Name: 5 KEY CONSIDERATIONS BEFORE INVESTING IN AN EXTERNAL ATTACK SURFACE MANAGEMENT
Start: 2023-02-21T10:00:00Z
End: 2023-02-21T10:43:22.000Z
Location: BrightTALK
Rating: 4

CrowdStrike has redefined security with the world’s most advanced cloud-native platform for protecting critical areas of risk — endpoints and cloud workloads, identity, and data. The Falcon® platform harnesses real-time threat intelligence and enterprise telemetry to automate threat prevention, detection, remediation, hunting, and vulnerability observability through a single, intelligent, lightweight agent.

Learn which key cybersecurity controls are most effective for reducing your cyber risk


As adversaries continue to exploit weak identity security controls to launch attacks, cyber insurance companies are emphasizing the need to tighten controls to reduce cyber risk.

Join CrowdStrike and our special guest presenters from Marsh McLennan, Scott Stransky and Tim Marlin, as they discuss Marsh’s recent groundbreaking research that reveals which key cybersecurity controls result in the most impactful cyber risk reduction.

In this session, Marsh experts will share current cyber insurance market conditions and key findings from their research:

-The top five most impactful controls
-How to allocate resources toward controls that provide the best protection
-How to better position your risk with insurers and build cyber resiliency
-The likely impact to terms and conditions when insureds prioritize their investments in the top 5 and how underwriting evaluates the investment

Five Best Practices to Stay Insurable and Reduce Cyber Risk

Proactive Identity Protection with Best of Breed Security Solutions
Did you know…

80% of all breaches use compromised identities and can take up to 250 days to identify (1)
50% of organizations experienced an Active Directory (AD) attack in the last two years (2)
40% of those attacks were successful because adversaries exploited weak AD hygiene (2)
With evolving adversary tactics involving valid credentials on the rise, Identity Threat Detection and Response are integral elements to a comprehensive cyber security strategy.

In this unique session, join experts from CrowdStrike, Okta, Zscaler and AWS and learn how you can:

-Gain continuous unified visibility of all users and assets across the organization
-Activate a strong, flexible identity security architecture using partners with deep integrations to protect your organization from threats
-Learn the benefits of receiving a complimentary Active Directory Risk Review from CrowdStrike experts
-Safely provide remote and on-premises workers with intuitive authentication into network resources from any device



1 2022 CrowdStrike Global Threat Report
2 EMA Research Report – The Rise of Active Directory Exploits

Stop Modern Active Directory Threats with CrowdStrike, Okta, Zscaler and AWS

Building cyber capability and maturity is not for the faint of heart. MSPs who have embraced a mission and vision to deliver security services that once seemed out of reach, are now reaping significant rewards. Through a discussion with a panel of your peers, we will explore the MSP to MSSP journey, the business challenges they faced and how they ultimately succeed in the market. 
 
In this webinar, you will learn:
 
— Where and how to start your journey.
— When it makes sense to build, buy or partner.
— How to build a sales strategy that provides insights, change customer perception, and ultimately aligns to the services that makes your MSP/MSSP unique.

The Journey - From MSP to MSSP

It’s no secret: your external attack surface is expanding. Digital transformation, remote work, cloud migration and increased reliance on third party vendors have drastically inflated your digital footprint – resulting in an explosion of unknown internet facing assets. Their risky exposure, if gone unchecked, can be a recipe for a damaging breach.

It is important to stay ahead of adversaries, and stop them from exploiting these assets. External Attack Surface Management (EASM) is a must-have tool in your arsenal to fight back, but in these tough economic times, many enterprises are looking to consolidate, do more with less, and are directing their security teams to prioritise and focus on what matters most. With this in mind, should you invest in a new EASM point product?

Join Tina Thorstenson, VP, Industry Business Unit & Executive Strategist and Kamil Imtiaz, Director, Product Marketing, IT SecOps as they help you to:

- Demystify EASM: What is it? Why is it important? And why now?
- Understand whether or not all EASM technologies are created equal and what 5 strategies will help you better evaluate the EASM capabilities
- Know how to leverage EASM capabilities and reduce exposure risk from the outside-in to the inside-out
- Learn about the newly launched CrowdStrike Falcon® Surface Technology, which extends the visibility and protection of the Falcon Platform with EASM capabilities to provide a complete picture of where exposures lie.

5 KEY CONSIDERATIONS BEFORE INVESTING IN AN EXTERNAL ATTACK SURFACE MANAGEMENT

Threat actors are getting bolder, stakes are higher, ransom costs and extortions are growing exponentially. These attacks can cause huge financial and reputation damage to organizations and affect their customers, or even worse, critical infrastructure or supply chains.

This webinar will be delivered by the CrowdStrike Falcon Complete team where they will execute a live Ransomware attack scenario. A public facing host that is unprotected by Falcon has become compromised. The intruder is leveraging it to laterally move across the environment via RDP in attempts to deploy ransomware.

