald, a healthcare cybersecurity advisor with decades of experience in the industry.

    You’ll learn:

    • The current state of telemedicine
    • The cybersecurity threats specific to telemedicine
    • Future risks and requirements of securing telemedicine
    • Examples of how your team can best use its tools to monitor for these risks
  • Experiences from the Trenches: Security Career Roundtable Recorded: Jun 23 2020 60 mins
    Kevin McDonald; Kyle Dimitt; Sam Straka
    Looking to take the next step in your career? Find out how others paved the way for success in the security field.

    In this roundtable, you'll hear from tenured security professionals on how they established their careers, overcame obstacles, and ascertained new roles and promotions. Most careers in cybersecurity are anything but linear. Learn how to navigate your own path — with or without a "traditional" background.

    Panelists included Kevin McDonald, Principal Healthcare Cybersecurity Advisor at MedSec, Kyle Dimitt Compliance Research, Senior Engineer at LogRhythm, and Sam Straka, Manager, Product Owners at LogRhythm.

    Watch the on-demand webinar today to find out how to achieve your career goals in the world of security.
  • Understanding the New Cybersecurity Maturity Model Certification Recorded: Jun 17 2020 25 mins
    Erinn Connor and Kyle Dimitt
    Working with the DoD? The U.S. Department of Defense (DoD) requires that your organization meet the Cybersecurity Maturity Model Certification (CMMC) requirements to bid on contracts.

    During this webinar, LogRhythm federal cybersecurity experts will discuss these new requirements and help your team prepare for CMMC certification.

    You’ll learn:
    - What the CMMC requirement is and if your organization needs certification
    - An overview of the five certification levels
    - When CMMC requirements will be required
    - How to use LogRhythm’s downloadable mapping of NIST controls to CMMC practices
    - Q&A panel

    Your Panelists:

    Erinn Connor
    Kyle Dimitt
  • Anatomy of a Hacker Group: APT29 On-Demand Webcast with UWS Recorded: Jun 9 2020 63 mins
    Randy Franklin Smith, Brian Coulson, Sallie Vincent
    APT29, or Cozy Bear, is well-known for its alleged infiltration of the U.S. Democratic National Committee in 2016.

    And whether 2020 election security is relevant to your organization, it's worthwhile to be familiar with the threat group; other actors can easily implement many of its behaviors to target organizations across industries.

    During this webinar, Randy Franklin Smith from Ultimate Windows Security and LogRhythm Labs' Threat Research team will:

    - Provide a holistic overview of APT29 and its notable activities
    - Share commonly-used TTPs that other threat actors can easily implement
    - Demonstrate how to identify and remediate threats resulting from these TTPs
  • Cybersecurity Readiness: Mitigating remote work related threats Recorded: May 6 2020 62 mins
    Bill Larson, Sales Engineer at LogRhythm / Paul Caiazzo, SVP of Security & Compliance at Avertium
    Recent world events (COVID-19) have fundamentally changed the way organizations enable employees and provide them access to critical applications and data.

    During this webinar, Bill Larson, Sales Engineer at LogRhythm and Paul Caiazzo, SVP of Security & Compliance at Avertium, will discuss topics that include:

    - Fundamental best practices when implementing remote security policies
    - Compliance and privacy law considerations
    - Monitoring considerations in a perimeter environment
    - Overcoming infrastructure challenges

    Register Now!
  • Exploring 5 Techniques from the MITRE ATT&CK Cloud Matrix Specific to O365 Recorded: May 5 2020 88 mins
    Randy Franklin Smith, Dan Kaiser, Brian Coulson, Sally Vincent
    MITRE isn’t resting on their laurels with ATT&CK; they keep making it better. ATT&CK now includes cloud-specific content, and I don’t mean just generalized cloud guidance. Just like how ATT&CK has specific Techniques for Windows and Linux, ATT&CK’s cloud matrix defines Techniques specific to Office 365, Azure, AWS, Google, and others. It also covers most of the same Tactics found in the original ATT&CK matrix, including:

    - Initial Access: Get into your network
    - Persistence: Maintain their foothold
    - Privilege Escalation: Gain higher-level permissions
    - Defense Evasion: Avoid being detected
    - Credential Access: Steal account names and passwords
    - Discovery: Figure out your environment
    - Lateral Movement: Move through your environment
    - Collection: Gather data of interest to their goal
    - Exfiltration: Steal data

    The only ones missing at this time are:

    - Execution: Run malicious code
    - Command and Control: Communicate with compromised systems to control them
    - Impact: Where the adversary tries to manipulate, interrupt, or destroy your systems and data.

    In addition, MITRE’s cloud matrix already has over 40 different documented Techniques, and in this real training for free ™ event, Randy Franklin Smith of Ultimate Windows Security will provide an overview of the matrix and show you how it fits into the overall ATT&CK framework.

