Name: LogicHub Monthly Security RoundUp - May 2022
Start: 2022-05-15T17:00:00Z
End: 2022-05-15T17:25:04.000Z
Location: BrightTALK

LogicHub harnesses the power of AI and automation for superior detection & response at a fraction of the cost. From small teams with security challenges, to large teams automating SOCs, LogicHub makes advanced detection & response easy and effective for everyone.

Staff shortages? Budget constraints? An overwhelming number of threats, vulnerabilities, and alerts? A robust security operations center (SOC) used to be out of reach for most organizations – except for large, well-funded enterprises. 

LogicHub CEO and Co-Founder, Kumar Saurabh, details how small to mid-sized companies can benefit from next-gen SOC technology, such as advanced AI, machine learning, and automation to create a streamlined security posture with minimal time, money, and resources. Learn how this technology can be leveraged for highly efficient and effective alert triage, incident response, and threat detection – even with a small team and tight budget.

Five Steps to Build an Exceptional SOC with a Small Security Team

The managed cybersecurity services market is undergoing a significant shift. Organizations are upgrading from alert-oriented Managed Security Service Providers (MSSPs) to action-oriented Managed Detection and Response (MDR) services. 

The need for change is evident, and organizations early to embrace MDR services report a higher security posture across multiple dimensions. Those organizations that have not yet upgraded from an MSSP evidence an overwhelming and urgent intent to do so.

LogicHub welcomes esteemed Senior Analyst Michael Sampson from Osterman Research to share his in-depth findings about the state of security operations today. He notes that MDR adoption – especially those driven by AI and automation – is expected to more than double in the next 12 months, compelled by an excess of alerts, alert fatigue, a staffing crisis, and a profound increase in the number of advanced threats across any given attack surface.

The Rush to MDR Services - Osterman Research Report 2022

You know that cybersecurity is more important than ever but keeping up with it can be daunting for small businesses. Qualified security experts are hard to find and afford, implementing the right security processes is confusing, and keeping up with the latest technology can make your head spin.

Join experts from Cyvatar and LogicHub for the first of a series of webinars discussing how SMBs can break this security logjam through managed security services that give you access to the right experts, ensures you processes are reliable, and makes sure you always have the best technology to effectively detect and respond to cyberthreats. Topics will include:

- Assessing your security risks and needs
- How to choose the right cybersecurity as a service (CSaaS)
- Implementing processes that are thorough, reliable, and sustainable
- Working with vendors that automate security to keep it effective and affordable

Expert speakers will include:
- Corey White, Co-founder, Cyvatar
- Dave Cundiff, CISO, Cyvatar
- Willy Leichter, CMO, LogicHub

Improving Security for SMBs with the Right People, Process, and Technology

Each month LogicHub will be reviewing the past month’s most notable threats. We will take a deep dive into the new threats and vulnerabilities we are seeing in the wild and select a few of particular interest to highlight in greater detail. We will outline their potential impact and provide effective remediation and prevention tactics and strategies. We will detail real-world use cases in action and offer guidance and recommended and useful resources.

LogicHub Monthly Security RoundUp - June 2022

Many security teams have access to AWS logs but don't have an effective way to detect and respond to threats – especially those that evade existing security tools like CloudTrail, VPC flow logs, and GuardDuty. 

If you are using AWS Cloud, and you are not confident about your threat detection, we invite you to try our free LogicHub MDR Jumpstart. Our AI and automation-driven MDR service will monitor all your AWS logs 24/7 and provide fast, consistent, complete, and accurate escalations, along with suggested one-click responses.

With LogicHub MDR Jumpstart for AWS, we will:
• Get you up and running in a week
• Monitor all your AWS logs and deliver highly enriched cases of real threats only
• Provide suggested one-click responses for all escalated cases
• Perform 24/7/365 advanced threat hunting, detection, and response
• Implement alert triage playbooks that will do all the threat analysis for you and eliminate noise and false positives

Join LogicHub’s VP of Product Management, Ryan Thomas, and CMO, Willy Leichter, to learn how you can get started (free!) with LogicHub MDR Jumpstart for 90 days. All attendees will receive a $25 Grubhub coupon and are eligible for a free MDR consultation. Please note that while we'd love to give a free lunch to everyone, our offer is limited to security personnel who join us for the live session.

