Name: Detecting Advanced Threats with Encrypted Traffic Analysis (ETA)
Start: 2022-01-18T18:50:00Z
End: 2022-01-18T18:50:23.000Z
Location: BrightTALK
Rating: 0

Today, the network is an underlying foundation of how organizations operate. LiveAction provides end-to-end visibility of network and application performance with unmatched breadth and depth from a single pane of glass. We equip teams to address the challenges of the modern everchanging network. Tune in for best practices, how-to's, and industry news related to network monitoring, public cloud, application performance, and trends in tech.

LiveAction is an enterprise software company that simplifies the network for IT organizations to deliver continuous insight, service assurance, and precise control of their network infrastructure. Our leading network performance and analytics platform, LiveNX, offers a deep understanding of networks and applies situational awareness to accelerate employee productivity and boost customer satisfaction.   LiveAction originated from a project for the U.S. Department of Defense. Its technology was used by the Marines as the primary network management platform to troubleshoot and support communication networks between the battlefield and headquarters.   Today, LiveAction is used by more than 750 enterprise customers. Our patented technology has proven to diagnose and repair network issues up to 20 times faster, configure QoS policies up to 5 times faster, and improve network operations productivity by upwards of 100 percent.

Unmatched Network Visibility with LiveAction

Unimpeded network performance is the core aim for NetOps activities, one of which is troubleshooting network performance issues by using packet data and network flows. 21% of network managers say tool fragmentation is one of the biggest challenges they have with network operations. When flow and packet data are aggregated and analyzed, network insights can lead teams to better, faster solutions.

In this 20-minute session, a LiveAction expert will guide you on the path forward to minimize the impact of poor application and network performance. 

Join us to learn how you can:

• Take advantage of every data source possible: NetFlow, sFlow, IPFIX, SNMP, Packet data, APIs
• Aggregate, analyze, store and present data from an all-in-one dashboard
• Generate flow data from packets and add visibility where it wasn’t possible before
• Participate in a Q&A session

Prevention Techniques & Best Practices to Dodge Network Congestion

Prevention Techniques & Best Practices to Dodge Network Congestion - EMEA

Determining the scope and impact of a compromise is more complex than ever before. The cost of security analysts is increasingly more expensive, and the overwhelming volume of duplicate alerts and false positives compounds the challenge SecOps teams face. In addition, encrypted network traffic further complicates the investigation.

Join us for part 3 of our Detecting Advanced Threats webinar series. We’ll take you through everything you need to know to detect advanced threat actors and uncover malicious activity hiding inside encrypted traffic. 

This episode will detail the importance of event correlation prioritized workflows for security operations. Learn how incident response and post-eradication remediation can be improved leveraging:
• Asset Risk & Threat Assessment Scoring for Response Prioritization
• Automated Event Correlation
• Casebook Breach Tracking

Detecting Advanced Threats with Event Correlation

Packets don’t lie. If you’re a network engineer, you’ve probably heard it more times than you can count, and maybe even said it yourself. There are times when we need to know exactly what happened on the network, and the packets are the only record of exactly what happened. Packets represent the exact transmission of data, including encoding to make sure the data haven’t been altered. If you have the packets, you know exactly what happened. But packets are fleeting – they travel from a source to a destination and are lost forever – unless you record the packet data. 

In this 20-minute session, a LiveAction expert will discuss when, how, and why you want to record network packets, providing concrete examples of what is possible and the secrets that can be revealed. 

Join us to learn how you can:

• Capture network packets at line rate
• Optimize your capture points for maximum effectiveness
• Leverage packets for network monitoring, troubleshooting, and security investigations
• Gain insights that can only be revealed from having the packets themselves

Packets Don't Lie

Packets Don't Lie - EMEA

Many managed service providers offer multiple SD-WAN solutions with numerous legacy network vendors. Yet they often lack a holistic reporting solution for customers. What if there was a solution that could bring all reporting together into a holistic solution while generating new revenue streams?

Maybe you have already deployed our LiveSP solution and want to leverage new functionality to scale revenue?

Join us for this Service Provider focused webinar, where we’ll take you through everything you need to know for Network Performance Monitoring and Diagnostics (NPMD) as a service, End to End visibility, and the latest LiveSP features.

In this webinar you will:
· Get an overall presentation of NPMD as a Service
· Learn how to facilitate your customer’s migration from legacy WAN to SD-WAN
· Understand how to leverage collected data for smart marketing analysis
· Review the new 21.1 LiveSP features

Create Profitable Managed Services with LiveAction & the Latest LiveSP Features

survey conducted by Linkedin found that 28% of the respondents found their voice conferencing platforms inadequate. Real-time transcription was one of the top 4 reasons given. VoIP has been around since 1995, so why can’t we seem to get it right? 
 
