Name: Etsy and the art of SIEM Migration
Start: 2024-09-05T15:05:00Z
End: 2024-09-05T15:05:13.000Z
Location: BrightTALK
Rating: 0

Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats. Mandiant is now part of Google Cloud.

Tabletop exercises (TTXs) help organizations evaluate their response to cyber threats, but they can also inform proactive security efforts. Join Mandiant Consultants’ Alishia Hui and Muhammad Muneer as they outline the process of developing a tabletop exercise and using its scenarios to build a targeted threat hunt.

From tabletops to threat hunting: Leveraging tabletop exercises for proactive defense

As organizations increasingly adopt Cloud and AI, security remains a top concern. This webinar will explore how to accelerate your AI journey on Google Cloud with confidence by leveraging the Security Command Center. Unlock visibility into your cloud usage and secure them in real time.

Secure your Cloud and AI Adoption with Security Command Center

Il Report M-Trends 2025 offre un'analisi approfondita delle ultime tendenze globali in materia di cyber sicurezza e delle tattiche degli aggressori. Basato sulla risposta agli incidenti in prima linea e sulla threat intelligence di Mandiant dal 1 gennaio 2024 al 31 dicembre 2024, questo report aiuta i lettori a rimanere aggiornati, fornendo approfondimenti sul panorama delle minacce informatiche in evoluzione nella regione EMEA.

Unisciti al nostro esperto, Davide Di Lecce, che analizzerà queste metriche di tendenza e i comportamenti significativi degli avversari, e scopri come questi risultati possono migliorare la tua strategia di sicurezza contro futuri attacchi.

Gli argomenti includeranno:

*Metriche di risposta agli incidenti, incluse le principali fonti di rilevamento e i vettori di infezione iniziali
*Tendenze di targeting industriale

M-Trends 2025: dati dietro le principali tendenze e minacce informatiche odierne

El informe M-Trends 2025 analiza en detalle las últimas tendencias mundiales en ciberseguridad y las tácticas que utilizan los atacantes. Se basa en la experiencia directa de Mandiant respondiendo a incidentes e investigando amenazas entre el 1 de enero y el 31 de diciembre de 2024. Este informe ayuda a los lectores a estar al día, ofreciendo información sobre cómo está cambiando el panorama de las amenazas cibernéticas en Europa, Oriente Medio y África (EMEA).

Te invitamos a escuchar a nuestro experto, Jose Alemán, quien explicará estas tendencias y los comportamientos más importantes de los atacantes. Aprenderás cómo estos descubrimientos pueden ayudarte a mejorar tu estrategia de seguridad para defenderte de futuros ataques.

Los temas que se tratarán incluyen:

*Datos sobre la respuesta a incidentes, incluyendo las principales formas en que se detectan los ataques y cómo empiezan a infectar los sistemas.
*Tendencias sobre qué industrias son los principales objetivos de los ataques.

M-Trends 2025: Descubre las claves de los últimos ataques y tendencias en ciberseguridad

Der M-Trends 2025 Bericht bietet einen tiefen Einblick in globale Cyber-Sicherheitstrends sowie Taktiken und Methoden der Angreifer. Basierend auf den Erkenntnissen aus den Mandiant Incident-Response Untersuchungen des vergangenen Jahres sowie ergänzenden Google Threat Intelligence Informationen ermöglicht es der Bericht Lesern, ein besseres Verständnis über die aktuelle Cyber-Bedrohungslage in Europa zu entwickeln.

Jochen Klotz wird in seiner Präsentation auf relevante Kennzahlen des Reports eingehen und auf signifikante Vorgehensweisen von Angreifern hinweisen. Dies soll Ihnen eine Weiterentwicklung Ihrer Cyber-Sicherheitsstrategie ermöglichen mit der Zielsetzung, besser auf mögliche künftige Angriffe vorbereitet zu sein.

Themen werden sein:
*Kennzahlen zur Reaktion auf Vorfälle, einschließlich der wichtigsten Erkenntnisquellen und anfänglichen Angriffsvektoren.
*Trends hinsichtlich angegriffener Industrien.

Aktuelle Einblicke in die wichtigsten Cybersicherheits-Trends und Angriffe 2025

Le rapport M-Trends 2025 offre une analyse approfondie des dernières tendances mondiales en matière de cybercriminalité et des tactiques des attaquants. Basé sur la réponse aux incidents de première ligne et la veille des menaces de Mandiant du 1er janvier 2024 au 31 décembre 2024, ce rapport aide les lecteurs à garder une longueur d'avance en fournissant des informations sur l'évolution du paysage des cybermenaces dans la zone EMEA.

Rejoignez notre analyste expert, David Grout, qui décortiquera ces indicateurs de tendances et les comportements significatifs des adversaires, et découvrez comment ces conclusions peuvent améliorer votre stratégie de sécurité contre les futures attaques.

