Name: Your Secret Weapon Against Cyber Threats
Start: 2023-05-30T17:00:00Z
End: 2023-05-30T17:00:29.000Z
Location: BrightTALK
Rating: 5

Cribl events provide an opportunity to learn, share knowledge, and talk shop. Our events focus on education and best practices for collecting, processing, routing and analyzing your data.

Cribl's mission is to unlock the value of  all your observability data, regardless of source or destination. Customers like Shutterfly, Aflac, TransUnion, FINRA, Circle K, Bayer, Sally Beauty, and NASA JPL trust Cribl to help them turn big data into better data.

When you create, collect, and store data, there comes a time when you need to find specific information. Think about it – when you're at your computer and need to locate a particular file, a tool like Grep is handy. So, why invest time and resources in collecting, centralizing, and indexing data just for a simple search?

But here's the twist – sometimes, collecting and indexing data is precisely what you need. While many effective data search tools exist, the fact that there are many tools doesn't mean there's no room for improvement.

Think of your toolbox at home – you probably have some excellent tools, but how often do you add a new one that offers something different? It typically doesn't replace anything; it just adds an extra capability. In this module, we'll explore your options for searching your data, helping you make the most of your data management toolbox.

A Deep Dive into Observability Search Tool Options

In this webinar, we present a compelling argument: It’s not about collecting ALL the data; it’s about collecting the RIGHT data. 

Legacy on-prem SIEM solutions and data lakes can hinder data collection for combating modern threats like ransomware. Join us as we discuss the game-changing power of combining Cribl observability pipelines with cloud-native SIEM, empowering you to route, filter, and mask log data strategically. Unleash the potential of improved insights, focusing solely on what truly matters. 

Our security experts from Cribl and Exabeam will delve into how to:

- Accelerate migration: Bid farewell to legacy SIEM and data lakes, embracing the future of cloud-native SIEM
- Optimize storage: Liberate valuable headroom, accommodating vast amounts of telemetry data
- Improve threat detection: Seamlessly integrate behavioral analytics, enriching your telemetry data for proactive threat detection

Speakers:
Michael Moreno, Sr. Product Marketing Manager, Exabeam
Desi-Gavis Hughson, Mgr., Solutions Marketing, Cribl
Jim Apger, Sr. Alliances Technology Engineer, Cribl

Using Observability Pipelines to Optimize Cloud-Native SIEM

Tune into this session and gain insights from our Observability Professor, Perry Correll, as he dives into the concept of Observability Pipelines. Imagine the possibilities of consolidating data collection and processing for various event types, including metrics, logs, and traces. By unifying data collection, you can minimize the need for redundant agents, duplicate instrumentation, and multiple collection systems. Don't miss the chance to learn more!

Mastering Observability Pipelines: Streamlining Data Collection and Analysis

Security teams are inundated with data from multiple sources in multiple formats, slowing down the ability to detect and respond to breaches and hunt for new threats. With multiple security tools deployed, sharing information across tools/teams becomes even more challenging.

Cribl simplifies and accelerates the process of ingesting, enriching and analyzing huge volumes of data, enabling investigators to identify specific data points and map them to corresponding indicators of compromise (IOCs).

Join this webinar and learn how to accelerate cybersecurity investigations by:
- Addressing timestamp challenges to ensure accurate investigative timelines and ensure accurate IP geolocation
- Reducing reliance on TAs and configuration files to minimize low-value, repetitive work for your team
- Enriching data with geoIP functions and known intelligence, giving investigators better, more relevant data to search through or simply pointing investigators in a better direction
- Enabling investigators to see the right formats and types of data faster, with the right context, in their preferred analytical tool

Accelerating Detection and Response During Cyber Events

In this module, Professor Correll discusses Observability Components and Tools. This segment touches on agents and sources, with the general principle being that each source typically associates with one or more dedicated agents. Additionally, the module will explore the significance of logging and monitoring as crucial elements for sustaining peak application performance. The module also addresses topics such as analytics, infrastructure, and concluding with a focus on pipelines and integration.