VoIP is arguably the most unique traffic on your network. The real-time nature of voice makes this traffic far more sensitive to common network issues, like latency and dropped packets due to network congestion. While TCP/IP can usually recover from these conditions, in most cases VoIP cannot, leading to a poor user experience. Do you know what distinguishes “good” from “bad” VoIP traffic? Do you know how to spot common VoIP problems in Flow data? In packet data? 
 
In this 20-minute session, a LiveAction expert will dissect VoIP at both the Flow and packet level, demonstrating how to quickly isolate and address VoIP quality issues.  
 
Join us to learn how you can: 
 
• Capture and analyze VoIP traffic for both Flow and packet analysis 
• Spot key performance indicators for VoIP 
• Learn what typical VoIP traffic looks like at both the Flow and packet level 
• Gain immediate insight into the analysis of VoIP traffic so you can shift from a reactive to a proactive approach

Journey of a VoIP/Video Packet

A survey conducted by Linkedin found that 28% of the respondents found their voice conferencing platforms inadequate. Real-time transcription was one of the top 4 reasons given. VoIP has been around since 1995, so why can’t we seem to get it right? 
 
VoIP is arguably the most unique traffic on your network. The real-time nature of voice makes this traffic far more sensitive to common network issues, like latency and dropped packets due to network congestion. While TCP/IP can usually recover from these conditions, in most cases VoIP cannot, leading to a poor user experience. Do you know what distinguishes “good” from “bad” VoIP traffic? Do you know how to spot common VoIP problems in Flow data? In packet data? 
 
In this 20-minute session, a LiveAction expert will dissect VoIP at both the Flow and packet level, demonstrating how to quickly isolate and address VoIP quality issues.  
 
Join us to learn how you can: 
 
• Capture and analyze VoIP traffic for both Flow and packet analysis 
• Spot key performance indicators for VoIP 
• Learn what typical VoIP traffic looks like at both the Flow and packet level 
• Gain immediate insight into the analysis of VoIP traffic so you can shift from a reactive to a proactive approach

Journey of a VoIP/Video Packet - EMEA

Many of the headline cyber attacks are still occurring against on-premise systems. Despite organizations moving production workloads to the cloud, attackers are leveraging phishing and stolen credentials for remote access into organizations, and they will get in. Future proofing your encrypted traffic strategy should include ETA visibility from the core, to the edge, and in multi-cloud, to identify threats actively operating inside your environment.

Join us for part 2 of our Detecting Advanced Threats webinar series, where we’ll take you through everything you need to know for detecting advanced threat actors and uncovering malicious activity hiding inside encrypted traffic. 

This episode will detail the importance of advanced behavioral analysis to identify threat actor activity operating inside your network. With major attacks, threat actors operate inside the network for a period of time before, sometimes weeks, before successfully executing their attack. Learn how behavioral analysis can be applied to identity threat activity such as:

o Reconnaissance
o Lateral Movement
o Data Staging
o Data Exfiltration

Detecting Advanced Threats – The Active Threat Inside Your Network

Many of the headline cyber attacks are still occurring against on-premise systems. Despite organizations moving production workloads to the cloud, attackers are leveraging phishing and stolen credentials for remote access into organizations, and they will get in. Future proofing your encrypted traffic strategy should include ETA visibility from the core, to the edge, and in multi-cloud, to identify threats actively operating inside your environment.

Join us for part 2 of our Detecting Advanced Threats webinar series, where we’ll take you through everything you need to know for detecting advanced threat actors and uncovering malicious activity hiding inside encrypted traffic. 

This episode will detail the importance of advanced behavioral analysis to identify threat actor activity operating inside your network. With major attacks, threat actors operate inside the network for a period of time before, sometimes weeks, before successfully executing their attack. Learn how behavioral analysis can be applied to identity threat activity such as:

o Reconnaissance
o	Lateral Movement
o	Data Staging
o	Data Exfiltrationration

Detecting Advanced Threats – The Active Threat Inside Your Network - EMEA

Are your users reporting that a specific application (or the internet in general) is slow, intermittent, or not functioning at all? Is the network being blamed for poor application design? Are you lacking the tools to troubleshoot and quickly repair the situation? Are critical applications like VoIP and video, which  are highly sensitive to jitter, packet loss, and latency, generating too many support tickets? 

In this 20-minute session, a LiveAction expert will share some cool tips to assess and improve the health of your network and ensure that both the network and critical apps stay up and running.

