Name: Detection Engineering with Chronicle SIEM at the Speed and Scale of Google
Start: 2022-11-23T10:00:00Z
End: 2022-11-23T10:00:39.000Z
Location: BrightTALK
Rating: 4.6

Transform your cybersecurity with frontline intelligence, modern security operations and AI-powered cloud innovation.

Outsmart attackers and protect your organization with intelligence-driven vulnerability management. In this webinar, Google threat intelligence experts will demonstrate how to prioritize vulnerabilities based on active exploit risk, get early warnings on threats, maximize patch efficiency, and reduce your attack surface.

Use Cases in Threat Intelligence: Making Vulnerability Management Easier

The complexity of cloud environments creates unique security challenges. These include dynamic attack surfaces and adversaries expertly disguising themselves with native tools.  Threat hunting becomes crucial for security teams seeking to reduce dwell time, by uncovering threats that slip past traditional defenses.

In our second installment to the Beyond Detection Threat Hunting series, Mandiant experts will discuss:
 - How to adapt your threat hunting program to cloud or hybrid environments 
 - Real-world examples of how to turn cloud compromises into hunt missions 
 - How hunt findings can influence cloud hardening and response 

Learn how to hunt for evidence from a previous or existing cloud compromise to enhance future response capabilities and realize new methods of threat detection.

Beyond Detection: Hunting for threats in the cloud

Decades of threat detection, investigation, and response initiatives over-relied on DIY approaches and delivered mostly underwhelming results. This webinar will introduce Google’s paradigm for modern security operations and demonstrate how recent advancements in applied threat intelligence, automation, and AI give defenders a chance to flip the script and generate more security outcomes with less effort.

Work Smarter, Not Harder: Frictionless Security Operations with Google

Discover how to streamline your security operations and maximize your threat intelligence investment. In this webinar, we'll explore essential use cases for Google Threat Intelligence, showcasing how it can empower your IOC Enrichment, Incident Response and Forensics, Threat Hunting, Brand Protection and Vulnerability Management.

Join us for a hands-on demonstration of each use case and see benefits of faster threat detection and proactive defense strategies.

Use Cases in Threat Intelligence: Turn Insights into Action

The M-Trends 2024 Special Report provides an inside look at the latest cyber trends and attacker operations from around the globe. The second half of the report is dedicated to deep insights drawn directly from the frontlines of Mandiant investigations and threat intelligence findings that have shaped today’s evolving cyber threat landscape.

Join six of our report authors and experts on May 23, 2024 at 12:00pm ET as they share their point of view on these hot topics and provide best practice solutions to help improve your cyber defense capabilities in these areas.

Topics will include:
- China-nexus attackers targeting edge devices and platforms that lack EDR
- Trending adversary operations and motivations behind zero-day attacks
- The evolution of phishing techniques amidst modern security controls
- How attackers leverage AiTM to compromise MFA safeguards
- The reasons and solutions behind growing cloud and hybrid cloud intrusions
- How AI is effectively used in red and purple teams to help boost cyber defenses

Presenters:
Ryan Tomcik, Principal Security Analyst, Mandiant - Google Cloud Security
Mathew Potaczek, Principal Threat Analyst, Mandiant - Google Cloud Security
Josh Fleischer, Principal Security Analyst, Mandiant - Google Cloud Security
James Sadowski, Principal Intelligence Analyst, Google Cloud Security
Tucker Clark, Senior Security Consultant, Mandiant - Google Cloud Security
Josh Madeley, Regional Lead, Mandiant - Google Cloud Security
Jennifer Guzzetta, Product Marketing - Google Cloud Security (Moderator)

M-Trends 2024 Round Up: Expert Insights on 6 Key Topics

While many organizations have threat intelligence as part of their security operations program, most struggle to apply it effectively, and lack the required resources and expertise to keep up with the latest threat actors and TTPs. In this webinar, we’ll take a look at the new intelligence-driven approach in Google Chronicle Security Operations, and how it can deliver turnkey security outcomes with threat intelligence that’s personalized, relevant, and seamlessly embedded.

