Name: Lessons from SUNBURST: Closing the backdoor
Start: 2021-12-14T09:30:00Z
End: 2021-12-14T10:09:55.000Z
Location: BrightTALK
Rating: 4.4

Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats. Mandiant is now part of Google Cloud.

Don’t let assumptions be your achilles heel. 

25.8% of initial access comes from exploitation of public facing applications while 17% comes from supply chain compromise.  

It’s important for the organisation to understand;
What do we have? 
What are we running? 
And what are the risks? 

By understanding how the attacker sees you, you are able to prioritize and reduce your attack surface. Attend this session to learn how to to build your cyber backbone, and minimise your achilles heel.

Have a backbone. Not an achilles heel.

The M-Trends 2023 report is packed with timely data from Mandiant’s frontline incident response investigations and unparalleled threat intelligence, offering an inside look into trending response metrics and attacker operations from some of the most impactful breaches around the world. 

Join us on May 25, 2023 at 11:00am SGT as we walk you through what these findings mean and how they can significantly affect your security approach. This session particularly features cyber security trends and insights in APAC sharing APAC organizations useful guidance and ensuring they are well prepared with evolving threats.

Topics for discussion will include:
 - Global and APAC Dwell Times
 - Detection by Source Trends
 - Industry Targeting Metrics
 - New and Notable Threat Groups
 - Top Infection Vectors and Malware Families
 - Most Prevalent Attacker Techniques
 - And more!

Today's Top Cyber Developments and Attacks : M-Trends 2023 APAC Views

Tracked since 2018, Mandiant assesses with high confidence that APT43 is a moderately-sophisticated cyber operator that supports the interests of the North Korean regime. The group’s focus on foreign policy and nuclear security issues supports North Korea’s strategic and nuclear ambitions. 

Join this webinar to find out more about:
 - APT43's toolkit and technique that characterize their operations
 - Unique targeting activities that differentiate APT43's operations
 - How APT43 fits into North Korea's cyber capability and their relationship to other groups.

APT43: Prolific Cyber Operator Linked to the North Korean Regime

Mandiant Managed Defense provides customers with the solution to the problem, not alerts.

This presentation will provide a background to Mandiant Managed Defense. We’ll also explore how our customers benefit from Managed Defense service to receive earlier sign of initial compromise and avoid bigger threats

Protect and Defend with Mandiant Managed Defense

This session is the fourth in our multipart virtual series that will provide helpful insights and best practices surrounding the six critical functions of cyber defense that make up The Defender’s Advantage.  

In this webinar, join Mandiant experts for a discussion on how to properly Respond to resume normal business operations and effectively remove threats from the environment. Also learn how to proactively Hunt for evidence from a previous or existing compromise to enhance future response capabilities and realize new methods of threat detection.

Respond to Resume Operations & Hunt to Prevent Compromise- Webinar Series Part 4

This session is the third in our multipart virtual series that will provide helpful insights and best practices surrounding  the six critical functions of cyber defense that make up The Defender’s Advantage.  

In this webinar, join Mandiant experts for a discussion on how to effectively contextualize, categorize, and prioritize cyber security incidents to rapidly Detect malicious activity and identify significant business risks. Also learn how to Validate your security control ecosystem to ensure the optimization and success of the detection process to ultimately protect your critical assets.

Detect Risks & Validate Security Controls - Webinar Series Part 3

Over the last few years, Mandiant has observed a rise of cyber attacks from ransomware attacks to more sophisticated and persistent cyber threats known as Advanced Persistent Threats (APTs). These can dramatically impact people, organizations, and governments; as well as the society if critical infrastructures are targeted.

The implementation of a robust cybersecurity program (human, technical, and strategic) enables organizations and governments to prepare their environment to detect malicious activities, identify, and respond to them to limit the impact (e.g., reputational, business continuity, financial, legal, etc.).

This presentation provides an explanation on how organizations can use threat intelligence to proactively identify threats targeting them, as well as to drive incident response process to effectively determine the scope of the cyber attack to remediate it. Moreover, the incident response process will be discussed to demonstrate how to investigate and respond to a large-scale cyber incidents while limiting the impact.

