Name: CrowdStrike’s 2023 Threat Hunting Report
Start: 2023-09-24T12:12:00Z
End: 2023-09-24T12:13:03.000Z
Location: BrightTALK
Rating: 5

CrowdStrike, a global cybersecurity leader, is redefining security for the cloud era with an endpoint and workload protection platform built from the ground up to stop breaches. The CrowdStrike Falcon® platform’s single lightweight-agent architecture leverages cloud-scale artificial intelligence (AI) and offers real-time protection and visibility across the enterprise, preventing attacks on endpoints and workloads on or off the network. 

There’s only one thing to remember about CrowdStrike: We stop breaches.

Cloud exploitations increased 95% over the past year — a clear indicator that attack surfaces are becoming more dynamic and sophisticated in the cloud. While 2023 saw some cloud infrastructure and workload protection consolidation into unified platforms, continuous delivery and ineffective application security still elevates overall risk and leaves a gaping hole for adversaries to exploit.

Join us for a review of the current state of application security, a deeper dive into the challenges of securing applications, and see how CrowdStrike’s AI-native modern cloud security platform protects applications from code to runtime.

What to expect:
• Get insights into the challenges security teams face as developers push application changes more frequently
• Learn how to empower developers to create more secure and resilient applications
• Hear firsthand from an ASPM customer

Cloud Security Consolidation Extends Protection from Code to Runtime

As cyber threat actors get faster, smarter, and more relentless, security and IT teams face increased risk and complexity. Disjointed, underperforming point products create blind spots where adversaries thrive, delaying threat detection and response and making it harder to stay ahead of the enemy.

Join our guest speakers – Intel’s CISO, Brent Conran and IDC’s research VP, Christopher Kissel – along with CrowdStrike’s VP of Portfolio Marketing, Scott Simkin, to discuss platform consolidation trends and learn how consolidating security tools with the Falcon platform helps organizations stop breaches, save time, and save money

What to expect:

• Hear perspectives from Intel Corporation and IDC on platform consolidation and what security and IT leaders should expect in 2024
• Learn how customers who have consolidated tools with CrowdStrike realized substantial benefits around better security, improved SOC efficiency, and cost savings
• Prepare for next steps on your organization’s security consolidation journey

Cybersecurity Consolidation – Perspectives from Intel's CISO and New Research

Over the last year, breakthroughs in generative AI have captivated consumer and enterprise interest — and organizations are scrambling to keep up with technology while navigating its growing attack surface.

Join CrowdStrike’s Chief Scientist, Dr. Sven Krasser, and VP of Portfolio Marketing, Scott Simkin, for an in-depth discussion on large language models (LLMs), top applications for security operations, and practical guidance for navigating emerging market offerings and the growing risks of generative AI. We’ll also peek behind the curtain at CrowdStrike’s LLM-based security technology, Charlotte AI, and hear early insights from beta customers.

What to expect:
• Learn the fundamentals of LLMs and the value they bring to security teams
• Discover the emerging attack surface of LLMs and potential risks of generative AI tools
• Understand key criteria organizations should consider when evaluating and comparing LLM technologies

Generative AI Accelerates Protection and Investigation

In this simulation, we’ll immerse you in a high-stakes scenario where today’s most notorious adversary — SCATTERED SPIDER — has infiltrated your organization. Can you stop the threat before it’s too late?

Watch Part 4 of the Unstoppable Innovations CrowdCast Series to understand SCATTERED SPIDER’s underhanded schemes, from social engineering to abusing security tools. During this webinar, you’ll learn the steps you should take to detect, investigate, and respond to threats using CrowdStrike’s next-gen SIEM.

What to expect:
Take part in a realistic simulation of an advanced attack orchestrated by SCATTERED SPIDER.
Discover how you can expedite investigations using cutting-edge tools like Charlotte AI Investigator and a new XDR incident workbench.
Find out how you can defeat threats with next-gen SIEM powered by the CrowdStrike Falcon® platform.

Rise Above SCATTERED SPIDER with Next-Gen SIEM

Threat actors are getting bolder, stakes are higher, ransom costs and extortions are growing exponentially. These attacks can cause huge financial and reputation damage to organizations and affect their customers, or even worse, critical infrastructure or supply chains.

This webinar will be delivered by the CrowdStrike Falcon Complete team where they will execute a live Ransomware attack scenario. A public facing host that is unprotected by Falcon has become compromised. The intruder is leveraging it to laterally move across the environment via RDP in attempts to deploy ransomware.

CrowdStrike Falcon Complete - Attack & Defend Demo

Ransomware attacks are evolving. And if your organization isn’t prepared, you could be in for rude awakening in 2024. A recent survey reported that as many as 79% of organizations have experienced a successful ransomware attack over the last year.