LogicHub Lunch & Learn: Free Detection and Response for AWS Cloud

LogicHub is pleased to welcome leading Forrester analyst Allie Mellen as a guest speaker to discuss how security professionals can build and mature their threat detection and response strategies. Allie will detail ways in which organizations overburdened by security data and contending with a significant skilled labor shortage can augment their security teams with AI and automation. 

Drawing on her extensive research experience in SOAR, XDR, AI/ML, analytics, and automation, Allie will outline:
- The need to modernize security operations
- How MDR services can deliver on the promise of XDR
- The next generation of AI-driven threat detection and response automation
Featured speaker: Allie Mellen, Analyst, Forrester
Allie supports security executives and professionals in building and maturing their threat detection and response strategies. Her coverage includes the people, processes, and technology in security operations. From a technology perspective, this includes security information and event management (SIEM); security user behavior analytics (SUBA); security analytics (SA); security orchestration, automation, and response (SOAR); endpoint detection and response (EDR); and extended detection and response (XDR). Her research focuses on the current state and evolution of ransomware, MITRE ATT&CK, analytics, AI/ML, detection, automation, and response in security.

Speaker: Kumar Saurabh, CEO and Co-Founder, LogicHub
Kumar has 15 years of experience in the enterprise security and log management space leading product development efforts at ArcSight and SumoLogic. He has a passion for helping organizations improve the efficacy of their security operations, and personally witnessed the limitations of existing solutions in helping SOC analysts detect threats buried deep within mountains of alerts and events. This frustration led him to co-found LogicHub to empower cyber analysts by building intelligence automation, not just analytics.

Leveraging New Detection and Response Technology for the Next Generation of SOC

Many malware prevention tools allow users to upload IoCs (Indicators of Compromise) from their own investigations. This allows SOC teams to enhance security tools by adding malware indicators that were previously unknown to the tool, leveraging the SOC team’s intelligence to block new malware in the future. 

Learn how to automate this process to eliminate manual steps and improve security. This hands-on session will show you how to easily build playbooks with LogicHub to automate this process, save time, ensures consistency, and reduce risk.

VP of Products Ryan Thomas will discuss customer case studies and demonstrate live how to automate response to new IoCs and upload them to CrowdStrike Falcon. 

All attendees will receive a $25 Grubhub coupon and are eligible for the LogicHub Free SOAR edition and free consultation on customized automation. Please note that while we'd love to give a free lunch to everyone, our offer is limited to security personnel who join us for the live session.

LogicHub Lunch & Learn: Automated Response: Blocking IoCs with EDR

Do you triage security alerts using manual techniques, such as geolocation lookups, file hash checking, URL reputation, and other techniques?

Learn how to automate these time-consuming steps with no-code SOAR. This hands-on session will show how you can easily build playbooks with LogicHub to automate any number of triage techniques and generate rich alerts.

VP of Products, Ryan Thomas will discuss customer case studies and demonstrate live how to automate checking MD5 hashes and other IoCs against VirusTotal.  

All attendees will receive a $25 Grubhub coupon and are eligible for the LogicHub Free SOAR addition and free consultation on customized automation. Please note that while we'd love to give a free lunch to everyone, our offer is limited to security personnel who join us for the live session.

LogicHub Lunch & Learn: Enriching Alerts with a Reputation Service

The job for security specialists is not getting easier, as threat levels rise – along with false positives and alert fatigue, while lean organizations try to avoid hiring armies of specialists doing repetitive tasks. In a modern SOC, analysts need to embrace new approaches and automation just to get the job done.
 
Join industry veteran Colin Henderson, VP of Security for OneTrust, for a discussion of the changing requirements for SOC teams, and how automation plays a critical role in improving the efficiency, effectiveness, and job satisfaction for security analysts. Topics will include how to:
-       Keep up with detection and response
-       Cut through the noise and find critical threats
-       Understand what types of security tasks should be automated
-       Integrate cloud apps and ITSM into your response automation

Customer Perspective: The Changing Role of the SOC Analyst

Are you stuck with slow, manual analysis of phishing emails? Do you want to automate this but think SOAR automation is out of reach? 

Learn how LogicHub can save you time and money with free no-code automation for phishing. We’ve taken popular automation playbooks used by our customers and made them easy to implement and free to use.

