Name: Threat Hunting with VirusTotal - Episode 2
Start: 2023-02-22T16:00:00Z
End: 2023-02-22T17:00:55.000Z
Location: BrightTALK
Rating: 4.8

Helping to modernize security whether you are transforming your systems in our cloud or in place.

Did you know that the cloud presents better security improvement opportunities than on-prem? We had a sneaking suspicion this was the case! But don’t just take our word for it, see what security leaders and SecOps practitioners had to say about that topic and more. 

Google Cloud’s recent survey of 400 security leaders and security operations practitioners dug into the capabilities, procedures, and behaviors of protecting against, identifying, and remediating cloud-based threats.

Join us as we share the insights from this survey, including the main challenges and opportunities for SecOps teams as they transform to a cloud-first threat detection and response mindset.

We’ll cover key findings, including:
 - Why the cloud offers superior detection and response opportunities than on-prem.
 - How automation can solve short-term and long-term security challenges.
 - What are the greatest threats to the cloud, like data leakage and cryptomining.
 - Guidance on how to incorporate these lessons into your company’s current operations and considerations.

What you need to know: 2023 State of Cloud Threat Detection and Response

The most impactful attacks of today do not target production systems. Instead, they focus on the software supply chain. The well-known SolarWinds attack threatened thousands of organizations, for example, while a bug in the widely used Apache Log4j 2 library affected millions.

Join this webinar where we talk about some of the most notorious software supply chain attacks, discuss lessons learned from these, and offer actions you can take right now to prevent similar attacks from happening.

3 Actions IT Leaders Can Take to Improve Software Supply Chain Security

Google keeps more people safe online than anyone else. What if you could protect your Google Cloud environment using the same technologies and best practices? Attend this 30-minute webinar and learn how Security Foundation can secure your data and applications running in Google Cloud. You’ll get valuable information about:
- Best security practices for cloud environments to protect Google Cloud workloads
- Proven security blueprints reviewed and validated by Google cybersecurity teams
- Google-recommended security products and technologies

Start Secure and Stay Secure - Security Foundation for Data Analytics

Start Secure and Stay Secure - Security Foundation for IT Modernization

Start Secure and Stay Secure - Security Foundation for Application Modernization

Learn how to use the Splunk and VirusTotal integration to extract security insights from VirusTotal datasets in a one-click experience and make informed decisions quickly and accurately. CVEs affecting your events and run Splunk searches right in the interface. This webinar is co-hosted with VirusTotal and Splunk security experts.

Security investigations with Splunk and VirusTotal

Detecting and responding to bots and fraud has become vital to organizations and ensuring security for their users. Attackers are carrying out more sophisticated bot attacks, and using novel ways to exploit compromised credentials to gain unprecedented access to the online presence of organizations. 

Join our upcoming webinar to see how reCAPTCHA Enterprise with its GA of Account Defender is driving security by preventing account takeovers, preventing fraudulent attempts and reducing friction for legitimate users.

We’ll explore how you can leverage the depth of Google’s intelligence and ML models by securing 6 million websites, how to secure your login and registration workflow, and moving beyond the visual challenge.

Prevent Account Takeover and Fraud with reCAPTCHA Enterprise

Discover with our experts how to use VirusTotal’s API, one of VT most valuable resources. This practical session will show you examples for all kinds of use cases where VT API can help automate tasks, integrate VT data into any solution, implement advanced hunting use cases, and much more.

How to use VirusTotal’s API like a pro!

Are you a cybersecurity product management leader seeking to establish, unify or upgrade your products’ data platform? If so, please join us for this live panel discussion on lessons learned that can help accelerate product development and avoid pitfalls so you can more rapidly:
 - Unify your product portfolio’s data into one hyper scale platform to deliver rich insight, detections and response.
 - Overcome engineering resource constraints to build and manage your security data platform.
 - Turn your XDR vision into reality.

Join our panel of experts for this lively discussion:
 - Dr. Anton Chuvakin, Lead Security Strategic Advisor, Office of the CISO, Google Cloud (+Prior VP Research & Distinguished Analyst for Security & Risk Management at Gartner)
 - Shapor Naghibzadeh, Chronicle Co-founder & Product Lead, Google Cloud
 - Josh Karp, Head of Security OEM Partnerships, Google Cloud

Lessons Learned for Security Product Managers to Avoid Data Platform Pitfalls

Nearly one year ago, Russia invaded Ukraine, and we continue to see cyber operations play a prominent role in the war. To provide more insights into the role of cyber, we released Fog of War: How the Ukraine Conflict Transformed the Cyber Threat Landscape Report based on analysis from Google’s Threat Analysis Group (TAG), Mandiant, now part of Google Cloud, and Google Trust & Safety.

