eSentire, Inc. is The Authority in Managed Detection and Response Services, protecting the critical data and applications of 1000+ organizations in 70+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events. Combining cutting-edge machine learning XDR technology, human expertise, and proven security operations leadership, eSentire mitigates business risk, and enables security at scale. The Team eSentire difference means enterprises are protected by the best in the business with a named Cyber Risk Advisor, 24/7 access to SOC Cyber Analysts and Elite Threat Hunters, and industry-leading threat intelligence research from eSentire’s Threat Response Unit (TRU). eSentire provides Managed Risk, Managed Detection and Response and Digital Forensic and Incident Response services. 

For more information, visit www.esentire.com and follow @eSentire.

In the next 3 years, it is anticipated that 70% of workloads will be hosted in a cloud environment. The ease of deploying these workloads within cloud-based infrastructure enables rapid adoption of cloud services and greater business agility, but what are the risks? This presentation will discuss the top threats associated with utilizing cloud-based infrastructure and explore how they are different from threats to your on-premises infrastructure. 

Key takeaways will include:
• Migration planning - should you go all in?
• Shared responsibility model - what are you on the hook to secure?
• Threat trends - how is cloud different?
• Monitoring and Response - what solutions should you be considering?

How to Build and Secure a Robust Cloud Infrastructure

Your people, process, and technology (PPT) are only effective if they are up-to-date. Although the PPT framework has existed for decades, companies continue to apply this framework to better understand the total value of their teams. 

As cyberattackers have evolved, they have become skilled at leveraging their own philosophy for PPT. This has created challenges in core areas of cybersecurity including:
- Ransomware today isn’t what it was three years ago 
- Being “fully patched” doesn’t provide the protection it once did
- Migration to cloud brings challenges we haven’t fully yet discovered 

Watch this webinar and learn more about:
- How cyberattackers have evolved and blended their tactics
- Importance of having a strong Incident Response (IR) plan in place
- How to leverage the Pragmatic Security Event Management Playbook to help your team navigate common cybersecurity scenarios and strengthen your current IR plan
- The importance of managing operational risk
- Cybersecurity predictions and recommendations

Speaker:
Eldon Sprickerhoff, Founder and Chief Innovation Officer, eSentire

Building Cyber Resilience: People, Process, Technology

As the expression goes, we often meet our fate on the road we took to avoid it. All too often, companies experience this when faced with a damaging cyberattack, as some executives often exaggerate their ability to predict and therefore avoid a cyber threat before it disrupts their business. 

Watch this webinar to hear from Mark Sangster, VP and Industry Security Strategist, eSentire and Hillarie McClure, Multimedia Director, Cybercrime Magazine, as they play out three common cyber incident simulations based on real-world eSentire Incident Response and SOC actions:
- Nation state cyberattack through a suspicious email
- Ransomware disruption through a clever phishing campaign
- Supply chain exploit through a trusted vendor service

You will walk away from this workshop understanding:
- That ransomware attacks can be prevented - or at least contained with the right security awareness training and processes in place  
- How to implement a formula for cyber risk mitigation based on the timely delivery of critical data that fuels informed decisions

Avoid Meeting Your Cyber Fate - Incident Response Workshop

As more businesses move to Azure for their cloud computing, there is a growing gap in visibility of the security of cloud resources. Azure Sentinel is the cloud-native SIEM solution from Microsoft. Turning it on potentially means another location for piles of logs and noise.

Attend this session to learn how to get the most from Sentinel at the least cost. Threat hunting, vulnerability discovery, and advanced analytics will all be covered. Learn how to use “Azure Sentinel Analytics” to identify correlations and anomalies in data from hybrid and even multi-cloud environments.

Automating Threat Detection and Response with Azure Sentinel

Drawing on insight from the CRA/InfraGard survey, eSentire’s Tiff Cook, Senior Director of Incident Response, highlights the benefits of a retainer-based cybersecurity service that works with customers to develop a cybersecurity plan and capabilities required for a complete response. 

Watch this webinar to learn more about: 
- Organizational tabletop testing and practice crisis response scenarios to mimic/prepare for possible cyberattacks 
- Processes and procedures required in the event of a breach
- Placement of endpoint sensors to collect and protect data as evidence in a future investigation

Speakers:
Tiff Cook, Senior Director of Incident Response, eSentire
Bill Brenner, VP, Content, CyberRisk Alliance

Ransomware Recovery: Lessons from the CRA/InfraGard Survey

The majority of crippling cyberattacks begin with a simple phishing email. While most companies provide some form of annual training, they focus on overly simplistic lures taken from public events that fail to represent the real danger of targeted criminal campaigns.
 
