Name: Unleashing the Power of Cyber Security Mesh
Start: 2023-09-21T17:00:00Z
End: 2023-09-21T17:00:28.000Z
Location: BrightTALK
Rating: 0

Cribl events provide an opportunity to learn, share knowledge, and talk shop. Our events focus on education and best practices for collecting, processing, routing and analyzing your data.

Cribl's mission is to unlock the value of  all your observability data, regardless of source or destination. Customers like Shutterfly, Aflac, TransUnion, FINRA, Circle K, Bayer, Sally Beauty, and NASA JPL trust Cribl to help them turn big data into better data.

Data silos created by normalized data stores creates a level of tool lock-in that not only limits choice for the customer but threatens business continuity in the case of big changes in tool support or questionable future support (as is the case with any large acquisition!).

IT and Security engineers need more control of their data to increase resilience and provide more options for analysis to make decisions faster with better data.

Join us to see what you need data independence so:
- You control ALL your data - no more data silos that force compromise between cost, flexibility, and control
- You gain the freedom to reduce and enrich your data if you choose - separate out signal from noise and enrich with context in real-time
- You gain the freedom to choose to store and replay long term in the most cost effective storage with the ability to recall data for later analysis

It's time for your data independence day.

Escaping Data Lock-In Amidst Industry Takeover

Perry Correll, Principal Technical Content Manager is joined by Felicia Dorng, Senior Product Marketing Manager, as they discuss how observability can help optimize performance, costs, and security in your multicloud environment.

Observability and the Cloud(s)

Join this module to hear Professor Correll explore the world of Application Performance Management (APM). In this session he covers gaining insights into your applications and understanding how your infrastructure and various teams work together to ensure a seamless service. When issues emerge, solutions are vital. Discover how the use of APM tools from different vendors can empower you with the knowledge needed to preempt major problems.

Efficiency Through Observability: Elevating Application Management

Join Ed Bailey and TAQA Group's Andrew Ochse as they discuss the diverse services that TAQA offers, look at the challenges with scaling and staffing, and explore in great detail the solutions to classic problems such as insufficient funding, poor data quality, and slow connections linking global sites to their Security Operations Center (SOC).

Tackling Staffing, Funding and Data Challenges

In this module, our experts address the critical convergence of observability and security. Perry and Jackie answer whether there's a distinction, dive into security teams' challenges and data needs, and explain why an observability pipeline can boost your security measures.

You’ll leave this session knowing:
- Observability vs. Security: Are they distinct?
- Security Team Challenges: What keeps them up at night?
- Cyber Resilience: What is it?
- The Power of Observability: How it enhances security.

Observability and Security in Focus: Strengthening Your Digital Defenses

Your SIEM is a powerful and essential investment, but it's not an analytics or data storage solution; it's a tool built for detection and response, not analytics and retention.

During this webinar, Jackie and Ed embark on a journey into the dark depths of SIEM strategies. They'll reveal why stashing away your data isn't enough; you need to be able to unearth it, and exorcise any data demons, when the time comes. 

During this webinar, you'll discover:
- Why data accessibility and searchability are the secret ingredients for a successful SIEM strategy
- How to disentangle your web of detection and analysis, while seamlessly managing data retention away from your security cauldron
- How to break free from the chains of vendor lock-in and technology limitations by adopting an open, flexible architecture

Cleaning the Skeletons Out of Your SIEM

When you create, collect, and store data, there comes a time when you need to find specific information. Think about it – when you're at your computer and need to locate a particular file, a tool like Grep is handy. So, why invest time and resources in collecting, centralizing, and indexing data just for a simple search?

But here's the twist – sometimes, collecting and indexing data is precisely what you need. While many effective data search tools exist, the fact that there are many tools doesn't mean there's no room for improvement.

Think of your toolbox at home – you probably have some excellent tools, but how often do you add a new one that offers something different? It typically doesn't replace anything; it just adds an extra capability. In this module, we'll explore your options for searching your data, helping you make the most of your data management toolbox.

A Deep Dive into Observability Search Tool Options

In this webinar, we present a compelling argument: It’s not about collecting ALL the data; it’s about collecting the RIGHT data. 

Legacy on-prem SIEM solutions and data lakes can hinder data collection for combating modern threats like ransomware. Join us as we discuss the game-changing power of combining Cribl observability pipelines with cloud-native SIEM, empowering you to route, filter, and mask log data strategically. Unleash the potential of improved insights, focusing solely on what truly matters. 

Our security experts from Cribl and Exabeam will delve into how to:

- Accelerate migration: Bid farewell to legacy SIEM and data lakes, embracing the future of cloud-native SIEM
- Optimize storage: Liberate valuable headroom, accommodating vast amounts of telemetry data
- Improve threat detection: Seamlessly integrate behavioral analytics, enriching your telemetry data for proactive threat detection

Speakers:
Michael Moreno, Sr. Product Marketing Manager, Exabeam
Desi-Gavis Hughson, Mgr., Solutions Marketing, Cribl
Jim Apger, Sr. Alliances Technology Engineer, Cribl

Using Observability Pipelines to Optimize Cloud-Native SIEM

Tune into this session and gain insights from our Observability Professor, Perry Correll, as he dives into the concept of Observability Pipelines. Imagine the possibilities of consolidating data collection and processing for various event types, including metrics, logs, and traces. By unifying data collection, you can minimize the need for redundant agents, duplicate instrumentation, and multiple collection systems. Don't miss the chance to learn more!

