Name: Agentless threat hunting: Stopping ransomware before the encryption happens
Start: 2022-08-18T17:00:00Z
End: 2022-08-18T17:00:22.000Z
Location: BrightTALK

Learn more about your Gigamon products and features, how they work, and how you can optimize your usage to maximize network performance and security.

Let's be honest, deploying inline decryption — even with Gigamon — is not a walk in the park. But if you don't decrypt, you have a huge blind spot in your network. In this session, we'll show you best practices in deploying Inline SSL/TLS decryption based on our experience with over 1,000 deployments. Learn from our field experts how to deploy inline SSL with minimal pain and maximum gain. Then they’ll walk you through how to implement inline decryption using GigaVUE-FM Fabric Manager and cover topics like PII/compliance challenges and whether it makes sense to do centralized or per tool decryption.
____
This session originally aired during Gigamon Visualyze Boot Camp

Inline TLS/SSL Decryption: What We've Learned after 1,000+ Deployments

Come join us for a presentation and discussion about four real-world use cases for service provider networks, and Gigamon's metadata-based solutions for them.

- MEC: Reporting Mobile Edge Compute (MEC) latency by application, without a probe
- Security: Deep network security analysis for subscribers using unknown applications
- Performance: Optimize cell configuration through analysis of subscribers, applications, and QCI levels on 4G and 5G cells
- Analytics: Deflecting or preventing customer service calls using response-code extraction
____
This session originally aired during Gigamon Visualyze Boot Camp

Service Provider Metadata: Real World Solutions

Whether you need to optimize the efficiency of your existing tools or reduce future tool spending, Gigamon can show you how. Our traffic assessment tools identify opportunities for traffic optimization as well as generate a precise cost-savings forecast based on your network traffic. Join Gigamon experts to see how you can improve the utilization of existing tools by three times and reduce future lifetime tools spending by potentially millions of dollars.
____
This session originally aired during Gigamon Visualyze Boot Camp

How to Triple the Efficiency of Your Existing Tools

Acquiring cloud traffic for threat and performance monitoring is critical … but are you maintaining peak tool efficiency while still giving tools the precise data they need with minimal burden on teams? Our Field CTO will walk you through all the do’s and don’ts of acquiring hybrid cloud traffic. 

You’ll learn:
- How to acquire data from everywhere so you can monitor everything
- Ways to send traffic to existing tools without losing data fidelity
- The types of data needed to secure your hybrid cloud

We’ll also demo how to acquire traffic using GigaVUE-FM and a third-party automation solution like Terraform.

____
This session originally aired during Gigamon Visualyze Boot Camp

Hybrid Cloud Traffic Acquisition: The Do's and Don'ts

To eliminate East-West blind spots, you must be able to acquire and inspect Kubernetes container traffic. We’ll start by explaining the fundamentals of containers and then, with the help of Gigamon Distinguished Engineer, Naveed Cochinwala, dive deep into how Gigamon enables the analysis of container traffic flows using the newly released Universal Container Tap access function. This is a non-obtrusive way to access Kubernetes container traffic that will automatically scale with your deployments.
____
This session originally aired during Gigamon Visualyze Boot Camp

Overcoming Kubernetes Container Access and Scalability Challenges

Gigamon Application Metadata Intelligence (AMI) is a game-changer for our customers. We’ll explain why and show you step-by-step in GigaVUE- FM Fabric Manager how to configure and send selected application and protocol attributes to your observability and security tools. Using Dynatrace as the tool in this tutorial, we will demonstrate how application metadata enables detection of unsanctioned activities that would otherwise be invisible to your observability and security tools.
____
This session originally aired during Gigamon Visualyze Boot Camp

Why Gigamon Application Metadata Intelligence (AMI) is a Game-Changer

As increasingly complex applications are deployed on hybrid and multi-cloud infrastructures, NetOps and CloudOps teams must adapt traditional monitoring and management approaches to ensure performance, efficiency and, above all, security. 

Join Gigamon Field CTO, Jim Mandelbaum, and Martyn Crew from the Gigamon Product Marketing team as they discuss the challenges of gaining visibility into cloud infrastructures with a particular focus on East-West and Container traffic. What you’ll learn:

• How and why managing East-West traffic is different in the cloud than on-premises
• What are the unique challenges of gaining visibility into transient assets like containers?
• How do you prevent tools sprawl when every cloud platform has its own tools?

Please join us for this must-hear Tech Talk for anyone who needs to gain observability and control of their cloud infrastructure.

The New Frontier: East-West and Container Visibility in the Cloud

In today's hybrid and multi-cloud world, it’s more important than ever for infrastructure and security teams to get unified visibility across multiple cloud platforms and tools. In this session, you’ll learn how a deep observability pipeline provides unfettered visibility across your different environments. Plus, we’ll show how network-derived intelligence can augment metrics, events, logs, and traces (MELT), empowering observability tools with critical data to troubleshoot security and performance issues.
____
This session originally aired during Gigamon Visualyze Boot Camp

Deep Observability Pipeline: What it is and why it Matters

With 60% of CIOs and IT professionals expecting budget cuts since the pandemic, vendors are using a wide array of sales angles and wild claims of savings to get their foot in the door. How do you tell which are possible, and which are just…well…crazy. 

An amazing claim of self-funding ROI, or savings from reduced data storage or usage may be overblown or otherwise misleading—or it may be just as good as it sounds. The only way to tell the difference is to ask the right questions up front. Join Gigamon’s Field CTO, Jim Mandelbaum, and Product Marketing Director Martyn Crew to find out where these claims come from, and how to ask the pointed questions that reveal the underlying reality. 