Join Mark Sangster, VP and Industry Security Strategist from eSentire as he explores how to build a comprehensive training and testing program that leverages realistic threat scenarios to foster context-relevant security awareness that drives behavioural change, specifically for the manufacturing sector. 

Walk away from this workshop with knowledge on how to:
- Use risk management data and accurate phishing lures to build comprehensive awareness training
- Maximize your resources and programs to increase return on investment
- Conduct testing that improves resilience
- Meet regulatory requirements 
- Build a business case and demonstrate program success to your leadership

This webinar is in partnership with the National Association of Manufacturers (NAM) Leading Edge, which is an exclusive, thought leadership program that brings together NAM members and industry leaders to provide perspective on challenges, opportunities, and trends in today’s manufacturing landscape.

Go Phish? The Shift from Phishing Emails to Realistic Threat Scenarios

Join us for this webinar where eSentire and Sumo Logic threat intelligence experts will brief CSA members on cutting edge threat intelligence developed from threat reports and first-hand detections our threat hunting teams have encountered in cloud environments. 

This briefing will bring CSA members up to date on the latest threats, risks, and vulnerabilities in cloud environments. 

- We will share the top cloud threats and vulnerabilities eSentire is seeing as we respond to threats in customer environments and from the latest cloud threat reports.
- We will review examples of critical cloud-specific event data, relevant types of indicators of compromise (IoCs), and adversarial tactics, techniques, and procedures (TTPs).
- Our threat response unit will lead 2 real cloud threat detections we’ve responded to in the wild to demonstrate how our threat hunters search for compromised assets based on indicators, events generated on workloads and within the cloud environments, or communications with known malicious IP addresses and domains.
- We will look at how the Sumo Logic research team tracks the threat landscape and enhances the detection of advanced threats and give better context to threat investigations in cloud and multi-cloud environments.

Register today to be among the first to receive the latest eSentire Threat Intelligence Report Dissecting Today's Ransomware Ecosystem: Ransomware-As-A-Service, Targeted Intrusions and Opportunistic Attacks

The Latest Threats, Techniques, Risks & Vulnerabilities in Cloud Environments

Whether it’s cloud, multi-cloud, or hybrid cloud, there is no end to cyber risk. So, organizations must be confident in their ability to protect their cloud environments and prepare for emergency scenarios. In most cases, this preparation comes in the form of hardening your security defenses and becoming cyber resilient by adopting the technologies, processes, and expert-level support. While many business leaders verbally declare the importance of reducing cyber risk, only a few understand that there are varying approaches to managing cyber risk – some far more successful than others. Key takeaways:

- Evolution of security management - Actively manage your cloud security posture
- Risk management vs risk reduction - Stop attackers and mitigate risk
- Challenges with assessing risk - Detect emerging threat tactics
 
In this presentation, Tia Hopkins will explore the challenges of maturity-based security programming and outline how leveraging security operations and incident response can help your organization transition to a risk-based approach that enables true quantification of cyber risk in the cloud.

Quantifying Cyber Risk In The Cloud

Hear from eSentire’s experts as they discuss how to spot phishing attacks, and more importantly how to ensure your organisation remains safe from the serious issues they can bring.

Speaker: 
Matt Ellison, Principal Solutions Architect, eSentire

Phishing Attacks: How To Keep Your Organisation Safe

Massive data breaches and cripple ransomware attacks continue to monopolize the headlines. Ransomware-as-a-service and selectively blind-eye of nation states leave cartels to attack with impunity and exploit the chaos and confusion caused by global events such as the pandemic. This cyber insurgency leads too many companies to adopt a fatalistic view and assume attacks cannot be stopped before they become business disrupting. Join experts from eSentire and VMware Carbon Black as they debunk misconceptions, expose how criminals operate, and provide recommendations and actions you can take to protect your business from zero-day attacks.