Speakers:
Tom Brown (Falcon Complete, EMEA Lead),
Alex Sayavedra (Director, Falcon Complete),
Alice Allsop (Sr. Analyst, Falcon Complete),
Marc Paridimal (Sr. Analyst, Falcon Complete)

Ransomware Live Attack & Defend Demo

The adversary has evolved. 80% of modern attacks are identity-driven and Active Directory (AD) is often considered the weakest link in an organization's cyber defenses.

Unsurprisingly, over 50% of organizations experienced an AD attack in the last 2 years—and 40% of those attacks were successful. These breaches are incredibly hard to detect and adversaries can often lurk in your environment undetected for days, moving laterally across systems, escalating privileges in AD and eventually launching catastrophic attacks.

Join this webinar to:

• Learn about these modern attacks that target Active Directory and how Falcon Identity Protection can provide comprehensive, frictionless protection against Active Directory attacks in real-time
• Walk through a real attack scenario targeting Active Directory and see how Identity Protection can protect you against a modern Active Directory attack.

Protect Against Modern Active Directory Attacks

On this session, Jason Rivera, Director, Strategic Threat Advisory Group, at CrowdStrike will share his perspective on how to detect, react and remediate advanced cyber intrusions through achieving scalability, reducing cybersecurity complexity and increasing speed.

Cyber Security: One Problem, One Purpose, One Answer

Many organizations today use machine learning (ML) for malware classification and static file analysis. While this can be useful for detecting and responding to file-based threats pre-execution, adversaries continue to evolve their methods. Today’s attacks more often use malware-free or fileless attacks, which have rapidly grown to represent over 70% of all attacks*. 

Join CrowdStrike’s Joel Spurlock, Sr. Director, Malware Research and Joe Faulhaber, Principal Engineer for a webinar where you will: 

• Hear how behavioral ML and AI-powered indicators of attacks help cybersecurity teams stay ahead of today’s adversaries
• Discover how behavioral ML at runtime enables you to analyze adversary intent and movement, regardless of malware or tools used
• See a demo of CrowdStrike’s ML and AI-power detection and investigation processes

How AI-Powered IOAs and Behavioral ML Detect Advanced Threats at Runtime [NAM]

Leveraging the benefits of the cloud also comes with the requirement of managing an even larger attack surface. Adversaries are following data to the cloud and taking advantage of the complexity of the control plane to find and exploit security gaps.

CrowdStrike and Forrester have teamed up to address cloud security pain points with insights and best practices based on the latest trends. Tune in for important considerations to protect your data and applications in the cloud. You’ll learn how to:
• Select the right tooling
• Maintain compliance standards
• Reduce cost and duplication
• Bring together CWPP and CSPM
• Navigate the intersection between DevOps and DevSecOps
• Adversary activity, technical complexity, and the ephemeral nature of clouds make secure adoption an ongoing challenge. 

Speakers:
• David Puzas (Sr. Product Marketing Manager, Cloud Security, CrowdStrike)
• Scott Fanning (Senior Director, Product Management, CrowdStrike)
• Andras Cser (Vice President, Principal Analyst, Forrester)

Best Practices And Trends In Cloud Security [NAM]

Ransomware is one of the most serious cybersecurity threats facing organizations today. The past few years have seen a rise in such attacks and in the number of adversaries behind them, creating significant risk for enterprises in terms of lost or stolen data, business downtime and regulatory compliance issues.
 
CrowdStrike and ServiceNow forged a partnership combining their strengths and experience to enable organizations of any size to remain a step ahead of ransomware cybercriminals.
 
Join this webinar and hear from cybersecurity experts on:
— Why ransomware is such a major threat
— How the CrowdStrike and ServiceNow solutions can provide tools to defend your organization
— The best practices to protect your organization from ransomware and other cyberattacks

Defending Against Ransomware With CrowdStrike And ServiceNow

Best Practices And Trends In Cloud Security [APJ]

Artificial Intelligence (AI) and Machine Learning (ML) have become more mainstream than ever in our digital world. From virtual chatbots and autonomous flying to retail and advertising, AI and ML drive new insights and shape new experiences. But what exactly does AI and ML do for you when it comes to cybersecurity and preventing breaches?

Join Joel Spurlock, Sr. Director, Malware Research at CrowdStrike for this webinar, where you will:

• Hear how AI and ML are defined, and how they can be powerful tools, in the context of cybersecurity (when applied correctly!)
• Learn about various use cases that show how AI and ML can be applied to address challenges
• Understand how to distinguish between various solution providers’ AI/ML capabilities
• Discover CrowdStrike’s unique approach, from how data is collected and labeled, to training and testing world-class models that offer advanced threat protection and stop breaches

What’s AI Got to Do with Me? How AI Helps You Stop Modern Attacks [NAM]

A Cyber Attacker can penetrate and stealthily remain in your network for months quietly collecting data, looking for confidential material, and obtaining login credentials that will allow them to move laterally across the environment.

Many organisations lack the advanced threat hunting detection capabilities needed to stop advanced persistent threats from remaining in the network.