Mastering Observability Pipelines: Streamlining Data Collection and Analysis

Security teams are inundated with data from multiple sources in multiple formats, slowing down the ability to detect and respond to breaches and hunt for new threats. With multiple security tools deployed, sharing information across tools/teams becomes even more challenging.

Cribl simplifies and accelerates the process of ingesting, enriching and analyzing huge volumes of data, enabling investigators to identify specific data points and map them to corresponding indicators of compromise (IOCs).

Join this webinar and learn how to accelerate cybersecurity investigations by:
- Addressing timestamp challenges to ensure accurate investigative timelines and ensure accurate IP geolocation
- Reducing reliance on TAs and configuration files to minimize low-value, repetitive work for your team
- Enriching data with geoIP functions and known intelligence, giving investigators better, more relevant data to search through or simply pointing investigators in a better direction
- Enabling investigators to see the right formats and types of data faster, with the right context, in their preferred analytical tool

Accelerating Detection and Response During Cyber Events

In this module, Professor Correll discusses Observability Components and Tools. This segment touches on agents and sources, with the general principle being that each source typically associates with one or more dedicated agents. Additionally, the module will explore the significance of logging and monitoring as crucial elements for sustaining peak application performance. The module also addresses topics such as analytics, infrastructure, and concluding with a focus on pipelines and integration.

Exploring the Essentials: A Guide to Observability Components and Tools

Data is the foundation of our Observability journey. Often when talking about O11Y, you may think of the 3 pillars – metrics, traces, and logs. Within this module, Professor Correll will discuss these and the various categories of data that are both generated and gathered. Additionally, the module will examine how a single dataset can hold distinct levels of significance across various departments.

Unblocking Insights: Navigating the Depths of Observability Data

In this next module of our Observability Professor series, Perry dives into the realm of observability and focuses on the investigators – those who seek specific insights. Before digging into data collection, pipelines, and search mechanisms, we need to pinpoint exactly what we're searching for. This session will explore the "who" and the "why" behind these inquiries because, in most organizations, the data collected may be similar, but the emphasis placed on different aspects and the tools required can vary significantly. It's all about tailoring observability to your unique needs.

O11Y: Identifying the Investigators

IT and security professionals excel at resolving complex issues and  the daily struggles of securing observability and security data, but they often face challenges in securing funding for these endeavors. 

To get the tips you need to successfully plan and create your planning and budget proposal for next year, join our IT and Security experts to help you:

- Create your budget proposal to tell a story
- Map technical requirements to business objectives
- Explain to an executive why they should fund your project
- Address basic budgeting and how to present your data

Join this webinar and get the planning and budget assets we’ll demo live to help you on your budgeting journey.

Guide to Securing Project Funding and Yearly Budget Planning

Join the O11Y Professor, Perry Correll, and Ed Bailey as they discuss Observability and why it matters to your business. In this module, the two will talk through if Observability is a tool or a concept, how it plays into network resilience / reliability and if these concepts are different for various IT teams.

The Business Value of Observability

Stream is the best way to get multiple data formats into your analytics tools. See how by using Cribl Stream as your universal receiver to collect from any observability data source – you can receive data from all your agents and push based sources, schedule batch collection from multiple endpoints and APIs, as well as recall data from low cost storage.

Join this Stream demo and we’ll show you how to:

- Route data from any source to any destination, or send the same data to multiple destinations
- Eliminate duplicate fields, null values, and reduce log volume to control costs and improve system performance
- Shape data into metrics for analysis or enrich logs with GeoIP info, threat intel, and more for actionable insights

Demo: Cribl Stream

Class is back in session! Join our Observability Professor, Perry Correll,  as he unpacks the fundamentals of Observability, Telemetry and Security Data analysis in this 10-part webinar series. Perry will delve into the challenges posed by the diverse definitions and agendas surrounding observability, and will equip you with the knowledge to critically analyze and navigate this crucial concept. 

Through a series of hyper-focused, interactive modules, we'll explore observability's core principles, its relevance in IT environments, and the transformative power it holds.

The Professor's Guide to Data Analysis: Observability, Telemetry, and Security

Are you tired of your security data being siloed? Do you want to transform your isolated security data silos into a cohesive ecosystem of tools and controls?

If so, join this webinar to learn about Cybersecurity Mesh Architecture (CSMA). CSMA is a concept introduced by Gartner that aims to transform isolated security data silos into a cohesive ecosystem of tools and controls to protect the modern enterprise. The strategy focuses on integrating various security tools by consolidating data sources and using high-quality enrichment and data normalization to enable more effective collaboration and correlation.

In this webinar, we will discuss how implementing a CSMA offers several benefits, including:

- Enhanced detection capabilities through complete access to data
- Increased response efficiency through access to higher-quality data
- Consistent management of policies, postures, and playbooks
- Adaptive, granular access controls

Unleashing the Power of Cyber Security Mesh

Security

DevOps

ITOps

SecOps

Cyber Security

Data Silos

Unified Policy

Observability

Identity Proofing

Security Posture

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Unleashing the Power of Cyber Security Mesh

Presented by

About this talk

More from this channel