Name: Forrester & Expel: Proactive Defense in Action- Evolving Threat Detection & Hunting to Stay Ahead of Threats
Start: 2025-05-14T16:54:00Z
End: 2025-05-14T16:54:38.000Z
Location: BrightTALK
Rating: 5

Expel helps companies of all shapes and sizes minimize risk and strengthen their security postures. Expel’s leading managed detection and response (MDR) services protect organizations by augmenting existing programs and providing detections and automation that drive world-class results, with full transparency in everything we do.

Learn more about us at https://expel.com.


A fast, candid look at the rapidly shifting managed detection and response vendor landscape. From the surge of AI SOC startups to platformization, consolidation, and the changing expectations of security teams, this episode breaks down what’s real, what’s hype, and what managed detection and response vendors need to deliver next.

The Nerdy 30 | The state of the managed detection and response vendor market

Jason Rebholz, Co-Founder and CEO at Evoke Security, and Joe Marchetti, VP of Cybersecurity at CoStar Group, know a thing or two about cyber burnout or, as we call it, "cyber strain." So they joined us on The Nerdy 30, Expel's LinkedIn Live series on all things wonderfully nerdy, to share some wisdom on how to overcome it—with AI. If you’re looking for real-world use cases that make security work more sustainable, this is a session you won’t want to miss.

The Nerdy 30 | How AI can help overcome cyber burnout

Expel’s SOC leaders, Ray Pugh III and Ben Brigida, break down what it really takes to measure a Security Operations Center (SOC). You’ll learn how to spot data quality gaps, understand how inputs shape outputs, and balance efficiency with quality. Whether you're running a SOC or partnering with one, this session will help you measure what matters most.

The Nerdy 30 | How to measure SOC efficiency

In this session, Rusty Newton, Principal Security Solutions Engineer at Expel, will dive into the art and science of learning. Rusty, a true student of studying, will share his passion for mastering the learning process, offering insights into different learning formats, techniques, and strategies. He’ll guide you step by step from the moment you decide to pursue a security certification all the way to exam day. You'll learn how to maintain focus, optimize your study habits, and, ultimately, ace those certification exams.

The Nerdy 30 | How to study for (and ace) security certification exams

Mergers and acquisitions can fuel growth—but they also create prime opportunities for cyber threats. Financial services organizations must act fast to secure newly acquired entities, maintain compliance, and prevent cyber risks from jeopardizing the deal.

In this webinar, security leaders will:

> Discover how to smoothly partner with legal and other key teams to tackle security challenges together
> Get practical steps to find and fix security weak spots at every stage—from due diligence to integration
> Learn how to gain clear visibility and rapid response across your newly merged tech environments

How to protect M&A in FinServ: a conversation with Visa and Expel

Get ready for an exclusive, no-holds-barred conversation between two cybersecurity pioneers: Mandiant founder Kevin Mandia, and Expel’s CEO, David “merk” Merkel.

With decades of experience—and a friendship that spans just as long—Kevin and merk will dive deep into the latest cyber threats, leadership challenges, and what it takes to stay ahead in today’s fast-changing landscape.

Prepare to walk away with:

- Exclusive insights into emerging cyber threats
- Proven leadership strategies from decades of experience and collaboration
- Actionable takeaways to strengthen your defense

Mandia Unplugged: The Future of Cyber Defense

Tired of drowning in data and skyrocketing storage costs?

Legacy SIEMs often push security teams into overwhelming, expensive storage habits that don’t always deliver results. But it doesn’t have to be that way.

In this webinar, you’ll learn how to:

-Evaluate your current data storage practices to identify areas for improvement
-Ensure your data strategy and detection and response strategy are complementary
-Design a data strategy that’s built to handle complexities seen in modern multi-cloud and hybrid environments

Watch the recording for a fresh take on managing your security data—one that keeps your storage lean, your detections sharp, and your team ready for whatever comes next.

Security data done right: breaking free from bad storage habits

Cybersecurity is a demanding field, whether you’re a SOC analyst on the front lines or a CISO constantly on call.

The relentless threat landscape, pressure for perfection, and tightening budgets add to the stress, contributing to widespread burnout across all levels of the industry.

In this webinar, we delve into cybersecurity burnout and share practical tips and strategies, from our recent ebook, to help you and your teams truly disconnect and recharge.

We discuss how to:
> Recognize the signs of cybersecurity burnout in yourself and your team.
> Learn effective ways to combat burnout, from quick fixes to long-term strategies.
> Understand the impact of burnout at every level, including for CISOs.

Conversations on combating security team burnout

Securing your cloud environment is like a high-stakes chess match, where every move can make or break your success.

In this webinar, we discuss how you can stay a few moves ahead and provide techniques and strategies for:

> Harnessing historical data and past learnings to reduce risk
> Prioritizing the most important and time-sensitive threats
> Managing vulnerabilities from misconfigurations and human errors
> Building a resilient cloud environment

You’ll walk away from this webinar with a playbook for streamlining operations, strengthening defenses, and outmaneuvering cloud threats in real time.

Watch the recording for insights to help you secure the cloud with confidence—one strategic move at a time.

Winning your cybersecurity chess match

Securing your cloud investment is complex. In this session, you’ll hear from two of Expel’s customers, who are leading the charge in securing their cloud investments by leveraging Wiz’s advanced cloud visibility and security capabilities alongside Expel’s Managed Detection and Response (MDR) to achieve unparalleled protection and operational efficiency in AWS.