Speakers:
Rob McLeod, Senior Director Threat Response Unit, eSentire
James Alliband, Senior Security Strategist & Manager, Product Marketing, VMware Carbon Black

Moderator:
Mark Sangster, Vice President and Industry Security Strategist, eSentire

Turning the Tides: Stopping Zero-Days Before they Become Bad Days

In this video, Leon Goldstein, Chief Information Officer at Hughes Hubbard & Reed (HHR) explains how eSentire is a true partner for HHR, that drives more value, that detects and responds to cyber threats immediately 24/7, and acts as extension of his team so that he can rest at night knowing HHR is protected.

Company Description: HHR is a 500-person international law firm specializing in litigation and corporate law.

Industry: Legal

Security Challenges:

Assessment of posture and improving maturity as new CIO
- 24/7 threat detection
- Cybersecurity expertise for threat response
- Up to date industry intel and research
- Scaling security in line with digital transformation and firm growth
- Demonstrating continuous improvement and ROI to leadership

Service Overview: 24/7 Multi-Signal Managed Detection and Response, Managed Vulnerability Service

The eSentire Difference:
eSentire monitors and disrupts threats 24/7 across Hughes Hubbard & Reed’s network and digital infrastructure. We deliver 24/7 Threat Hunting within our SOC-as-a-Service model and deliver a regular cadence of vulnerability scanning to support the continuous improvement of the firm’s security roadmap and overall security posture. Leon Goldstein, HHR’s CIO, had partnered with eSentire at a previous firm and chose to leverage our services again because he trusted our team to deliver true partnership and security expertise.

The service benefits outlined by Leon include:
- Rapid time to value and trust built in onboarding
- 24/7 Visibility, Threat Detection and Response
- Value and cost savings from leveraging eSentire’s 24/7 SOC vs building in-house
- Cyber expertise supporting incident handling, complete response and remediation efforts
- Security posture improvement through Vulnerability Scanning and remediation roadmap
- Intel driven through research and security advisory communications
- Continuous service improvement & scale

Hughes Hubbard & Reed MDR Case Study Video

The majority of crippling cyberattacks begin with a simple phishing email. And while most companies provide some form of annual training, they focus on overly simplistic lures taken from public events that fail to represent the real danger of targeted criminal campaigns. Join eSentire and (ISC)2 on September 14, 2021 at 1:00 p.m. Eastern/10:00 a.m. Pacific as they explore how to build a comprehensive training and testing program that leverages realistic threat scenarios to foster context-relevant security awareness that drives behavioral change:

· Use risk management data and accurate phishing lures to build comprehensive awareness training

· Maximize your resources and programs to increase return on investment

· Conduct testing that improves resilience

· Meet regulatory requirements and demonstrate program success to your leadership

Building Cyber Resilience with Managed Phishing and Security Awareness Training

In this video, Ray Texter, Chief of Information Security at Texas United Management explains why he trusts eSentire MDR to augment their internal security team’s capabilities and protect their business assets.

Company Description: Texas United Management is a privately held, US-based manufacturer of food-grade and pull salt.

Industry: Manufacturing of Minerals

Security Challenges:
- Staff augmentation and skills gap
- 24/7 capabilities in threat detection
- Cyber expertise for threat response
- Single pane of glass for security services
- IoT environment requiring supply chain expertise
- Adherence to industry specific compliance requirements
- Demonstrating security maturity enhancements and ROI to leadership
- Service Overview: 24/7 Multi-Signal Managed Detection and Response, Managed Risk Services, Managed Vulnerability Service, - - Security Incident Response Planning

The eSentire Difference:
eSentire augments the cybersecurity team at Texas United Management (TUM) with 24/7 Managed Detection and Response services delivering security event monitoring, threat detection, complete response and technology expertise. TUM CIO Ray Texter outlines how eSentire has helped him assess and mature the overall security program during his tenure at TUM. We partner on a wide range of services to complement the organization’s efforts in security awareness, testing, threat response, and incident response planning.

The service benefits outlined by Ray include:
- Confidence in 24/7 threat detection and response capabilities
- Time to value with Mean Time to Contain of 15 mins
- Partnership and expertise through incident response handling
- Quality and responsiveness of SOC and customer success teams
- Industry best practices on policies and procedures
- Adherence to compliance requirements
- Improvement of overall organizational security maturity

Texas United Management MDR Case Study

Not All MDR is Created Equal

At eSentire, we believe a multi-signal approach is paramount to protecting your complete attack surface. Whether your environment is in the cloud, on-premises or somewhere in between, we have the visibility to see what other MDR providers may miss.

