Swimlane #2: SOARing Beyond Expectations - Automating Atomic Red Team Testing

Organizations around the world struggle protecting their environments and determining where vulnerabilities exist. Open-source projects, such as Red Canary’s Atomic Red Team, can help by providing methods for evaluating defensive security controls and identifying areas of vulnerability. Additionally, a framework like MITRE ATT&CK can give the organization a full security view, ensuring a comprehensive strategy is in place. Such resources provide useful information for security teams, but the manual processes still needed to execute tests and map them to active detections from existing SIEM, EDR or other tools is too time consuming for many security operations centers (SOCs) to conduct effectively. Join Swimlane and (ISC)2 on November 5, 2020 at 1:00 p.m. Eastern as we examine how to do automate testing with a security orchestration, automation and response (SOAR) solution. In this session you will: · Learn how to automate the testing of your security controls · See how SOAR can help you visualize areas of concern with the MITRE ATT&CK dashboard · Get an overview of a helpful open-source tool recently developed by the Swimlane Deep Dive Research Team