Join us for the Threat Hunting to Managed Response Live Attack Demo to experience first-hand how the Falcon Complete MDR Team and elite Threat Hunters from Falcon OverWatch rapidly detect and respond to a real-world attack scenario, based on an active web shell intrusion. 

We will share insights as to how our OverWatch Team carries out hunting missions on a 24/7/365 walk through example, then handover to our Falcon Complete Team in order to deliver on the surgical remediation capability they deliver everyday across 1000's of clients stopping breaches!

Presenters:
Natasha Taymourian (Services Sales Manager)
Elliott Reynolds (Sr. Analyst, Falcon Complete) 
Ryan Hunt (Senior Intrusion Researcher)

Threat Hunting to Managed Response Live Attack Demo [EMEA]

Learn how to navigate the new attack trends and tradecraft identified by the expert Falcon OverWatch team. Every year, CrowdStrike’s proactive 24/7 threat hunting team, Falcon OverWatch™, publishes its findings detailing the novel and prominent adversary tradecraft that it unearthed over the preceding year.

Join us for this webinar where our threat hunting experts will discuss how adversary tradecraft and tooling evolved over the past year, and highlight the particular intrusions and tooling that stood out most to them. Take away real-world experiences and insights from these front-line experts and use it to inform your security strategy and stay ahead of fast-moving threats in the weeks and months ahead.

In this webcast, you will learn:

• Why we observed a 50% increase in interactive, hands-on-keyboard threat activity year-over-year
• Which industry sectors were hit hardest by eCrime and targeted intrusions
• How adversary tradecraft is evolving, including how it was developed and deployed, and the steps OverWatch threat hunters took to unearth these stealthy, sophisticated attacks
• Why we face a critical inflection point today due to the rise of cloud-based attacks, and how specialized cloud threat hunting will work to keep these threats at bay.
• Where attack trends and tradecraft are headed over the next 12 to 18 months, and key recommendations for threat hunters and other defenders to apply at their organizations right away

Nowhere To Hide: 2022 Falcon Overwatch Threat Hunting Report [NAM]

Based on a recent study from ESG, more than half of security teams think SecOps has become more challenging over the past two years. Why? A growing attack surface, massive amounts of security data, and a more advanced threat landscape lead the list. How are SecOps teams responding? Extended detection and response (XDR) solutions are setting a new vision for modernizing detection and response, but what actually is XDR, and where does it fit?

In this webinar, gain insights into the latest research on how security and IT professionals are modernizing their SOC, and the role that XDR plays in their strategies. Join Dave Gruber, principal analyst at ESG Research and Scott Simkin, VP product and portfolio marketing at CrowdStrike, in a lively discussion about:

• Key security operations challenges and what leading security teams are doing to overcome them
• What is XDR, where does it fit into security operations, and how it is helping to modernize detection and response programs
• How organizations are combining investments in both XDR and managed detection and response services to rapidly advance their security programs
• How and where to begin your journey to SOC modernization

Where XDR Fits in Your SOC Modernization Strategy [APJ]

The festive season presents numerous new highs of business amongst retail entities and consumers which also means a huge amplification of opportunities for eCrime actors to conduct malicious campaigns directed against these targets. 
 
eCrime actors in this period are most likely to use phishing campaigns, opportunistic scams, payment-system attacks, and disruptive operations in the form of ransomware campaigns to achieve their ultimate objective of financial gain. 
 
With the increased volume of ransomware attacks, coupled with sales public events, and the reduction of security professionals behind the scenes due to the holiday season, Adversaries will use this magic time as a springboard for targeting not only establishments but also the supply chain. 
 
Join Crowdstrike’ s Strategic Threat Advisor, Christian Heggen as he shares what defensive considerations your organisation needs to take to stay safe during this festive period.

Holiday Cyber Attacks [EMEA]

Identity is the front line in the battle against modern cyber threats. Nearly 80% of cyberattacks leverage compromised credentials to gain access and evade detection. These attacks often come in via unmanaged or rogue endpoints, legacy systems, supply chain vendors or other attack vectors that are outside the scope of endpoint-centric security controls.

Join CrowdStrike experts as they will unpack the current state of identity-based threats and how Falcon Complete managed detection and response is changing the game for security teams. In this webcast, you’ll hear:

• Insights from Falcon OverWatch elite threat hunters, who’ll share trends and stories about how today’s attackers are obtaining and abusing credentials, and. 
blending in with day-to-day activity
• How the Falcon Complete team of security analysts are leveraging identity threat protection to keep ahead of the evolving threats
• Guidance you can use to protect your own organization from identity-based threats

Reinventing MDR With Identity Threat Protection [NAM]

digital transformatiom

External Attack Surface Management

Cyber Defence

IT Security

Cyber Attacks

Cyber Crime

Cyber Incident Response

Cyber Intelligence

Identity Theft

Identity Management

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

5 KEY CONSIDERATIONS BEFORE INVESTING IN AN EXTERNAL ATTACK SURFACE MANAGEMENT

Presented by

About this talk

More from this channel