Les sujets abordés comprendront :
*Les indicateurs de réponse aux incidents, y compris les principales sources de détection et les vecteurs d'infection initiaux
*Les tendances de ciblage par secteur d'activité

M-Trends 2025: Les principales tendances et attaques en matière de cybersécurité

The M-Trends 2025 Report offers a deep dive into the latest global cyber trends and attacker tactics. Based on Mandiant's frontline incident response and threat intelligence from January 1, 2024 to December 31, 2024, this report helps readers stay ahead of the curve by providing insights on the evolving cyber threat landscape in EMEA.

Join our expert threat analyst, Jamie Collier, as he unpacks these trending metrics and significant adversary behaviours, and learn how these findings can enhance your security strategy against future attacks.

Topics will include:
*Incident response metrics, including top detection sources and initial infection vectors
*Industry targeting trends

M-Trends 2025: EMEA By the Numbers

In today's rapidly evolving digital landscape, startups and scaleups often face the dual challenge of accelerating growth while managing limited resources. This dynamic environment makes them prime targets for sophisticated cyber threats. Join experts from Google Threat Intelligence and Mandiant as they delve into the most pressing cybersecurity challenges confronting digital-native businesses.

Securing the Digital Frontier: Navigating Cyber Threats in Startups and Scaleups

In this session Mandiant Consultants will share some of the lessons learned during TIBER tests both from the perspective of the Threat Intelligence and the Red Team provider.

Key topics covered in this webinar will include:

- Common pitfalls and challenges encountered during TIBER assessments
- Best practices for integrating threat intelligence and red teaming into your assessment strategy
- Innovative methodologies and tools for maximising the effectiveness of your TIBER assessment
- Actionable takeaways and expert guidance for ensuring a smooth and successful TIBER assessment experience

TIBER-EU: Lessons Learned from the TI and RT Perspective

This webinar, the final session in The Defender's Advantage virtual series, focuses on how Google Cloud Security can help organizations of all sizes activate their defender's advantage by guiding them through the activation of the six critical functions of cyber defense.    

You will learn about:
*The Defender's Advantage methodology and its benefits    
*How Google Cloud Security solutions map to the six critical functions of cyber defense  
*Real-world examples and case studies of how organizations have successfully implemented The Defender's Advantage with Google Cloud Security    

Join us to discover how to make Google part of your security team. 

About The Defender’s Advantage:
Google Cloud Security published The Defender’s Advantage, a cyber defense framework to help all organizations prepare for and mitigate future security incidents. We believe that security teams like yours have the ultimate cyber defense advantage, the ability to control the environment being attacked.  Learn more here: https://cloud.google.com/security/resources/defenders-advantage

Activate the 6 critical functions of cyber defense with Google Cloud Security [The Defender's Advantage series, part 4]

Modern applications increasingly rely on AI, introducing unique security challenges that demand a holistic approach to security architecture. This webinar dives deep into securing AI-powered applications, moving layer by layer from data security to infrastructure, model protection, and application-level defenses. We'll examine Google's Secure AI Framework (SAIF) as a blueprint for building robust security into each component of your AI systems, ensuring resilience against evolving threats.

Protecting AI-Powered Applications: A Deep Dive into Security Architecture

Edge zero days have been increasingly exploited by threat actors.  But, how do you stop an attack when it’s happening to the security control itself.  Attend this session to learn the real behind the scenes on how insights from an attack on the frontlines turns into detections in Google SecOps and wins for security operations teams.

Detecting zero days on the Edge

You always hear, “The threat  landscape has undergone a dramatic shift” but what about the threat intelligence monitoring this shift. How are threat analysts keeping up with the ever evolving cyber criminals as they move beyond credit card theft to focus on sophisticated extortion techniques and cryptocurrency-based payoffs?

Explore the key factors driving this evolution and discover how AI is being used to gather threat data and information, enabling analysts to collect and analyze massive datasets, to monitor a growing number of threat actors and activity. Join us to gain a deeper understanding of how threat intelligence is evolving and learn how we are using AI to deliver the most relevant and up-to-date threat intelligence to you as possible.

The evolution of cyber threats: How AI is helping defenders keep pace

Ever wondered how Google does security? As part of our new “How Google Does It” series, we’ll share insights, observations, and top tips about how Google approaches some of today's most pressing security topics, challenges, and concerns — straight from Google experts.

During this session we’ll share an inside look at the core aspects and principles of Google’s approach to modern threat detection and response. Plus, we’ll take a peek under the hood at how Google uses and secures its own cloud environments.

How Google Does It: Making threat detection scalable and securing our own cloud

AI is helping to enable organizations across a variety of business functions with new and novel ways to enrich existing processes or explore new ways of doing things.  However, like anything new and novel, keeping pace with the business while ensuring the right safeguards are in place is a daunting task for even the best of security teams.  

