Name: Rethinking Security Detection in an XDR World
Start: 2020-09-01T20:55:00Z
End: 2020-09-01T21:54:35.000Z
Location: BrightTALK
Rating: 4.33

Helping to modernize security whether you are transforming your systems in our cloud or in place.

The pace at which businesses are migrating to the cloud remains rapid. The overwhelming majority of companies expect to increase their cloud investment in the next 12 months, and cloud assets – including applications, hosts and containers – now outnumber physical endpoints within organizations.

Most security incidents now involve the cloud, according to the latest Verizon Data Breach Investigations Report. Yet organizations remain disproportionately focusing their resources and efforts on protecting physical, on-premises, legacy assets.

Join our upcoming webinar on cloud threat detection, investigation and response to learn more and answer questions like:

- Why is detection and response different in the cloud?
- Who does what to support cloud detection and response?
- How can technology help with cloud detection and response?
- And how can the cloud serve as a springboard for your security operations transformation?

Streamlining Detection and Response to Cloud Threats

Google’s Cloud Native SIEM, Chronicle, provides native integrations for modern productivity and collaboration suite, Google Workspace. In today’s Security Analyst Diary we’re going to cover: 

- Why integrate Google Workspace with Chronicle?
- How to integrate Workspace with Chronicle: Ingestion
- Using Chronicle for Detection & Response with Google Workspace

You can also read the blog here - https://chronicle.security/blog/posts/security-analyst-diaries-4-detection-and-response-on-google-workspace-with-chronicle/

Security Analyst Diaries - EP4: Detection and Response on Google Workspace

The MSSP market is fast paced and constantly evolving. According to the recent Kaspersky Global Corporate IT Security Risks Survey, 70% of organizations plan to outsource security to an MSSP or MSP in the next year.

It might seem like a piece of cake for MSSPs to attract new business and keep existing customers, but MSSP market competition is fiercer than ever.

So, how do you attract new customers and keep existing customers coming back for more?

Join our upcoming webinar on three ways MSSPs can leverage the new Siemplify (now part of Google Cloud) MSSP SecOps Program to:
 - Differentiate in a competitive MSSP market.
 - Improve customer retention.
 - Maximize operational efficiency and grow margins.

3 Ways to Stay Ahead in a Competitive MSSP Market with SOAR

The MITRE ATT&CK Framework is a critical tool many security operations teams use to understand and counter adversary behavior, identify gaps in their security posture and assess overall SOC maturity.

In this webinar, we will explore how you can extend the value of the MITRE ATT&CK Framework by incorporating it into your security operations workflows.

Join us to better understand:
 - The fundamental value of the MITRE ATT&CK framework.
 - How you can use the framework to speed up investigations.
 - The options you have to customize the use of this framework in the Siemplify SOAR platform.

Integrating the MITRE ATT&CK Framework into your SOAR Playbooks

To stay secure in today’s growing threat landscape, organizations must uncover and remediate cyber threats at unprecedented speed and scale.

This demonstration will showcase how Google Cloud's Chronicle, Siemplify and VirusTotal products are coming together to provide a holistic approach to modern threat detection, investigation and response.

Join us and discover how to:
- Uncover and analyze new and evolving threats at petabyte scale.
- Decrease alert fatigue and caseload by as much as 80% working threat-centric cases.
- Automate up to 98% of Tier 1 tasks with custom dynamic playbooks.
- Reduce mean time to detection (MTTD) and mean time to response (MTTR) with actionable threat intel and context-driven investigations.
- Hunt for new and advanced threats 90% faster than traditional SOC tools.

Threat Detection, Investigation, and Response with Google Cloud’s SecOps Suite

Welcome to another Security Analyst Diary entry. This episode covers not one, but three of our coolest feature releases that enable our customers to drive greater efficiencies with Chronicle SIEM, create impactful detections, and gain context with native-integration of VirusTotal.  

