TechTarget and Informa Tech's Digital Businesses Combine.
Together, we power an unparalleled network of 220+ online properties covering 10,000+ granular topics, serving an audience of 50+ million professionals with original, objective content from trusted sources. We help you gain critical insights and make more informed decisions across your business priorities.
Curing Alert Fatigue with Risk Based Alerting, MITRE ATT&CK and Automation
Presented by
James Hanlon, Director, Splunk, George Panousopoulos, Security Strategist, Splunk, Brandon Dunlap, Moderator, (ISC)²
About this talk
The problem of alert fatigue is symptomatic of a plague within most SOC environments, regardless of the tools and platforms being used. The general process within the industry for driving and managing security incidents is broken. It’s time to change perspective and build into alert creation processes a better prioritization procedure. This can be done by aligning it to a more intelligent risk scoring approach and frameworks like MITRE ATT&CK and automation. Security teams will be better positioned to make use of their existing toolchain, scale people and processes, and deliver a much more effective security capability. Join this webinar to learn:
•The scale of alert overload and why organisations struggle with this problem. You are not alone
•How to combine risk based alerting, MITRE ATT&CK and automation to optimise security investigation and reduce alert fatigue
•Insights, learnings and benefits from SecOps teams that have already made this shift
•Tricks and tips to help you transform the security investigation process using your existing tools and industry frameworks
ISC2 Security Briefings EMEA offers members in Europe, the Middle East and Africa a chance to learn about the latest trends, tools and best practices in cyber, information, software and infrastructure security while earning CPEs…