Join our upcoming webinar to explore new findings, and retrospective insights, across government-backed attackers, information operations (IO), and cybercriminal ecosystem threat actors from the report. 

Highlights include:
- Shifts in Russia’s government-backed attackers tactics and efforts.
- How Moscow has shaped public perception of the war.
- The effects on the Eastern European cybercriminal ecosystem, and how it has changed.

Speakers:
Toni Gidwani, Security Engineering Manager - Google Threat Analysis Group
Tina Tong, Threat Intelligence Analyst - Google Threat Analysis Group
Ben Read, Senior Manager of Threat Analysis - Mandiant, now part of Google Cloud

Fog of War: How the Ukraine Conflict Transformed the Cyber Threat Landscape

Earlier this year (2022) Google acquired Mandiant - making it one of its largest acquisitions to-date. In this session we will take a deep dive into the Mandiant Advantage platform, a SaaS offering that brings Mandiant’s threat intelligence and cybersecurity expertise to organizations of all sizes.  Learn how organizations can enhance their existing controls and prioritize cyber defenses based on the tactics and techniques of the threat actors targeting them.  

Technical Level: 3/5

Google Cloud Security Lunch & Learn: Threat Intel Driven Security with Mandiant

Detecting, investigating, and responding to cyberthreats is the core function of the SOC, and the team never gets a break - attackers are carrying out more sophisticated attacks, the attack surface continues to expand, and talent shortages are the reality.

Join our upcoming webinar to see how Chronicle Security Operations has cracked the code on speed and scale, automation, and detection/investigation/response processes.

We’ll explore how you can:
 - Eliminate security blindspots with cloud-native infrastructure.
 - Get to “aha” faster with sub-second search, insights, and streamlined processes.
 - Democratize security operations by leveraging threat intelligence, out-of-the-box detections, and playbooks.

Modernize Your SOC for the Future

With external code and data collaboration becoming the norm for organizations, we have moved from a world of “Trust but Verify” to “Verify, and only then Trust”.

In this talk, we will demonstrate two ways to make sure the workloads you are running are really what you expect. Showcasing both Confidential Space that allows secure data collaboration with external parties, and BinaryAuthorisation that explicitly makes sure the code you deploy is really what you expect it to be.

How to collaborate and deploy secure code without trust

Organizations are prioritizing application modernization which allows them to accelerate time to market, unlock value, and improve operational efficiency. With new threats arising, Google offers essential tools to deploy foundational security to achieve a solid security posture. 

Learn how to use SCC,  Binary Authorization, Artifact Registry and other Google Cloud features to detect application vulnerabilities and misconfigurations, secure and verify the software supply chain, and implement runtime protections.

Securing Modern Apps in Google Cloud

Google Cloud Firewall is a fully distributed, cloud-native firewall service that helps you protect your cloud infrastructure and workloads. We’ve released significant new capabilities that up the game for this network security service. You’ll learn about our new policy enhancements including the Network Firewall Policy construct and secure Tags. You’ll also hear about all new capabilities that work together to help you achieve a least privilege, self-service network security operation, with agentless micro-segmentation, including Google Cloud Threat Intelligence.

New Cloud Firewall Updates

There is no shortage of headlines surrounding supply chains – including the increased risk of cyber security compromises related to both hardware and software supply chains.  Join Mandiant experts to discuss the latest threat trends facing supply chains - including an increase in financially motivated threat actors joining nation-state actors in this space. We will discuss the SolarWinds case study and provide direction on activating your cyber defenses to protect the expanding supply chain ecosystem.

Mandiant Front Lines: Activate Cyber Defenses Against Supply Chain Compromise

For much of the workforce, the browser has essentially become the new endpoint, which makes it the perfect place to level up enterprise security. Join this session to learn more about how you and your teams can leverage Chrome and BeyondCorp Enterprise to protect and secure corporate data across devices; secure your remote and extended workforce; protect your data from malware; gain critical security insights into unsafe activities; and enforce a Zero Trust security approach using context-aware access controls.

Zero Trust with Zero Agents: Secure Browsing & Data Protection Strategy

Join one of our top VirusTotal’s researchers for a step by step LIVE session on VirusTotal Threat Hunting. This time we will be focusing on the usage of Yara for Threat Hunting including rule-writing basics and hints to detect in-the-wild samples of infamous APTs.

Threat Hunting with VirusTotal - Episode 2

Threat Analysis

Threat Detection

Threat Hunting

Incident Response

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

The storage community on BrightTALK is made up of thousands of storage and IT professionals. Find relevant webinars and videos on storage architecture, cloud storage, storage virtualization and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Storage

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Threat Hunting with VirusTotal - Episode 2

Presented by

About this talk

More from this channel