With these new capabilities, Google Chronicle customers can:
- Manage the health of Chronicle deployment 
- Build new detections for key SOC use cases
- Drive additional context using native-VirusTotal widget

Security Analyst Diaries - EP3: Impactful Detections w/VirusTotal Integration

Financial institutions are one of the primary targets by all kinds of attackers. In this webinar we will analyze what kind of malware is being used in 2022 for targeted attacks, we will profile what the attacker’s toolset looks like, how banking malware is changing and we will learn to monitor malicious activity.

Threat-landscape of Financial attacks

For many years, organizations have relied on the MITRE ATT&CK™ framework as a valuable resource to catalog adversary tactics, techniques and procedures (TTPs). The information security community has leveraged ATT&CK™ to help guide investigations, write robust detections, and enrich threat intelligence.

In June 2021, a cooperation between the National Security Agency (NSA) and MITRE released D3FEND™, a complementary framework that provides insight into defensive measures for enterprises.

This SANS webcast explores:
 - How to leverage D3FEND™ to enhance enterprise security defenses.
 - How to utilize ATT&CK™ and D3FEND™ together to detect attacker TTPs.
 - How to incorporate D3FEND™ countermeasures into your daily response workflows.
 - How the security community can give back and make D3FEND™ even better.

Incorporating ATT&CK™ and D3FEND™ Frameworks into Your Analysis and Intelligence

This on-demand presentation brings together the sultan of SecOps, Anton Chuvakin, and Jovan Scott, a longtime SOC leader, to discuss real-life stories of battling today’s adversaries from the trenches – and how the introduction of adaptiveness, agility and automation through Google Cloud security solutions can help transform your security operations, whether at an enterprise or MSSP.

In the modern SOC, all roads still lead to detection and response. But to manage threats in multi-cloud and hybrid environments, a renewed take on people, processes and technology is required to yield visibility, lightning-fast speed and clean signals.

You’ll walk away knowing more about:
- How withstanding cyberattacks is achievable through a recalibrated SOC model that emphasizes creativity and organizational influence.
- Tips for adapting use cases to cloud workloads, even as SOC teams are continually bogged down by proverbial firefighting.
- The concept of shared fate (vs shared responsibility), in which cloud security providers and their clients collaborate toward a common goal.

Embracing the Journey of Security Operations Modernization

Cloud security is crucial for organizations wanting to move their digital transformation strategy forward. But as cloud security has evolved, it has spawned a flurry of unproven concerns and risks. How do you know what’s real – or what’s simply a distraction?

This webinar will demystify common cloud security myths, such as:
 - “The cloud is less secure than on-prem!”
 - “Single-tenant systems are more secure than multi-tenant!”
 - “Going multi-cloud is too complicated!”
 - “Cloud costs will be higher than on-prem!”

This session will also explore how security orchestration, automation and response (SOAR) can help you push your cloud security strategy ahead.

Debunking Cloud Security Myths

The security orchestration, automation and response (SOAR) market continues to rapidly grow and mature, and with good reason. SOAR can allow SOC teams to manage their operations from end-to-end and respond to cyber threats with speed and precision.

What if you could unify disparate security tools for full visibility and context? Automate tedious manual tasks to free up time for more strategic initiatives? Speed response from hours to minutes? Siemplify enables security teams to do this and so much more.

Join us to see how to:
- Manage security operations from a single platform.
- Decrease caseload as much as 80% by working threat-centric cases.
- Automate up to 98% of Tier 1 tasks with custom dynamic playbooks.
- Reduce mean time to detection (MTTD) and mean time to response (MTTR) with context-driven investigations.

Introduction to SOAR and the Siemplify Security Operations Platform

Making tactical decisions on how to use resources in a global security strategy is difficult. We used VirusTotal’s crowdsourced intelligence to analyze two years of malware submissions, which are explained in our www.virustotal.com/go/reports/2021trends. Join Ismael Valenzuela (@aboutsecurity) and Vicente Diaz (@trompi) to understand how attacks are developing and how they might evolve in the near future.

VirusTotal's 2021 Malware Trends Report

Security operations teams have been facing the same challenges for years now; alert fatigue, lack of automation, siloed technology, data retention, managing complex hybrid and/or multi-cloud environments, the list goes on. Every vendor claims to solve these problems, and yet these challenges have only exacerbated.

