Matt Ellison, Director of Sales Engineering, Corelight; Brandon Dunlap, Moderator
About this talk
Analysts are well aware of the need for an evidence-based toolset. The ability to investigate alerts and identify the necessary data to inform the resolution and remediation is key. But despite that, many SOCs are still struggling to work through the ever-increasing volumes of alerts and detections. Even knowing that some detections will have false positive rates in the high 90%, they still remain - just in case.
On 7 December 2023 at 1:00 p.m. GMT Corelight and ISC2 will be discussing how organisations can pivot from a reactive, alert driven approach, to progressively replacing ineffective detections with evidence-based threat hunts, increasing analyst efficiency and improving awareness as you go.
ISC2 Security Briefings EMEA offers members in Europe, the Middle East and Africa a chance to learn about the latest trends, tools and best practices in cyber, information, software and infrastructure security while earning CPEs…