Name: Stealing the Silver Lining from your Cloud
Start: 2021-05-07T16:25:00Z
End: 2021-05-07T17:25:27.000Z
Location: BrightTALK
Rating: 5

The prevention and protection model of cybersecurity isn’t working: between the cloud, IoT, and the sheer pace of change, the enterprise is no longer built to be walled in. This channel provides educational webinars to help SecOps (SOC) and NetOps (NOC) teams, from CIOs and CISOs to analysts and practitioners, change their perspective in order to identify, investigate, and respond to threats across the modern attack surface. We explore how cloud-native network detection and response (NDR) provides the complete visibility, real-time threat detection, and intelligent response you need to secure your hybrid environment. You’ll also find product information about ExtraHop Reveal(x) which enables you to: Eliminate blind spots: Cover 100% of your hybrid environment, Detect what matters: Find threats 95% faster, and Act quickly: Respond to breaches 70% faster.

Learn more at www.extrahop.com

Please join ExtraHop and CrowdStrike on December 8 at 11:00am ET to hear from John Zangardi, former CIO of DHS, acting CIO of DOD, and Navy CIO, about the importance of federal mandates- including CISA's Shields Up. We will discuss how ExtraHop and CrowdStrike are working together to help federal customers meet mandates in the most effective way possible. Simply, this integrated security solution will allow the federal government to stay ahead of ever-increasing cyber threats.

Accelerate Cyber Modernization to Meet Federal Mandates

Join experts from global industry research firm IDC and ExtraHop as they discuss how to supercharge your security orchestration, automation and response (SOAR) platform with high-fidelity network intelligence. Gain greater, more reliable threat context and automate with confidence.

They’ll cover the most important features when considering SOAR and network detection and response (NDR) platforms, along with the top use cases to help you quickly maximize value.

Register today to learn more about:

- Combining threat intel feeds
- Gaining complete visibility into public cloud, encrypted traffic, and all of your devices
- Detecting anomalies in user/device behavior in near real time
- Mapping to the MITRE ATT&CK framework

Extract Value From Your SOAR Faster with NDR

Over the past couple of years, ransomware has evolved from relatively simple, opportunistic crimes to a prime concern for security and business leaders alike. The evolution of ransomware is a story of innovation as attackers realize that the amount of damage they cause directly corresponds to how big their payday will be. In this session, Thomas Clavel, Director of Product Marketing at ExtraHop will discuss common misconceptions about ransomware prevention and remediation and expose where attackers do the most damage on their path to extortion. He will share real life examples of ransomware mitigation and share practical guidance for where defenders should be looking to expose and root out intruders’ malicious behavior.

Stop Ransomware Before It Stops You - SANS Cyber Fest Solutions 2022

Current events and headline-grabbing attacks have thrust supply chain concerns front and center with business and government leadership. How will you keep your company from falling victim to an attack from your software supply chain?

Software supply chain attackers abuse trusted relationships between software users and suppliers to sneak in past perimeter defenses. The only way to catch them after that is to monitor the inside of your own enterprise.  This webinar will help you understand the threats, the impact, and how to keep your organization safer in a challenging environment.

If you manage, purchase, or protect software, you owe it to yourself and your organization to make time to learn how to manage and mitigate this growing third-party risk.

Detect and stop software supply chain attacks on the inside

Join CrowdStrike and ExtraHop to learn how to make extended detection and response (XDR) a reality, so your security team can stop ransomware and other advanced threats faster. 

You’ll learn about a new and more robust integration with CrowdStrike to that will allow you to:
    - Dramatically accelerate attack containment while minimising disruption to the organisation
    - Go from detection to quarantine to investigation in a single click to contain threats faster
    - Continuously identify and prioritise vulnerable devices to reduce risk

Advanced attackers work hard to evade defences and stay stealthy. By seamlessly correlating network intelligence and endpoint visibility, security teams can reduce attacker dwell time and respond instantly to stop an intrusion from becoming a breach.

Learn about specific tactics of today's sophisticated cyber attackers and how to take back the upper hand with XDR powered by ExtraHop and CrowdStrike.

How XDR Gets Real with CrowdStrike and ExtraHop

In this on-demand webinar CrowdStrike and ExtraHop walk through how to make extended detection and response (XDR) a reality, so your security team can stop ransomware and other advanced threats faster.

You’ll also learn about a new and more robust integration with CrowdStrike to that will allow you to:

    - Dramatically accelerate attack containment while minimizing disruption to the organization
    - Go from detection to quarantine to investigation in a single click to contain threats faster
    - Continuously identify and prioritize vulnerable devices to reduce risk

Advanced attackers work hard to evade defenses and stay stealthy. By seamlessly correlating network intelligence and endpoint visibility, security teams can reduce attacker dwell time and respond instantly to stop an intrusion from becoming a breach.