Join us to learn how you can:

• Capture traffic and quickly diagnose the problem
• Discover what types of problems are happening, whether they are network issues like TCP window size, or application related issues like HTTP errors or slow response times 
• Optimize alerting by clicking into alerts and report on VoIP issues and drilldown to the path analysis
• Gain immediate insight into root cause and how to quickly resolve problems

Everyone’s Online – Solve Voice and Video Issues Fast

Everyone’s Online – Solve Voice and Video Issues Fast – EMEA

Threat actors have moved operations inside encrypted traffic to evade detection. For example, 91.5% of malware arrived over encrypted traffic in Q2’21. Encrypted communication guarantees data confidentially; however, it has created a blind spot for network defenders. As a result, attackers are ever-present, ready to compromise your organization. It’s time for a new approach to detect advanced threats, a future-proofed security detection strategy unfazed by encryption. 

Join us for part 1 of our Detecting Advanced Threats webinar series, where we’ll take you through everything you need to know for detecting advanced threat actors and uncovering malicious activity hiding inside encrypted traffic. 

This episode will detail the challenges associated with threat detection and how to solve those challenges with Encrypted Traffic Analysis (ETA). Learn How:
- Metadata from Deep packet dynamics is used to identify and classify network traffic
- Advanced levels of Encrypted Traffic Analysis can future-proof your security strategy
- AI / ML is applied to identify advanced threat tactics, such as:
o Phishing Site Detection
o Hands-on-Keyboard - Threat Actor Keystroke Detection
o Unauthorized Remote Access – RDP/SSH
o Unexpected Encrypted/Plaintext Traffic

Detecting Advanced Threats with Encrypted Traffic Analysis (ETA)

Detecting Advanced Threats with Encrypted Traffic Analysis (ETA) - EMEA

Are you looking to optimize your agency's entire hybrid IT environment? Explore how together with LiveAction, Carahsoft, and Presidio Federal you can manage complex on-premise to public cloud networks with unified actionable data. Our experts will share some cloud monitoring best practices and key tips to optimizing cloud performance.

Bridging the Gap for Federal Agencies from the Network into the Cloud

SD-WAN has emerged as a game changer for distributed networks to address the demands of digital transformation happening across many organizations today. To support emerging architectures without compromising user experience or straining resources, NetOps teams need clear migration paths that de-risk the adoption and governance of the latest technologies. 

And it doesn’t stop after planning and implementation are complete. The ongoing day-to-day operations need to focus on continual improvements and best practices.

Join us for part 3 of our SD-WAN webinar series, where we’ll take you through everything you need to know for ongoing SD-WAN operations and monitoring. 

In this episode, we’ll share best practices for Day 2 SD-WAN operations. Learn how to:
- Monitor bandwidth and visualize path control so you can manage performance and mitigate problems before they affect users
- Use reporting on business applications to manage and optimize voice and video communications
- Track performance across the SD-WAN fabric
- Leverage alerting to manage the network

Best Practices to Optimize Your SD-WAN Performance

SD-WAN has emerged as a game changer for distributed networks to address the demands of digital transformation happening across many organizations today. To support emerging architectures without compromising user experience or straining resources, NetOps teams need clear migration paths that de-risk the adoption and governance of the latest technologies. 

And it doesn’t stop after planning and implementation are complete. The ongoing day-to-day operations need to focus on continual improvements and best practices.

Join us for part 3 of our SD-WAN webinar series, where we’ll take you through everything you need to know for ongoing SD-WAN operations and monitoring. 

In this episode, we’ll share best practices for Day 2 SD-WAN operations. Learn how to:
- Monitor bandwidth and visualize path control so you can manage performance and mitigate problems before they affect users
- Use reporting on business applications to manage and optimize voice and video communications
- Track performance across the SD-WAN fabric
-	Leverage alerting to manage the network

This Part 1 episode of our Detecting Advanced Threats webinar series will take you through everything you need to know for detecting advanced threat actors and uncovering malicious activity hiding inside encrypted traffic.

This episode will detail the challenges associated with threat detection and how to solve those challenges with Encrypted Traffic Analysis (ETA). You will learn: 
• Metadata from Deep packet dynamics is used to identify and classify network traffic
• Advanced levels of Encrypted Traffic Analysis can future-proof your security strategy
•	AI / ML is applied to identify advanced threat tactics, such as: 
o	Phishing Site Detection
o	Hands-on-Keyboard - Threat Actor Keystroke Detection
o	Unauthorized Remote Access – RDP/SSH
o	Unexpected Encrypted/Plaintext Traffic

SecOps

Security

Security Analysis

Security Analytics

Phishing

Encryption

Threat Detection

Threat Analysis

Information Security

Cyber Security

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Detecting Advanced Threats with Encrypted Traffic Analysis (ETA)

Presented by

About this talk

More from this channel