The presentation will conclude on how the traditional digital forensics science could support and improve the incident response process.

Intelligence Driven Incident Response

This session is the second in our multipart virtual series that will provide helpful insights and best practices surrounding the six critical functions of cyber defense that make up The Defender’s Advantage.  

In this webinar, join Mandiant experts for a discussion on how to understand and effectively implement your collective Threat Intelligence to make the right security decisions. We will also dive into the establishment of Command and Control to orchestrate the prioritization of activities performed by all six cyber defense functions to achieve security resilience and reduce the overall impact of cyber attacks.

Who should attend:
CISOs
Cyber defense directors
SOC managers
Seasoned and new cybersecurity practitioners

Utilize Threat Intelligence, Establish Command & Control - Webinar Series Part 2

Learn how to activate the six critical functions of Cyber Defense to optimize your security program in the face of harmful adversaries. Building a best-in-class cyber defense organization will provide confidence in your ability to protect, defend and respond to sophisticated [and inevitable] threats that can cripple business operations. 

As outlined in Mandiant’s award-winning book,“The Defender’s Advantage” organizations are defending against adversaries within their very own environment. Because the defender owns the environment in which they go head-to-head with these ruthless attackers, it’s important to remember that the defender has a fundamental advantage–however many  organizations struggle to capitalize on it.

This multipart webinar series will provide helpful insights and best practices surrounding the six critical functions of cyber defense that make up The Defender’s Advantage.  

Register for this first session to receive an executive overview of The Defender’s Advantage and its six critical functions of cyber defense—Threat Intelligence, Command and Control, Detect, Validate, Respond and Hunt. Each of these functions represents different responsibilities focused on distinctive goals, while collectively working together to rapidly identify and effectively respond to threats. 

Who should attend:
CISOs
Cyber Defense Directors
SOC Managers
Seasoned and new Cybersecurity Practitioners

Take Control of Your Cyber Defense with The Defender’s Advantage Series, Part 1

The Defender’s Advantage is the concept that organizations are defending against attacks in their own environment. This provides a fundamental advantage arising from the fact that they have control over the landscape where they will meet their adversaries. Organizations struggle to capitalize on this advantage. 

In the Defender’s Advantage, Mandiant delivers comprehensive, step by step advice on how to advance an organization’s security capabilities to build a robust, comprehensive security program, enabling them to take command of their own environment and turn the tide on their attackers.

Attend This Webinar to Discover that when fully optimized and activated, Cyber Defense enables organizations to answer questions such as: 
• Who is targeting us and what are they after? 
• Have we been compromised? 
• Would we know if we were compromised? 
• Are we prepared to respond to a breach? 
• Are our security investments effective?

The Defenders Advantage - A Guide To Activating Cyber Defense

Our frontline Mandiant Intelligence experts continue to work around the clock and across the globe to relentlessly protect our customers from today’s most advanced threats.

Join our expert Threat Intelligence team, as they provide an overview on the cyber developments over this past quarter:

•       2023 Strategic Trends & Predictions: We’ll cover our predications for ransomware, 
        state-sponsored threat activity, and threat actors constant evolution to evade 
        detection.

•       Global Distribution Campaigns: We’ll look at the significant volume of threat activity 
         we observe and the various types of globally distributed campaigns.  

•        And more…We’ll take a deep dive look into one Phishing-as-a-Service offering and 
         explore a novel malware ecosystem.

Exclusive Webinar for Mandiant Clients - Q4 2022 Intelligence Briefing

1.  How do you translate the data on hand into actionable threat intelligence ?
2.  Are you able to gauge the effectiveness of your cyber security controls ? 
3.  How do you fare against the latest cyber security threats ?
 
You have information at your fingertips. How do you understand from this information what is intelligence? How do you take the intelligence and operationalise it?
 
In this session we will explore how intelligence can be actionable. We will first learn how to decipher an intelligence report. Next, we will pivot and validate the findings within your environment. Finally we will review how effective the controls are, in capturing an attack. 
 
Attend this session to become better equipped to drive buy-in and support from your key shareholders for the use of operationalising threat intelligence in your organisation.