In this webinar you will learn about specific tactics of today's sophisticated cyber attackers and how to take back the upper hand with XDR powered by ExtraHop and CrowdStrike.

How XDR Gets Real: Stop Advanced Threats with CrowdStrike and ExtraHop

Digital transformation and cloud migration projects are fundamental to enterprise growth. While both the Offices of the CIO and CISO play a crucial role in this journey, the mindsets of the two executives commonly differ. Friction occurs when the CIO line of business has a mandate to recognize the speed and efficiency of the cloud immediately, while the CISO line of business needs to ensure that the proper security policies and procedures are in place.

How can the CIO and CISO engage in a balancing act that is beneficial to the priorities of both parties? Attend this webinar with Melinda Marks, Senior Cloud Security Research Analyst at ESG, and Guy Raz, Principal Systems Engineer at ExtraHop, to hear about the latest challenges, listen to best practices, and discover ways you can reduce friction in your enterprise.

The CIO-CISO Balancing Act in the Cloud

The visible financial impact of ransomware attacks has increased the need for security operations to reduce time to detect, mitigate and restore. Financial pressures in today’s environment are also putting a premium on processes and tools that can quickly show positive return on investment without high staffing requirements.

During this SANS What Works webcastSANS Director of Emerging Security Trends John Pescatore will interview Alfonso Powers. Director and Chief Information Security Officer at Asante Health to gain his insight on what he went through in the business justification details and deployment of Extrahop’s Reveal(X) to increase visibility into network traffic. Asante Health is a southern-Oregon based health care provider, with 600,000 customers and 6,500 employees across 3 hospitals. The increased visibility and the higher fidelity of detection allows Asante’s small security team to detect and disrupt most attacks in progress.

Reducing Time Detect with Limited Staff Using NDR Tools

The modern enterprise is built on a mountain of third-party and open source software. While this software enables growth and agility, it also introduces untold risk to the enterprise.
Compromises of the software supply chain are on the rise as a preferred attack style for intruders. This method takes advantage of trusted pathways to evade detection by traditional security tools. By compromising trusted vendors with large customer lists, intruders can achieve a one-to-many amplifying effect.
Listen in for an informative conversation of a modern supply chain attack. Our experts will expose the post-compromise attack techniques that are being used by advanced supply chain attackers, as observed in real customer environments.
Learn their playbook and stop supply chain attacks in their tracks. Using ExtraHop Reveal(x) 360, our experts will demonstrate the exact steps that cyber defenders can use to stop a supply chain attack before it can result in a costly breach.

Live & Interactive: Stop a supply chain attack in action

In this on-demand webinar CrowdStrike and ExtraHop walk through how to make extended detection and response (XDR) a reality, so your security team can stop ransomware and other advanced threats faster. 

You’ll also learn about a new and more robust integration with CrowdStrike to that will allow you to:

    - Dramatically accelerate attack containment while minimizing disruption to the organization
    - Go from detection to quarantine to investigation in a single click to contain threats faster
    - Continuously identify and prioritize vulnerable devices to reduce risk

Advanced attackers work hard to evade defenses and stay stealthy. By seamlessly correlating network intelligence and endpoint visibility, security teams can reduce attacker dwell time and respond instantly to stop an intrusion from becoming a breach.

In this webinar you will learn about specific tactics of today's sophisticated cyber attackers and how to take back the upper hand with XDR powered by ExtraHop and CrowdStrike.

On February 25, 2022, two days after Russia began its military invasion of Ukraine, the U.S. Cybersecurity & Infrastructure Security Agency (CISA) issued a rare Shields Up warning for U.S.-based organizations, stating: “Every organization—large and small—must be prepared to respond to disruptive cyber activity.” CISA was not alone. Cybersecurity agencies around the world issued similar guidance, urging public and private organizations to take immediate steps to harden their cybersecurity posture and to take steps to support and enable security teams from the top down.

In this exclusive special edition of Man X Machine, John Zangardi former DHS, DoD, and Navy CIO, will join Samir Kapuria of Crosspoint Capital Partners and others to talk about the convergence of geopolitical and technological forces that led to this moment—and how they will shape the future of cyberwarfare.

Man x Machine: Shields Up

Whether you were born in the cloud, or a well-established company with an innovative approach, every enterprise holds some degree of risk. What sets enterprises apart is their management of and resilience against that risk. Join this interactive workshop for an informative conversation on how to uncover how much and what types of risk you hold, where risk is likely to grow in the future, and the risk-reduction strategies that will have the highest return on investment for your team and enterprise.

