Reducing Time Detect with Limited Staff Using NDR Tools

Presented by

John Pescatore, SANS & Alfonso Powers, Asante

About this talk

The visible financial impact of ransomware attacks has increased the need for security operations to reduce time to detect, mitigate and restore. Financial pressures in today’s environment are also putting a premium on processes and tools that can quickly show positive return on investment without high staffing requirements. During this SANS What Works webcastSANS Director of Emerging Security Trends John Pescatore will interview Alfonso Powers. Director and Chief Information Security Officer at Asante Health to gain his insight on what he went through in the business justification details and deployment of Extrahop’s Reveal(X) to increase visibility into network traffic. Asante Health is a southern-Oregon based health care provider, with 600,000 customers and 6,500 employees across 3 hospitals. The increased visibility and the higher fidelity of detection allows Asante’s small security team to detect and disrupt most attacks in progress.
Related topics:

More from this channel

Upcoming talks (0)
On-demand talks (118)
Subscribers (11613)
The prevention and protection model of cybersecurity isn’t working: between the cloud, IoT, and the sheer pace of change, the enterprise is no longer built to be walled in. This channel provides educational webinars to help SecOps (SOC) and NetOps (NOC) teams, from CIOs and CISOs to analysts and practitioners, change their perspective in order to identify, investigate, and respond to threats across the modern attack surface. We explore how cloud-native network detection and response (NDR) provides the complete visibility, real-time threat detection, and intelligent response you need to secure your hybrid environment. You’ll also find product information about ExtraHop Reveal(x) which enables you to: Eliminate blind spots: Cover 100% of your hybrid environment, Detect what matters: Find threats 95% faster, and Act quickly: Respond to breaches 70% faster. Learn more at