Stay ahead of the latest threats with intelligence-driven security operations

The M-Trends 2024 Special Report provides an inside look at the latest cyber trends and attacker operations from around the globe. Packed with timely data from Mandiant frontline incident response investigations and threat intelligence findings between January 1, 2023 - December 31, 2023, readers can increase their awareness of the evolving cyber threat landscape and glean new, effective ways to stay on top of their cyber defense game.

Join two of our top threat analysts on May 21, 2024 at 12:00pm ET as they discuss these trending metrics and notable adversary behaviors. Learn how these findings can affect your security approach to future compromise. 

Topics will include:
- Global and regional dwell times
- Detection by source trends
- Industry targeting metrics
- New threat actor techniques, motivations, and behaviors
- Top infection vectors and malware families
- Ransomware attack developments
- And more!

M-Trends 2024: By the Numbers of Today's Top Cyber Threats & Attacker Operations

Google Threat Intelligence is changing the game in threat intelligence. By unifying the frontline expertise of Mandiant, the VirusTotal  intel community and Google security insights, we are bringing to you unmatched breadth and depth, so you can get a panoramic view of the threat landscape, understand the "why" and "how" behind attacks, and turn insights into rapid action.

In this webinar, you will:

*Discover how Google Threat Intelligence provides unmatched visibility compared to other leading vendors.
*See a live demo of how to quickly identify the most relevant threats and respond to those threats most likely to target your organization.
*Learn how to operationalize threat intelligence for proactive defense, from automated alerts to AI-assisted malware analysis.
*Understand how Google's team of experts can support your threat intelligence journey, from training to embedded analysts.

Introduction to Google Threat Intelligence

Mandiant Managed Defense presents a quarterly webinar series, "Tales from the Trenches," to help you navigate the ever-evolving threat landscape. Our security experts will dive into the latest malware and attack trends they've encountered in the previous quarter. You'll gain valuable insights into how these threats were detected, along with actionable advice to strengthen your own defenses.

In the first installment of the series, Managed Defense consultants will detail findings from January through March 2024, including:

*Phishing emails deploying ASYNCRAT malware
*Ongoing exploitation of ScreenConnect vulnerabilities and hardening guidance 
*New FAKEUPDATES technique compromising Outlook email signatures

Reserve your spot today!

Tales from the Trenches: Malware and attack trends from Managed Defense

As organizations continue to migrate their critical workloads to the cloud, security teams face the daunting task of keeping their multicloud environments safe. Imperative to success is bridging the gap between proactive and reactive security teams so that everyone has a common view of data and events. This requires converging the tools and data used by cloud security and enterprise security operations teams into a single platform.

Join Melinda Marks, Practice Director at ESG, for an in-depth discussion on how the convergence of cloud security and enterprise security operations can streamline the detection and remediation of cloud misconfigurations, software vulnerabilities, and active threats. 

After attending this webinar, you'll be ready to start:
> Bringing together cloud security and security operations teams to drive greater efficiency and issue accountability 
> Prioritizing security response efforts by employing a comprehensive and continuous view of high-risk cloud risks that are specific to the environment 
> Understanding what cloud resources are most exposed through a unified data model that connects cloud security and SecOps teams

Converging Cloud Security with Enterprise SecOps

Proactive threat hunting enables cyber defenders to reduce attack dwell time through the identification of compromise activity previously missed by other detection mechanisms. Yet, many security teams do not have a dedicated threat hunting function and we’re on a mission to change that. 

In this webinar, Mandiant experts will cover:
 - How to establish a threat hunting function 
 - Threat hunting best practices and methodologies
 - Aligning hunt findings to the MITRE ATT&CK framework

Learn how to proactively hunt for evidence from a previous or existing compromise to enhance future response capabilities and realize new methods of threat detection.

Beyond Detection: The Art and Science of Proactive Threat Hunting

Many organizations are eager to take advantage of generative AI, but don’t have the resources to build, train, and maintain costly LLM models of their own. This session will provide an overview of the work Google Cloud is doing to allow customers and partners to call upon pre-trained security models and bring critical security intelligence to power their workflows.

Generative AI for your security use cases

Org Policy Service can help you establish security guardrails allowing only compliant resource configurations in your cloud organization. In this session we will introduce our new custom organization policy capability and how you can create and manage your own security and compliance policies to meet and address your organization's business requirements and policies.