Phishing attacks can be identified by trained security experts, but the process is usually manual, time-consuming, and doesn’t scale to meet the high volume of attacks. In this session we’ll build an automation playbook in real-time that connects to an email server, extracts suspicious URLs, submits data to VirusTotal for threat intelligence, scores the results, and sends formatted messages to security analysts. This allows thousands of emails to be assessed and assigned accurate risk scores, reducing false alerts, and allowing analysts to focus on less repetitive tasks.

All attendees will receive a $25 Grubhub coupon and are eligible for the LogicHub Free SOAR edition and free consultation on customized automation. Please note that while we'd love to give a free lunch to everyone, our offer is limited to security personnel who join us for the live session.

LogicHub Lunch & Learn: Automatically Analyzing Phishing Emails

As sophisticated cyberattacks proliferate, it is critical we employ the most advanced and adaptable AI technologies for defense. Enterprise IT infrastructure is more complex and distributed than ever, and the attack surface continues to grow. The amount of data being collected has increased exponentially, and there is no question we need Artificial Intelligence (AI) and Machine Learning (ML) to help monitor, analyze, and respond to it all. 

AI can now apply a form of “decision automation,” a responsive and progressive learning model that can learn from their human counterparts’ decisions to identify and respond to new threat patterns as they emerge. This advanced AI and automation model mirrors and enhances the cognitive and intuitive approach of expert security analysts, who can now encode their techniques and expertise into a program that can execute at machine speeds and machine scale. 

Automated threat detection and response that is powered by adaptable and progressive learning models can take the burden of busy, repetitive work off your most precious resource – your people. And with massive staffing shortages industry-wide, using your highly skilled security team to tackle your high-priority security issues rather than drowning them in noise and sending them down rabbit holes helps to increase efficiency, decrease costs, and improve your overall security posture. 


Kumar Saurabh, CEO & Co-Founder of LogicHub sits down with Dave Shackleford, Sr Instructor at the SANS Institute to discuss how to:

 Employ AI to automate repetitive tasks and threat hunting by encoding skilled cybersecurity staff’s domain expertise and techniques into your systems.
 Leverage AI itself to customize and build sophisticated playbooks at scale for your organization’s unique environment.
 Adopt AI models that mirror the cognitive and intuitive approach of expert security analysts that can execute and scale at machine speed and augment your security team.

Decision Automation & AI Technology

Join industry veteran Ray Espinoza for a discussion on how small and large organizations can be successful using a Managed Detection and Response (MDR) services. Based on his extensive SOC experience at Medallia, Cobalt.io, Cisco, Amazon, and eBay, Ray brings insight and specific recommendations on MDR issues. 

Hear from the customer’s perspective about:
• Why many companies moving to MDR
• Why SIEMs struggle with detection
• The importance of MDRs adapting to specific customer needs
• Getting value from your MDR from Day 1
• Customizing alerts, cases, and response automation
• Finding an MDR service that will truly partner with your team

Customer Perspective: What’s Important When Selecting an MDR

Each month LogicHub will be reviewing the past month’s most notable threats. We will take a deep dive into the new threats and vulnerabilities we are seeing in the wild and select a few of particular interest to highlight in greater detail. We will outline their potential impact and provide effective remediation and prevention tactics and strategies. We will detail real-world use cases in action and offer guidance and recommended and useful resources.

About the Presenters 
Tessa Mishoe, Senior Threat Hunter, LogicHub 

As a critical member of the LogicHub MDR team, Tessa specializes in active monitoring, Windows threat response, Cisco products, and computer forensics. Tessa is involved in high-level security analytics and deep hunting exercises to protect computer systems, networks, and data. Prior to LogicHub, she managed daily mainframe operations, alarm and process management, network health management, and hardware repair at Edward Jones and Insight. Tessa holds a Bachelor of Applied Science (B.A.Sc.) degree in Network and System Administration and an Associate of Science (A.S.) degree in Computer and Information Systems Security/Information Assurance. 

Willy Leichter, Chief Marketing Officer, LogicHub 
Willy leads the marketing team at LogicHub and brings more than 20 years of experience in application security, network security, global data privacy laws, data loss prevention, access control, email security and cloud applications. A graduate of Stanford University, he has held marketing leadership positions at Virsec, CipherCloud, Axway, Websense, Tumbleweed Communications, and Secure Computing (now McAfee).