This session will provide practical advice on how threat modeling can be used to surface the use cases driving AI consumption within your business, and how to focus on the risks relevant to your organization.

Threat Modeling AI to Enable Innovation

The transformative potential of AI demands robust security and Google Cloud is uniquely positioned to help organizations accelerate their AI journey by providing capabilities to holistically manage risk across the AI lifecycle. Join this session to learn about how you can securely navigate the evolving AI landscape with new AI Protection capabilities, including Model Armor, our LLM guardrails solution, which allows organizations to apply security and safety controls to gen AI applications.

Managing AI Risk with Confidence

As organizations rapidly adopt AI, many are also concerned about the potential risks that AI can introduce. Join us for a special session with Dave Gruber, Principal Analyst, Enterprise Strategy Group, as he shares research findings and insights that shed light on ways organizations can enable secure, private, and compliant adoption of AI workloads.

Accelerating Secure AI Transformation

In a world where critical infrastructure is increasingly reliant on digital technologies, cybersecurity for OT (Operational Technology) and ICS (Industrial Control Systems) has become a crucial factor. In this webinar, we will discuss, among other topics, the significance of Red Teaming as part of a comprehensive security strategy.

Topics Covered include:

- Industrial cybersecurity, and why is it so important
- The types of OT attacks that have occurred in the past
- The challenges industrial cybersecurity face today
- Solutions and best practices available for protecting OT/ICS systems
- The role Red Teaming plays in a comprehensive security strategy

Together, we will analyze the challenges of industrial cybersecurity and present concrete solutions to address them.

Industrial Cybersecurity: Red Teaming as Part of a Comprehensive Security Strategy

Learn how you can quickly and easily build applications in environments with predefined controls and guardrails to meet global regulatory requirements and maintain digital sovereignty. In this session, you’ll hear about the wide variety of options available that allow you to align cloud controls with risk and regulatory mandates worldwide.

The power of choice: Addressing diverse global regulatory requirements on Google Cloud

The key to maintaining a strong cloud security posture is to build from a robust foundation of baseline security controls. In this session we will highlight our latest innovations in IAM. Join us and learn how to enforce the principle of least privilege for your identities using Privileged Access Management and how to mitigate data exfiltration risks with Principal Access Boundary.

Security foundations: What’s new in Identity and Access Management

Browsers are no longer just a portal to the internet, they are the new endpoint where almost every high-value activity or interaction in the enterprise takes place. In this session, learn how you can create a new nexus of security, privacy, control, and visibility for users on managed and unmanaged devices using Chrome Enterprise.

Simplifying and strengthening endpoint security

Is clinging to the "safe" choice of legacy productivity tools actually putting your organization at risk? We believe there's a better way: Google Workspace's cloud-first architecture minimizes security risks by eliminating data storage on user devices, dependence on desktop apps, and on-premises infrastructure.

At the breaking point: Is your work email safe against ransomware and state-sponsored attacks?

Cyber attacks are inevitable. When they happen it’s important to stay calm and have a plan. For many that plan is to enlist help from outside the organization. Join Jibran Ilyas, a seasoned security consultant and incident response expert as he dissects the strategies his team employs in recent high profile breaches and how the threat intelligence is applied in investigations to speed up analysis and for swift containment and remediation. This session is essential for anyone seeking to strengthen their incident response capabilities and safeguard their organization against the ever-evolving landscape of cyber threats.

The symbiotic relationship between incident response and threat intelligence

The practice of security in highly dynamic cloud environments begins by discovering where you are most vulnerable to attack and identifying high-value resources that could be exposed to adversaries. Google Cloud Security advancements help pinpoint the risks and vulnerabilities that matter most so you can directly respond and reduce exposure. Join this session to learn about the latest technologies that can help keep your multi-cloud environment safe.

The indispensable technologies for reducing cloud risk

You can’t spell “action” without “AI,” and in this session, we’ll show you five ways you can take action today to stay ahead of threats using generative AI. Our team of product experts will demo new features, cover use cases with a customer from Apex Fintech Solutions, and share best practices that empower security professionals to unleash the potential of AI and transform their operations.

From detection to protection: Five ways to use Gemini, Google’s AI assistant, in Security

EMEA Google Cloud Security Summit 2024

Major shifts in the SIEM market are driving security operations teams to migrate from legacy to modern platforms. In this session, Etsy will share best practices from its journey to fast and effective migration and SecOps modernization.

Etsy and the art of SIEM Migration

Security Operations

Security Operations Center

SIEM

Threat Detection

Threat Hunting

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Etsy and the art of SIEM Migration

Presented by

About this talk

Mandiant EMEA