You’ll learn how Expel customers benefit from:

> Advanced cloud threat detection and response: Learn how Wiz’s continuous security posture monitoring identifies and mitigates risks in AWS, bolstered by Expel MDR’s proactive threat detection and response capabilities.
> Operational excellence: Discover how joint customers optimize their AWS security operations, streamline incident response, and scale their teams.
> Comprehensive cloud security coverage: Explore the seamless integration of Wiz’s cloud security insights with Expel MDR’s expertise in managing cloud threat detection and response actions –providing a comprehensive defense against cloud cyber threats.

Securing Your Cloud Investment: An interactive panel with Expel, AWS, and Wiz

Cybersecurity is a demanding field, whether you’re a SOC analyst on the front lines or a CISO constantly on call.

The relentless threat landscape, pressure for perfection, and tightening budgets add to the stress, contributing to widespread burnout across all levels of the industry.

Join us for this webinar as we delve into cybersecurity burnout and share practical tips and strategies, from our recent ebook, to help you and your teams truly disconnect and recharge.

We’ll discuss how to

Recognize the signs of cybersecurity burnout in yourself and your team.
Learn effective ways to combat burnout, from quick fixes to long-term strategies.
Understand the impact of burnout at every level, including for CISOs.
Don’t miss this opportunity to get the tools you need to help manage stress and maintain a healthier work-life balance in our challenging industry.

The Expel Quarterly Threat Report (QTR) for Q1 2024 is back with a breakdown of the trends, notable new behaviors, and unusual attacks our security operations center (SOC) team saw over the past quarter. Except this time, we made it even easier for busy operators to digest our analysis with a new blog series.
Join Ben Brigida, Senior Director, SOC Operations, and Aaron Walton, Threat Intel Analyst, for a conversation on the most interesting (and surprising) takeaways from this quarter. From the way we’re seeing attackers leverage AI, to the criticality of patching severe vulnerabilities, we’ll give you a taste of what to expect in our QTR blog series.
No matter the format, our goal with these reports remains the same: by sharing how attackers got in, and how we stopped them, we’ll translate the security events we detect and remediate into strategy for your organization.

Expel Q1 Quarterly Threat Report: threats, trends, and protecting your org

Building a security operations center (SOC) isn’t as simple as hiring a team and getting to work. Even if you ignore financial factors such as labor shortages, limited budgets, and macroeconomics, you’re still navigating a landscape that’s growing exponentially, and keeping up is the baseline for survival. 

Successfully running an efficient SOC that’s also built for growth is no easy feat. 
Join experts from Expel and Enterprise Strategy Group (ESG) as they discuss:

- Common misconceptions about building and maintaining an in-house SOC, and where orgs often get stuck
- What your peers expect of their managed detection and response (MDR) providers
- How ESG quantifies the value of a provider through their economic validation process and the results from their evaluation of Expel
- The outcomes and value an MDR provider like Expel can bring to your security program

How working with an MDR provider can advance security programs and lower costs

Ever wondered what defines cybersecurity effectiveness? Is it defending against at attack, the ability to mitigate attacks in the first place, or both?

Unsure of how your peers see it?

Listen in as Dave Shackleford, SANS Institute, and Greg Notch, CISO at Expel, discuss the latest SANS report on frameworks, tools, and other techniques that orgs prefer to use to measure and assess their security programs.

In this webinar, you will learn about:

- What frameworks are used to define, measure, and assess SOC functions (hint, NIST CSF is preferred by 74% of respondents)
- The KPIs orgs are using to measure SOC performance
- If, when, and how training and compliance policies are used to maintain cybersecurity
- Cybersecurity maturity level self-assessment, hows and whys

Watch now to learn more about how your peers are benchmarking and measuring cybersecurity operations.

The Journey to Operational Security Effectiveness and Maturity

Hear from Expel cybersecurity experts Daniel Clayton, VP of Security Operations, and Aaron Walton, Threat Intelligence Analyst, as they guide you through four of the biggest threats from Expel’s annual report. They share what we learned from 2023, where they expect to see things change or continue in 2024, and how to protect your attack surfaces against identity-based, cloud infrastructure, malware, and phishing threats.

Annual Threat Report: Key takeaways from Expel Annual Threat Report 2024

Timely remediation: It’s critical to responding to active threats in an environment. Knowing when (and when not) to apply automation is equally important. Given the speed at which threat actors can progress through the attack lifecycle, configuring automated remediation steps can go a long way. Hear how Expel approaches incident response and puts auto-remediation into practice.

The steps to sensible auto-remediation

Staying ahead of cyber threats requires more than just reactive security— it requires a proactive and evolving approach for both threat detection and hunting. Hear firsthand from Jeff Pollard, VP & Principal Analyst at Forrester, and Ansh Patnaik, VP of Product Management at Expel, on what threat hunting and detection engineering trends they're observing enterprises using, plus how how threat hunting works in parallel to detection.

Forrester & Expel: Proactive Defense in Action- Evolving Threat Detection & Hunting to Stay Ahead of Threats

Threat Hunting

Threat Detection

Threat Defence

Cyber Attacks

Security Automation

Cyber Security

Security Operations

Attack Surface

Threat Intelligence

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Forrester & Expel: Proactive Defense in Action- Evolving Threat Detection & Hunting to Stay Ahead of Threats

Presented by

About this talk

Expel MDR