LogicHub Monthly Security RoundUp - April 2022

Security is facing a big data problem. Countless data sources generate millions of events a day, and the human analysts trying to deal with them simply can’t keep up. More often than not, analysts spend more than 95% of their time chasing trivial threats or false positives. Wouldn’t it be nice if you were only served up the 5% of events that actually need your expert attention rather than the whole enchilada? 

We are seeing the progressively effective use of leveraging sophisticated AI, machine learning, and automation to handle big data analytics, alert triage, and threat detection and response. Modern security teams are finding that you can successfully delegate the repetitive, mind-numbing work to robots and have your human security experts do what they do best. 

In this webinar, we will discuss:
• An overview and examples of how AI and machine learning can be applied to security detection and response
• How to automate complex repetitive tasks and free up human analysts to use their expertise where it’s really needed
• How human experts and expert machine systems interact to train AI systems to constantly improve on accuracy and efficacy

Humans Make Bad Robots: Why We Need AI & Automation in Security

If money were no object, every organization would have a dedicated team of highly trained security experts providing 24/7 threat detection and incident response. But the overhead required to achieve this level of protection can be prohibitively expensive. 
At LogicHub, we’re democratizing security. We believe that by leveraging AI and automation driven detection and response across integrated environments, small and mid-sized enterprises can defend against sophisticated attacks - even with budgetary and resource constraints.

In this webinar, we will discuss how to:

• Leverage AI as a force multiplier for skilled human expertise.
• Implement AI and decision automation to perform advanced threat hunting, detection, and response at machine speed and scale.
• Reduce time spent investigating false positives. 
• Reduce noise and repetitive work for analysts.
• Free up valuable time and resources to focus on proactive rather than reactive work.

Security for All: Democratizing AI & Automation

In the last two years, security teams have witnessed unprecedented challenges and threats. In light of these new risks, AI based tools could be the answer. With the ability to learn and monitor patterns, observe behaviour and detect abnormalities before they harm security posture, this year we will see AI thrive in the security space. 

But what are the challenges we can expect to see when implementing AI into our security? How can we navigate these challenges to leverage “cognitive security”? 

Join us in this session as we discuss: 
-  Why AI is the key to many new security risks
-  What we mean by cognitive security, and how AI can achieve it 
-  AI tools and processes to combat ransomware, breaches and malware

Improve Your Security Posture with AI

Each month LogicHub will be reviewing the past month’s most notable threats. We will take a deep dive into the new threats and vulnerabilities we are seeing in the wild and select a few of particular interest to highlight in greater detail. We will outline their potential impact and provide effective remediation and prevention tactics and strategies. We will detail real-world use cases in action and offer guidance and recommended and useful resources.

About the Presenters
Tessa Mishoe, Senior MDR Analyst, LogicHub
As a critical member of the LogicHub MDR team, Tessa specializes in active monitoring, Windows threat response, Cisco products, and computer forensics. Tessa is involved in high-level security analytics and deep hunting exercises to protect computer systems, networks, and data. Prior to LogicHub, she managed daily mainframe operations, alarm and process management, network health management, and hardware repair at Edward Jones and Insight. Tessa holds a Bachelor of Applied Science (B.A.Sc.) degree in Network and System Administration and an Associate of Science (A.S.) degree in Computer and Information Systems Security/Information Assurance.

Willy Leichter, Chief Marketing Officer, LogicHub
Willy leads the marketing team at LogicHub and brings more than 20 years of experience in application security, network security, global data privacy laws, data loss prevention, access control, email security and cloud applications. A graduate of Stanford University, he has held marketing leadership positions at Virsec, CipherCloud, Axway, Websense, Tumbleweed Communications, and Secure Computing (now McAfee).

LogicHub Monthly Security RoundUp - March 2022

LogicHub Monthly Security RoundUp - May 2022

Cyber Security

Cyber Threats

IT Security

Artificial Intelligence

Automation

Threat Detection

Cloud Security

Security

Breach Detection

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

Research and Development

Join this new, vibrant community to learn and connect with top thought leaders, startups and banks who are disrupting the financial services industry. Keep up with the latest news and trends in Fintech and take part in lively debates on topical issues and challenges.

Fintech

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

LogicHub Monthly Security RoundUp - May 2022

Presented by

About this talk

More from this channel