IAM: New custom org policies to help address cloud governance requirements

The key to maintaining a strong cloud security posture is to build from the start on a robust foundation of baseline security controls. Google Cloud’s Security Foundation solution provides recommended controls for common cloud adoption use cases. In this session, you’ll learn how to use layered security defenses in the cloud to protect your cloud-based workloads. You’ll also learn how to build an architecture with security controls optimized for your modern infrastructure.

Security Foundation for Google Cloud: Protecting workloads with layered defenses

Cloud security teams are becoming cloud risk managers. They are moving beyond triaging the massive volumes of security alerts common to most cloud environments, to a new reality where they can efficiently identify and prioritize the high-risk issues that expose their organization’s critical cloud assets and resources. And, they are looking to CNAPP security tools to not only detect cloud misconfigurations, software vulnerabilities, and active threats - but remediate them, as well.

Join Philip Bues, Research Manager at IDC, to learn best practices for managing cyber risks in complex multicloud environments. Hear about emerging technologies and tools that help to break down silos between teams, and provide common workflows that bring together proactive and reactive security to drive down cloud risks.

In this webinar, you will learn:
> Why risk management must take center stage when protecting cloud environments
> How to develop strategies for not only finding cloud risks, but automatically remediating them
> The importance of infusing frontline threat intelligence directly into cloud risk management to find and help defeat the latest cyber attacks

Managing and Prioritizing Cloud Risks with CNAPP Security

Everyone wants to dive into security data analytics, but it can get overwhelming trying to figure out how to work with the data they already have. Security teams don’t always know if they have duplicate data or if there is something missing. In this webinar, experts recommend tools and best practices for correlating information from multiple security systems so that your SOC team is focusing on the most important threats first. Get practical advice on how to integrate data from external and internal data sources to get actionable insights. Learn how to identify threats and prioritize your responses.

During this webinar you will: 
 - Learn best practices for turning security data into actionable insights 
 - Find out how to prioritize the most dangerous threats to the enterprise  
 - Get advice on how integrate security data from across the organization in a way that’s most useful for security teams

Presented live by featured speakers Dr. Jason Clark and Greg Kushmerek. Moderated by Becky Bracken.

Making Sense of Security Operations Data

Outdated SIEM systems continue to form the backbone of many security operations despite increasing vulnerabilities and the rise of more powerful alternatives. This presentation offers a practical approach to SIEM migration, addressing the top challenges and providing actionable takeaways for a successful transition.

Veteran security expert Anton Chuvakin will cover essential tips, including:
 - Identifying the need for a new SIEM, understanding market options, and defining clear migration goals.
 - Streamlining the process by focusing on essential log sources and detection content.
 - Leveraging the migration as a catalyst to modernize security processes.
 - Emphasizing thorough testing, training, phased approaches, and the benefits of expert help.

Whether you're a seasoned practitioner or just beginning to consider a SIEM migration, this presentation will provide valuable insights and actionable strategies to ensure success in 2024.

Smooth SIEM Surgery: Practical Tips for SIEM Migration Success in 2024

Join us for a LIVE webinar and be the first to discover the latest features and make the most of VirusTotal.

VirusTotal: New Features 2024 Q1

Join us for a live webinar and learn how to detect, investigate, and hunt for threats like never before. 

Chronicle SIEM delivers modern threat detection, investigation, and hunting at unprecedented speed and scale – all at a disruptive and predictable price point. The scope and scale of securely operating in today's threat landscape and complex environment can be daunting. Google Cloud has taken what it has learned from its own defenders and built Chronicle, our approach to security operations at Google Cloud’s scale and speed.

This live webinar will be a special show-and-tell edition. We’re not just going to share what you need to know about our Chronicle SIEM, we’re also going to be showing you how to use it as well with a live demo.

Detection Engineering with Chronicle SIEM at the Speed and Scale of Google

Cyber Security

SIEM

Security Operations

SecOps

Threat Detection

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

The storage community on BrightTALK is made up of thousands of storage and IT professionals. Find relevant webinars and videos on storage architecture, cloud storage, storage virtualization and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Storage

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Detection Engineering with Chronicle SIEM at the Speed and Scale of Google

Presented by

About this talk

More from this channel