In this Tech Talk, they will address these questions:
• Does reducing tools traffic really save you money? 
• Is it even possible to reduce tools traffic when data volumes are exploding? 
• Can consumption and data storage costs be reduced by smarter tools management? 
• Does metadata really reduce tools costs?

'You Don’t Need New Budget to Buy our Products' & Other Crazy Vendor Claims

Introducing the latest addition to GigaVUE HC Series that offers tremendous traffic processing power and capabilities to optimize and forward your network traffic, including GigaSMART applications. Learn how HC1-Plus can be used for various solutions, including datacenter visibility, network security, and Zero Trust architectures.
____
This session originally aired during Gigamon Visualyze Boot Camp

Introducing HC1-Plus: 2X the Performance with Half the Footprint

Level-up your knowledge of GigaVUE-FM Fabric Manager. In this session, you will learn more about Fabric Health Analytics, Topology Visualization, and other features of the GigaVUE-OS 6.0 release.

In addition to what’s new, you will learn about best practices and the top 3 things you should know about FM.
____
This session originally aired during Gigamon Visualyze Boot Camp

Gear Up with Supercharged Fabric Manager – What’s New

Is the thought that threat actors could be hiding under your bed, in your closet, or having a wild rumpus in your network keeping you up at night? Does the thought of bad guys hiding in plain sight make every day a terrible, horrible, no good, very bad day?

Even though your network should be a safe place, breaches are inevitable. Come along as we take a whimsical but serious approach to thinking about looking for evil-doers in your environment. You’ll learn how to find the signs of attacker activity “stumble-trip” style – by looking for clues and indicators beyond just detections and signatures. You’ll learn about the tools you’ll need to spot attacker behavior before they can wreak havoc.
____
This session originally aired during Gigamon Visualyze Boot Camp

We're Going on a Threat Hunt

Zero Trust not going as planned? Hear our CTOs explain why deep observability is foundational for a robust ZTA model.  

The science fiction writer, William Gibson, is well-known for saying, “The future is here. It is just not evenly distributed yet.” The future is already here with Zero Trust, yet many organizations still can’t see how they can implement it in practical terms. Gigamon is here to help you successfully adopt Zero Trust Cybersecurity Principles. Join our CTOs as they discuss Zero Trust Architecture and how you can turn the tables on threats by:

- Gaining deep observability into the entire network
- Implementing network segmentation without disruption
- Getting powerful capabilities to observe adversarial actions in your networks
____
This session originally aired during Gigamon Visualyze Boot Camp

The Pragmatic Approach to Zero Trust with Deep Observability

Originally aired on an ActualTech Media webcast.

The cloud is today’s #1 applications deployment platform; workforces are mobile and online 24/7; customers are in every corner of the world, and your business-critical data is flowing over increasingly complex, hybrid cloud infrastructures.

Faced with this reality, many organizations are developing agile, responsive security postures that re-use best practices, trusted security approaches, and tools alongside the latest cloud-based security thinking and technologies.

Join AWS cybersecurity expert Bret Gessner, Senior Cloud Channel Sales Engineer at Gigamon, and special guests from Presidio and AWS in a discussion moderated by Bret Gessner who has extensive experience in the public cloud architecture space.

As well as joining the provocative panel discussion, you will have the opportunity to learn how your peers are approaching this critical issue and learn from some of the best and brightest in the cybersecurity industry.

What You'll Learn:
 - Develop an agile, responsive security posture that covers your AWS infrastructure
 - Integrate existing security tools into this hybrid security framework which incorporates public cloud and on-premises appliances
 - Balance the pros and cons of evolutionary vs. revolutionary approaches
 - Procurement best practices for Gigamon

Optimizing and Securing Workloads in AWS

Based on closed-door discussions with over 100 IT executives, Gigamon has created a vision for the future of security and monitoring in the hybrid cloud world. It answers questions like why silos form between IT operations groups (dev, sec and net), why each team’s toolset further builds barriers, how security is the unifying force that’s changing the model, and how the network engineer/architect stays engaged and relevant with pure cloud projects.
 
At this session we will discuss and prove how deep observability pipeline provides a new level of visibility that lets you break down barriers between on-prem, public cloud and multi-cloud infrastructure.
 
We will also show how deep observability extracts intelligence from cloud network packets for your current SIEM and observability tools to analyze and report on. This is cutting edge innovation we can (almost) guarantee you have never seen before.

Deep Observability - 2 Ways It Transforms Cloud, Network and Security Operations

Cybercriminals increasingly use SSL/TLS sessions to hide, confident your security tools will neither inspect nor block their traffic. When that happens, SSL/TLS sessions can become a liability, inadvertently camouflaging malicious traffic.  

Gigamon wanted to understand how organizations are dealing with the risks of encryption, so we examined more than 1 trillion network flows from several dozen enterprises across a variety of industries. And now we’re going to present those findings to you. 

Join Chris Borales and Josh Day for this webinar. You’ll discover:  
 - Encryption trends that have emerged over the past 15 months 
 - The steps organizations are taking to get visibility into this data  
 - Decryption and traffic inspection tips you can use to protect your network

Encryption Trends: What we learned from analyzing 1 trillion network data flows

Threats are excellent at evading endpoint detection: hiding in network blind spots, operating using encrypted traffic and targeting cloud workloads. Attackers are dwelling on network up to 280 days on average, evading endpoint detecting and covering their tracks. Join Chris Borales as he discusses how network and security teams can leverage visibility in their security processes to combat today’s ransomware threats.

Agentless threat hunting: Stopping ransomware before the encryption happens

Security

Cloud

Threat Analysis

Threat Defence

Threat Detection

Threat Hunting

Cloud Security

Network Visibility

Cloud Visibility

Ransomware

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Agentless threat hunting: Stopping ransomware before the encryption happens

Presented by

About this talk

Gigamon Tech Talks