Exploring the Essentials: A Guide to Observability Components and Tools

Data is the foundation of our Observability journey. Often when talking about O11Y, you may think of the 3 pillars – metrics, traces, and logs. Within this module, Professor Correll will discuss these and the various categories of data that are both generated and gathered. Additionally, the module will examine how a single dataset can hold distinct levels of significance across various departments.

Unblocking Insights: Navigating the Depths of Observability Data

In this next module of our Observability Professor series, Perry dives into the realm of observability and focuses on the investigators – those who seek specific insights. Before digging into data collection, pipelines, and search mechanisms, we need to pinpoint exactly what we're searching for. This session will explore the "who" and the "why" behind these inquiries because, in most organizations, the data collected may be similar, but the emphasis placed on different aspects and the tools required can vary significantly. It's all about tailoring observability to your unique needs.

O11Y: Identifying the Investigators

IT and security professionals excel at resolving complex issues and  the daily struggles of securing observability and security data, but they often face challenges in securing funding for these endeavors. 

To get the tips you need to successfully plan and create your planning and budget proposal for next year, join our IT and Security experts to help you:

- Create your budget proposal to tell a story
- Map technical requirements to business objectives
- Explain to an executive why they should fund your project
- Address basic budgeting and how to present your data

Join this webinar and get the planning and budget assets we’ll demo live to help you on your budgeting journey.

Guide to Securing Project Funding and Yearly Budget Planning

Join the O11Y Professor, Perry Correll, and Ed Bailey as they discuss Observability and why it matters to your business. In this module, the two will talk through if Observability is a tool or a concept, how it plays into network resilience / reliability and if these concepts are different for various IT teams.

The Business Value of Observability

Are you tired of your security data being siloed? Do you want to transform your isolated security data silos into a cohesive ecosystem of tools and controls?

If so, join this webinar to learn about Cybersecurity Mesh Architecture (CSMA). CSMA is a concept introduced by Gartner that aims to transform isolated security data silos into a cohesive ecosystem of tools and controls to protect the modern enterprise. The strategy focuses on integrating various security tools by consolidating data sources and using high-quality enrichment and data normalization to enable more effective collaboration and correlation.

In this webinar, we will discuss how implementing a CSMA offers several benefits, including:

- Enhanced detection capabilities through complete access to data
- Increased response efficiency through access to higher-quality data
- Consistent management of policies, postures, and playbooks
- Adaptive, granular access controls

Unleashing the Power of Cyber Security Mesh

Stream is the best way to get multiple data formats into your analytics tools. See how by using Cribl Stream as your universal receiver to collect from any observability data source – you can receive data from all your agents and push based sources, schedule batch collection from multiple endpoints and APIs, as well as recall data from low cost storage.

Join this Stream demo and we’ll show you how to:

- Route data from any source to any destination, or send the same data to multiple destinations
- Eliminate duplicate fields, null values, and reduce log volume to control costs and improve system performance
- Shape data into metrics for analysis or enrich logs with GeoIP info, threat intel, and more for actionable insights

Demo: Cribl Stream

Class is back in session! Join our Observability Professor, Perry Correll,  as he unpacks the fundamentals of Observability, Telemetry and Security Data analysis in this 10-part webinar series. Perry will delve into the challenges posed by the diverse definitions and agendas surrounding observability, and will equip you with the knowledge to critically analyze and navigate this crucial concept. 

Through a series of hyper-focused, interactive modules, we'll explore observability's core principles, its relevance in IT environments, and the transformative power it holds.

The Professor's Guide to Data Analysis: Observability, Telemetry, and Security

Join this webinar to hear Edward Jones’ Threat Vulnerability and Management leaders Matthew Found and Christopher Simpson's first-hand account and lessons learned from their multi-year journey to transform the SOC at Edward Jones.

With an aging SIEM and a new team ready to modernize the SOC, the duo set out to re-imagine what their security architecture could look like. They knew they wanted a SIEM in the cloud for flexibility, scale, and ease of management. They also knew this would be a multi-year journey, requiring a reliable, supported way to multiplex any data input to any destination, in the format required by the audience who will eventually consume the data. 