Risk Understanding Workshop: Reduce Risk and Build Resilience in the Enterprise

CISA says, get ready for more ransomware. But investments in anti-intrusion technologies alone, such as IAM, EDR, and more phishing training haven't slowed ransomware's frequency or its growing intensity. 

Cyber insurance and frequent backups, although critically important, only offer partial relief after the damage is done as modern ransomware follows a land-and-pivot destruction playbook to ensure you will pay.

Join industry experts to learn why these long-held practices are failing against modern ransomware, and how to successfully defeat ransomware threats.

Shields Up: Ransomware Myths Debunked Before It's Too Late

Data Staging and Data Exfiltration are common activities used in today's ransomware playbooks. Data Staging is a combination of locating the data the attackers want to exfiltrate and then bringing all the parts together into a single repository. Data Exfiltration involves disguising the activities to steal confidential data out of the organization's environment. This webcast will demonstrate what such an attack looks like as it unfolds and what security teams can do to thwart these tactics.

SHUTTING DOWN DATA STAGING AND DATA EXFILTRATION ATTACKS

The state of cloud security is evolving. Many organizations are implementing new and more advanced cloud security services that offer cloud-focused controls and capabilities, including services and tools that provide network connectivity and security for end users and office locations, security monitoring and policy controls, and identity services, among others.

The SANS 2022 Cloud Security Survey explores the types of services organizations are using, what types of controls and tools provide the most value, and how effective cloud security brokering is for a range of use cases. The survey focuses on:

Cloud security skills gaps and requirements
Cloud security automation
Cloud security operations guardrails, tools, and processes
Cloud security threats and incidents

SANS 2022 Cloud Security Survey

The years 2020 and 2021 were undoubtedly the years of ransomware. Threat actors wasted no time taking advantage of the chaos caused by the COVID-19 pandemic, launching attacks that netted millions (if not billions) of dollars in extortion fees and leaked a record amount of data from victim organizations.

On this webcast, we will look at how ransomware defenses have changed from 2020 through 2022. The webcast will also explore ransomware threat actor changes, current trends, and how to implement defenses against those trends.

Ransomware Defense in 2022

The complexity of the cloud technology landscape creates a perfect place for attackers to hide and can serve as an ideal launchpad for attacks. This year’s hot off the press CSA Top Threats report highlights the 11 most critical threats, risks and vulnerabilities in cloud environments based on insight from 200+ industry experts. Attend this webinar to learn about the leading cloud security issues, why a prevent and protect approach can’t keep up with advanced threats, and how you can implement a post-compromise defense strategy.

Top 11 Threats to Cloud Computing: How to Defend Your Cloud Without Friction

IN THE WAKE
FIVE YEARS AFTER THE NEAR EXTINCTION OF MAERSK

On June 27, 2017, Danish shipping company Maersk, a company responsible for over 15% of the world’s shipping supply, became the highest-profile victim of what remains one of the costliest cyber attacks in history.  The NotPetya malware hit thousands of organizations around the world with stunning speed. Thanks to a single server in Ghana that was offline as the attack spread, the team at Maersk was able to restart a 50 billion dollar company, pulling off one of the most stunning feats of IT recovery in history. Over the course of 10 days, the team at Maersk re-imaged 4,000 servers, 45,000 PCs, and reinstalled 2,500 applications to restore their operations and keep the global supply chain intact.

In this exclusive event, Andy Jones, former Global CISO at Maersk, will join former Symantec CTO and current RSA Program Committee Chair, Hugh Thompson, to provide an intimate look at one of the most damaging cyber attacks in history––and the lessons that today’s security leaders can draw on to combat a new class of advanced threats.

Man x Machine

The last couple of years have seen a tremendous growth in cloud adoption. Every organization has some cloud usage, using either a mixture of in-house and public cloud or they are fully cloud based. This unprecedented adoption of technologies has opened gaping holes in an organization's security landscape. Whilst moving to the cloud is a sensible move because vendors are taking an increasingly larger responsibility in being more proactive towards security, it also opens organizations up to be more severely punished for their mistakes.

In this demo filled webinar, we will discuss various scenarios where cloud based technologies have given opportunities to attackers that have resulted in catastrophic repercussions for the company involved.

We will look at ways to exploit these cloud environments from an attackers point of view, covering various phases of attack from enumeration to exploitation, through the escalation of privileges and ending with a complete ownage of the cloud network.

Stealing the Silver Lining from your Cloud

Cloud Security

Security

BlackHat

network detection and response

Threat Detection

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

Stealing the Silver Lining from your Cloud

Presented by

About this talk

More from this channel