MDR has exploded in popularity answering the challenge to rapidly identify advanced threats and contain them before disruption and damage occurs. Learn more about:
- Understanding why not all MDR platforms are created equal
- Why traditional MSSPS are no match for the growing speed and sophistication of modern threats
- The importance of multi-signal for MDR and complete perimeter protection
- Ensuring the right mix of operational technologies and personnel so you can stop attackers before they accomplish their objectives

Join eSentire’s Kurtis Armour and Rob McLeod for a live webinar with Gary Miliefsky, CISSP, Publisher of Cyber Defense Magazine. We will discuss the secret and most efficient multi-signal approach to MDR and much more.

The Best Kept Secret for Effective Managed Detection and Response (MDR)

Join eSentire’s Kurtis Armour, Director of Product Management and Jason Westhaver, Technical Lead, Enterprise Security as they speak with MISA (Microsoft Intelligent Security Association) about how organizations can use their existing investment in the Microsoft ecosystem and accelerate their security program with eSentire’s around-the-clock Managed Detection and Response (MDR) that shrinks threat actor dwell time and reduces the risk of business disruption.

Key solution benefits and outcomes:
- Simple: eSentire MDR is Zero Install and leverages your existing investment in Microsoft 365
- Fast: We deploy within an hour and you see results immediately.  Time-to-value is measured in minutes and hours, not days and weeks.
- Precise: eSentire MDR provides coverage mapped to the MITRE ATT&CK Framework and our security experts operationalize it, hardening your endpoint and email security posture.
- Rapid Response: Our 24/7 SOC experts and Elite Threat Hunters investigate and contain threats on your behalf.

The Story Behind MDR with Microsoft Defender

Cyber Defense TV CEO and publisher, Gary Miliefsky, put eSentire VP Mark Sangster in the Hot Seat to find out how eSentire is an innovator in Managed Detection and Response (MDR). Mark explains how eSentire doesn’t just provide alerts but goes farther by remediation and result.

Cyber Defense TV: Mark Sangster Hot Seat Interview

Insurance firms, agencies and brokers are now a lucrative target for cybercriminals to steal critical coverage and policy information to select targets based on their ability to pay. In an era where state-sponsored and criminal ransomware groups leverage sophisticated technology and methods, it becomes harder and harder to stop criminals from stealing your client’s information and your critical business intelligence. 

Join us as we discuss cyber threat trends and events to reverse engineer attacker methods to build a resilient cyber program to protect your business.
 
Speaker:
Mark Sangster, VP and Industry Security Strategist, eSentire

Cybercriminals Pick Targets Based On Their Insurance Coverage

Join eSentire’s Threat Intelligence (TI) team as they discuss the latest cyber attacks observed by our Security Operations Center (SOC) in August 2021. Watch this on-demand webinar today to learn more about: 
- PetitPotam, a new method for initiating NTLM relay cyber attacks
- The growing incidence of malicious actors using offensive security tools and tactics, and how eSentire is leveraging Red Team Modeling to perform attack research to deal with these cyber threats
- Understand how eSentire operationalizes customer-provided Red Team reports to create novel detection and runbooks through the Pentester’s Perspective
- Actionable takeaways to protect your business 
This webinar also includes a Q&A session.

August 2021 Threat Intelligence Observations On-demand

Join eSentire's Threat Intelligence (TI) team as they discuss the latest attacks observed by our Security Operations Center (SOC). Download this webinar today to learn more about:

- REvil ransomware campaign against Kaseya VSA Servers
- PrintNightmare Windows principal vulnerability
- The ongoing FIN7 campaign and recent incidents

This webinar will also include a Q&A session

Speakers:
Spence Hutchinson, Manager of Threat Intelligence Team, eSentire
Paul Aitken, Cyber Threat Intelligence Analyst, eSentire

July 2021 Threat Intelligence Observations

Managed Detection and Response

Threat Intelligence

Threat Analysis

Cyber Risk Management

Cyber Defence

Cyber Security

Ransomware

REvil

Kaseya

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful emerging technology insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on technologies like 3D printing, pervasive robotics, natural interfaces, connected everything and cognitive systems.

Emerging Technologies

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

July 2021 Threat Intelligence Observations

Presented by

About this talk

More from this channel