    Then, members of LogRhythm’s Threat Research team — Brian Coulson, Dan Kaiser, and Sally Vincent — demonstrate how you can use the following 5 cloud Techniques to identify anomalies in an Office 365 environment:

    - T1114: Email Collection
    - T1534: Internal Spearphishing
    - T1098: Account Manipulation
    - T1136: Create Account
    - T1192: Spearphishing Link

    Watch this on-demand technical session for the latest ways to protect your cloud resources with MITRE ATT&CK.
  • Adapting to Change: Cybersecurity strategies to help manage today’s challenges. Recorded: Apr 29 2020 42 mins
    Rich Bakos, Director of Sales Engineering - LogRhythm, and Kat (Kathryn) Hall, Director of Security Operations - Optiv
    As the workforce has pivoted to a predominately remote work environment, a holistic security operations strategy is more imperative than ever. Organizations need to quickly assess and implement measures to mitigate and absorb risk. Parts of your security program might be working well, but there are likely areas where you could use sound guidance and advice from industry practitioners and proven leaders.

    During this webinar, Rich Bakos, Director of Sales Engineering - LogRhythm, and Kat (Kathryn) Hall, Director of Security Operations, Global Services Demand – Optiv, will discuss topics that include:
    • Adopting and leveraging managed security services
    • Best practices to support a remote workforce
    • Addressing resource constraints
    • Overcoming infrastructure challenges

    Register Now!
  • Maintaining Cyber Resiliency During Times of Disruption Recorded: Apr 15 2020 51 mins
    Rocky Rosas, Director of Sales Engineering at LogRhythm, Valerie Wrenholt, OEM Partner Enablement Manager at Webroot
    For the majority of us, our work routines have changed dramatically due to the novel coronavirus, COVID-19. Bad actors, looking to capitalize on the headlines, continue to accelerate their malicious efforts.

    During this webinar, Rocky Rosas, Director of Sales Engineering - LogRhythm, and Val Wrenholt, OEM Partner Enablement Manager – Webroot will discuss how to implement safeguards as the workforce rapidly pivots to a remote environment.

    We’ll also be joined by Tyler Moffit, Security Analyst at Webroot for a panelist Q&A session and tips on how best to proactively plan for threats to your data.

    Topics covered in this webinar will include:
    •Leveraging threat intelligence to accelerate and optimize your detection and threat hunting capabilities
    •Protecting yourself against malicious IP activity
    •Priority use cases while working remote
    •Q&A panel

    Register Today!
  • AMA: Learn How LogRhythm Implemented the WFH Change Recorded: Apr 7 2020 59 mins
    Rex Young, LogRhythm CIO; Zack Rowland, LogRhythm Strategic Integration Engineer
    As a result of recent events and the COVID-19 pandemic, most organizations are implementing work-at-home policies. Yet company-wide remote environments present unique challenges for IT and cybersecurity professionals.

    During this on-demand webinar, Rex Young, chief information officer, and Zack Rowland, strategic integrations engineer, revealed how LogRhythm rapidly migrated employees from in-office to remote work.

    The two discussed the steps LogRhythm took to prepare for such an event and how they put that plan in action as remote work became necessary. Rex and Zack then answered questions to help you implement the same work-from-home environment while keeping IT and security best practices top of mind.

    Topics covered during this webinar included:

    - How LogRhythm prepared its IT and security operations to accommodate
    a global work-from-home event
    - A personalized Q&A session to help your IT and security teams accommodate a remote team
    - How to balance business continuity with security measures
    - IT and security implications to consider when implementing a work-at-home set-up
  • Securing a Remote Workforce: How to Get Started Recorded: Mar 31 2020 48 mins
    James Carder, Andrew Hollister, and Brian Emond (LogRhythm)
    In light of COVID-19, we’ve seen businesses across industries implement remote work policies. This brings about new security concerns, many of which either weren’t considered or prioritized beforehand.

    During this webinar LogRhythm experts including James Carder, CSO and VP of LogRhythm Labs, reviewed best practices for securing a remote workforce and what to expect when your employees make this kind of shift, whether it needs to happen now or in the future. Specific topics included:

    - Getting started with log collection for remote systems
    - Priority use cases you should employ, such as monitoring VPN access and collaboration security
    - The types and levels of activity you should expect to see on your network, depending on your industry

    We also discussed the impacts we’ve seen from the rush to support remote work due to COVID-19. These reveal lessons that others can implement now or work into a future plan to support a rise in remote workers.
Big Data Doesn't Have to Mean Big Problems
LogRhythm empowers more than 4,000 customers across the globe to measurably mature their security operations program. LogRhythm's award-winning NextGen SIEM Platform delivers comprehensive security analytics; user and entity behavior analytics (UEBA); network detection and response (NDR); and security orchestration, automation, and response (SOAR) within a single, integrated platform for rapid detection, response, and neutralization of threats.

To learn more, please visit logrhythm.com.

Embed in website or blog

Successfully added emails: 0
Remove all
  • Title: SANS 2020 Women in Cybersecurity Survey
  • Live at: Mar 18 2020 10:20 pm
  • Presented by: Heather Mahalik of SANS, sponsored by LogRhythm
  • From:
Your email has been sent.
or close