Attend this webinar and learn:
- Which technology partners the team choose for their SOC of the future
- What’s working so far and what’s coming next
- What to watch out for on your own SOC reinvigoration journey

Modernizing Our SIEM Strategy at Edward Jones

Managing a multicloud environment can be a daunting task, it requires dealing with different cloud providers each with its own set of tools and interfaces. Having to integrate and coordinate many different systems together is anything but simple.

Between high egress charges, wasteful data overrun, and silos between cloud platforms, organizations need to figure out a way to better way to embrace their multicloud landscape.

Thankfully, behind every successful multicloud strategy is a robust observability plan. Watch this webinar if you’re hoping to reduce cloud spend, better understand the health and performance of systems, optimize resources, and keep data secure in the cloud.

Multicloud: The Good, The Bad, The Observable

Migrating your workloads and data to the cloud can mean huge pay-offs for your organization - optimized performance, reduced management overhead, and significant cost savings on data centers. But the road to the cloud is not always easy. Organizations struggle with never-ending data growth. Luckily Cribl can help!

Join us to learn how a cloud-based observability pipeline can help make your data more manageable so you can easily clean up data, get it where it needs to be, work more efficiently, and ultimately gain the confidence needed to adopt the cloud, on time and under budget. Attendees will learn:

- Benefits of using an observability pipeline in the cloud
- How to get started with a new Cribl.Cloud account
- What comes with Cribl’s suite of cloud products

Getting Started with an Observability Pipeline in the Cloud

Ready to revolutionize your security data management? Corelight, known for its comprehensive security evidence, pairs seamlessly with Cribl's ability to enrich and efficiently route this data to any platform without straining your SIEM or budget. 

Join this webinar to learn how the joint solution expands visibility, bolsters detection, and accelerates investigations while maintaining data fidelity. We’ll also delve into the new Corelight Pack for Cribl, which streamlines and optimizes data processing, offering flexible capabilities for enhancing, routing, and reducing Corelight data.

Attendees will learn how to:
- Provide a single comprehensive source of network telemetry for Amazon Security Lake, CrowdStrike Falcon® LogScale, Splunk Enterprise Security, and other destinations
- Enable real-time threat detection and seamless ingestion, normalization, and enrichment of security data
- Enhance security operations with without burdening SIEM resources

Amplifying Security Insights

Join us to see how Cribl is enhancing their entire suite of products, including Search, Edge, and Stream, in the latest Summer release. These enhancements will enable additional teams and users to work together across the entire portfolio through enhanced security and access control for customers, while providing data and insights on-demand.

Level-Up Your Security & Control

Context is king–that’s why optimizing your data, enriching it in the stream, and having the ability to see it and tweak it before sending it into analytics tools or storage can be a game changer. When you are reviewing or correlating the data to troubleshoot, run investigations and respond, think how much time your team can save by having the right geolocation, asset, timestamp and even threat intel already associated with the log data?

We had a fun time making this work–and you can too. We’ll show how you can set up and use a Redis cache along with Cribl Stream to enhance your data before sending it to its destination. We’ll cover how we imported a 34 million row CSV file into Redis and use the Redis function to match fields to records to add a new field that is used for faster identification of data once it is in Splunk.

Enrichment: Better Data In, Better Response Times Out

In today's digital world, organizations face an ever-increasing number of security threats and cyberattacks that can lead to significant data breaches and downtime. To stay ahead of the curve, it's essential to build a resilient cybersecurity strategy that enables rapid detection, response, and recovery from such incidents.

Join this webinar and hear our experts talk about helping organizations support their cyber resiliency efforts, including how to:

- Enrich data in real time with threat intel, GeoIP, asset information and more for faster threat response
- Leverage low-cost object storage to cut costs
- Relieve pressure on your SIEM with efficient data routing for better performance when it counts
- Use Cribl Stream’s Replay feature for streamlined investigation and response

Your Secret Weapon Against Cyber Threats

Cyber Attacks

DevOps

SecOps

ITOps

SIEM

Security

Security Awareness

Data Breach

Cyber Resilience

Observability

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Your Secret Weapon Against Cyber Threats

Presented by

About this talk

More from this channel