Curing Alert Fatigue with Risk Based Alerting, MITRE ATT&CK and Automation

Logo
Presented by

James Hanlon, Director, Splunk, George Panousopoulos, Security Strategist, Splunk, Brandon Dunlap, Moderator, (ISC)²

About this talk

The problem of alert fatigue is symptomatic of a plague within most SOC environments, regardless of the tools and platforms being used. The general process within the industry for driving and managing security incidents is broken. It’s time to change perspective and build into alert creation processes a better prioritization procedure. This can be done by aligning it to a more intelligent risk scoring approach and frameworks like MITRE ATT&CK and automation. Security teams will be better positioned to make use of their existing toolchain, scale people and processes, and deliver a much more effective security capability. Join this webinar to learn: •The scale of alert overload and why organisations struggle with this problem. You are not alone •How to combine risk based alerting, MITRE ATT&CK and automation to optimise security investigation and reduce alert fatigue •Insights, learnings and benefits from SecOps teams that have already made this shift •Tricks and tips to help you transform the security investigation process using your existing tools and industry frameworks
Related topics:

More from this channel

Upcoming talks (11)
On-demand talks (392)
Subscribers (93559)
ISC2 Security Briefings EMEA offers members in Europe, the Middle East and Africa a chance to learn about the latest trends, tools and best practices in cyber, information, software and infrastructure security while earning CPEs