Operationalise Threat Intelligence: Pivoting & Validating

Every year we see the threat landscape evolve in different ways. While defenders are left with the critical challenge of navigating the uncertainty, the road ahead doesn’t have to be so foggy. By studying the trends we see today, we can paint a clearer picture of the battles we expect to be fighting in the coming year.

To help organizations be prepared for 2023 so they can improve their cyber readiness, Mandiant threat expert Yihao Lim is presenting a deep-dive session to cover many of the topics discussed in the latest report, Mandiant Cyber Security Forecast 2023, including:  

• Russian cyber risks likely to continue to be high-tempo and high-impact
• Chinese cyber espionage threats continue to be highly aggressive
• Iranian actors may increase in escalating attacks due to rising internal turmoil
• Information operations likely to continue to increase in tempo, with unclear impact
• Cyber insurance may restrict access and coverage
• Southeast Asia likely to see an increase in cyber espionage and ransomware
• Extortion actors likely to continue to eschew ransomware in favor of pure extortion
   through data theft

In this APJ version of the webinar, he will take a closer look at the specifics in APJ and share Mandiant insights as to what matters most in APJ.

Mandiant Cyber Security Forecast 2023 - What Matters in APJ

Don't let anyone else know more about your public digital assets than you do.
 
Mandiant Attack Surface Management (ASM) uses threat intelligence to deep dive into public assets, discovering applications that are often not in IT scope but are definitely open to attackers.  The real benefit of ASM is not just the discovery of the unknown but the actionable results generated from the deep dive, and the remediation recommendations for vulnerabilities found in the applications and configuration. 

ASM reporting will also produce a range of different reporting options, that will address different types of security audience, from the Board to the technical manager. 
 
Attend this session to better understand what your ENTIRE Attack Surface is – not just what is covered by traditional IT Management.

Mandiant Attack Surface Management (ASM)

With more frequent and sophisticated cyber-attacks, organizations face increased risk of missing critical threats. At the same time, the ability to find and retain expertise across cyber security functions continues to impact an organization's ability to implement effective cyber defences. Learn how a digital risk protection solution helps you identify who is targeting you, what they’re after and how they plan to compromise you, giving you an early warning to proactively adjust your defences.

Attend this webinar to hear from Mandiant experts, who will explain the critical elements of digital risk protection and how it helps you mitigate cyber risk.

Raising Your Guard with Digital Risk Protection

Why is cyber an on-going battle? Ever wondered how attackers continue to successfully perform cyber intrusion even though your SOC has some of the best of breed security tools coupled with industry best programs to manage security?

Attend this session to find out how to improve your chances of detecting, stopping & eradicating attackers in your business.

Threat Actors: how to slow them down, because there’s no stopping them…

The problem is not that organizations get breached, the problem is that organizations get breached and don’t notice.  Reducing dwell time is key to being cyber resilient.  Mandiant’s MDR service, “Managed Defense” provides investigation and hunting to reduce dwell time and help organizations achieve cyber resilience.

Reducing Dwell Time – Mandiant Managed Defense

Join Mandiant on this journey of operationalising threat intelligence to maintain the tactical advantage over threat actors. In this session we discover how to make cyber threat intelligence part of your day-to-day operations and look at different ways of using and consuming threat intelligence to protect your organisation and better understand threat actors that target you.

Attend this session to better understand the value threat intelligence can bring to your cyber security strategy.

Operationalising Threat Intelligence: How to gain a tactical advantage

A sophisticated threat actor took advantage of SolarWinds’ Orion Platform to orchestrate a wide-scale supply chain attack and deploy a backdoor we call SUNBURST. This attack impacted organizations worldwide, leading executives everywhere to question whether their environments could also fall victim to this same threat actor. 

Attend this session to discover: 
1. How this cyber-attack changes the way we view security 
2. SUNBURST threat actor TTPs and how Mandiant hunts for the most relevant, and dangerous threats
3.	What threat hunting techniques should be deployed to find today most stealthy attackers.

Lessons from SUNBURST: Closing the backdoor

#SUNBURST #Cyberbreach #ThreatIntelligence #CyberSecurity #publicbreaches

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Lessons from SUNBURST: Closing the backdoor

Presented by

About this talk

More from this channel