It is time for something new to help modernize security operations and actually help address common SOC problems. Combining Siemplify SOAR with Chronicle SIEM provides an end-to-end cloud-native SecOps platform that enables you to take control of any incident from detection to response at the speed and scale of Google.

Modernizing Threat Detection and Response with Google’s Cloud-Native SIEM & SOAR

With Cortex XSOAR as your champion and VirusTotal as the sharpened blade, your SOC will decimate threats and reduce analyst strain. Together, VirusTotal and Cortex XSOAR enable your security and IT teams to discover context and solve incidents in a cost effective way. 

Learn how VirusTotal can leverage automated and early detection with crowdsourced threat intel, orchestrate your alert triage process and feed your EDR platform with highly relevant threats while Cortex XSOAR automates the intelligence through playbooks to save you hundreds and thousands of hours in manual work.

This webinar is be co-presented by Google Cloud and Palo Alto Networks/Cortex.  Leads from this webinar will receive outreach from Palo Alto Networks representatives.  View this link to review their privacy policy: https://www.paloaltonetworks.com/legal-notices/privacy

Build your SOC with Superior Threat Intelligence from VirusTotal & Cortex XSOAR

Running into objections with your zero trust initiative? Help is here! Join Google Cloud Security's Tim Knudsen and guest speaker Jess Burn, Forrester senior analyst, for a fireside chat where they discuss common CISO objections to zero trust and unpack different concerns that are seen across the industry. In this live webinar, Jess and Tim will talk about the top five reasons for opposition they hear from clients and customers when it comes to implementing a zero trust -- from cost, to change management, to the belief it's just a buzzword. Our speakers will help you break down some common doubts, de-bunk a few myths, and even shed light on ways organizations have successfully been able to overcome challenges. They will also share how organizations can reframe their thinking and embrace change with new and proven perspectives. So if you're skeptical about zero trust or are ready to begin your journey and want to prepare your organization, be sure to tune in!

How to Handle Five Key Objections to Zero Trust Implementations

In this webinar, you will learn more about the public preview availability of account defender, the newest feature in reCAPTCHA Enterprise. 

Account defender takes reCAPTCHA Enterprise’s behavioral detection a step further by analyzing the patterns of behavior for an individual account, in addition to the patterns of behavior of all user accounts associated with your website. Account defender is the latest investment in reCAPTCHA Enterprise to offer you more tools to fight fraud targeting your accounts and payments.

The webinar will show you how to enable account defender step by step and understand the findings to improve the security of your user accounts.

Add more defenses against payment and account fraud with reCAPTCHA Enterprise

Security has been and continues to be the cornerstone of our product strategy and it's critical that we help our customers update their tools and methods to fit our digital age. In this session, we’ll talk about some of our latest security innovations and product updates across our portfolio, including zero trust, user protection services, network security, and more!

Google Cloud Security Products Update

SIEM, XDR, TI, SOAR, UEBA, you-name-it… Adapting to the exponential signal volume and complex nature of the evolving technology landscape will require a fundamental shift in how we build scalable security operations programs. Akin to DevOps, all organizations need to foster the practices and principles of modern threat management.  Join this session to learn how we’re reshaping the problem and framing a path for CISO’s to build elite Security Operations programs.

All Organizations Should Pursue Autonomic Security Operations…

The XDR technology ecosystem promises a new level of cyber security visibility, improved detection and active protection against modern threats.  The full telemetric value of XDR platforms, however, may not be realized without rethinking security analytics.  Join this SANS webinar, with Google Cloud Security experts, Dr. Anton Chuvakin and Ansh Patnaik, to learn more about the dimensions of modern security analytics that will enable you to fully unleash your XDR investment.

Rethinking Security Detection in an XDR World

Security Detection

Cyber Securirty

Cyber Attacks

Threat Detection

Chronicle

Security

IT Security

Security Analytics

Threat Hunting

Google Cloud Security

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

The storage community on BrightTALK is made up of thousands of storage and IT professionals. Find relevant webinars and videos on storage architecture, cloud storage, storage virtualization and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Storage

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Rethinking Security Detection in an XDR World

Presented by

About this talk

More from this channel