Beyond the cost of a ransom, your organization must bear the burden of business disruption, irreparable damage to your reputation and customer trust, and other long-term impacts. Too many organizations have a false sense of security when it comes to their defenses, especially if you leverage decades-old traditional AV or endpoint security products.

Join us in this webinar to learn about:
• The major ways that ransomware has evolved going into 2024
• The gaps in traditional security tools that make your environment an easy target for adversaries
• How modern endpoint security solutions enable your organization to have an adaptable defense that can outpace and outsmart today’s adversaries

How Ransomware is evolving in 2024

This webinar explores the findings from two CrowdStrike reports – the Global Threat Report (GTR) & Cloud Risk Report (CRR) – which shed light on the ever-evolving landscape of cloud security and global threats in 2023. 

Watch the webinar now to learn about:
• What 2023 threat landscape themes mean for 2024
• Why your organization needs threat intelligence led security
• 5 ways to prepare for cyber threats
• Best practices for cloud data protection

2023 Cyber Threat & Cloud Risk Landscape

DO YOU REALLY KNOW THE ATTACK SURFACE OF YOUR ORGANISATION?

Please join our Field CTO for International, Fabio Fratucello and the leaders from our APJ Threat Intelligence, Services and Falcon Complete teams for a comprehensive and multifaceted perspective on external attack surface management (EASM). 

As an IT decision-maker or security leader, it's critical for you to have constant visibility of your organisation’s ever-expanding and evolving attack surface. That way, you can stay on top of any potential threats and vulnerabilities of your exposed assets, and ensure that the business is making informed decisions and minimising any risk to the organisation.

Asia Executive Perspectives - Falcon Surface

Join Lindbergh Caldeira, Cyber Security Operations Manager and team from SA Power Networks, with Tristan Haines, Sales Engineer CrowdStrike Australia for a technical deep dive into how to combat eCrime.

Lindbergh will share a recent use case where the SA Power Networks team needed to protect a RDP access to on-premise server infrastructure with MFA.

Tristan will take a deep dive into:

- Access brokers - who are their targets and how much are they worth
- Falcon Intelligence Recon - how to gain visibility into cybercrime activities with real-time dark web monitoring that empowers security teams to discover and disrupt digital threats
- Identity Protection - the industry’s only adversary-focused platform that unifies endpoint and identity protection

How to combat eCrime and insights from CrowdStrike and SA Power Networks

With the right managed detection and response (MDR) service, you can transform your security program and strengthen your security posture practically overnight. But not all MDR services are the same. Far from it. Now more than ever, achieving cyber resilience hinges on the balance you strike between security efficacy and business priorities, and the modern MDR service that helps you accomplish both.

Join us for a live webinar with special guest, Jeff Pollard, VP and Principal Analyst at Forrester, as we discuss new findings and insights about the current state of MDR in his latest evaluation, “The Forrester Wave™: Managed Detection and Response, Q2 2023.”

CrowdStrike Falcon Complete MDR founder and VP/GM, Austin Murphy, will then sit down with Jeff for a virtual fireside chat to dive deeper into how to get the most out of your MDR provider, determine the critical capabilities of a modern MDR, and where the industry as a whole goes from here.

Topics and takeaways:

- Criteria and methodology from the 2023 Forrester Wave for MDR
- How MDR disrupted the decades-old MSSP market, and where it’s headed next
- How to evaluate and select the right MDR service for your organization
- What the must-have components of a modern MDR service are in 2023
- Why emerging capabilities, like XDR, are poised to add value and improve MDR outcomes

Rightsizing Your Security Program with Modern MDR

Join the Falcon Complete team for the latest episode in our Live Attack & Defend Demo Series. We will dive into a realistic attack scenario of an Apache Tomcat web server. Our Falcon Complete team will use Falcon Cloud Security to investigate the attack and perform live remediation within the cloud workload environment.
Your key takeaways from the webinar:
- Gain valuable insights into the exploitation of a Java web server within a Docker container and the potential risks it poses to your organisation's security.
- Understand how you can protect and fortify cloud workload environments against sophisticated threats.
- Witness live attack investigation and remediation, to appreciate the skills, steps and technologies required to successfully defend your environment.
- Learn best practice strategies and preventive measures to safeguard your Java web servers running in Docker containers and enhance your overall security posture.
This webcast is a must-attend for IT professionals, cybersecurity enthusiasts, and anyone interested in strengthening and extending their knowledge of cloud workload protections.

Falcon Complete Attack & Defend Demo - Falcon Cloud Security

Gone are the days when your enterprise functioned as a “castle and moat,” wherein you had complete reign over your data centers, firewalls, users, and data. 

Instead, many of your critical assets now likely live in the cloud or are dispersed across your digital footprint. When the castle walls are dismantled and your assets are everywhere, how do you fend off the swarms of hackers vying to compromise them?  

External Attack Surface Management (EASM) offers reprieve in this scenario, placing security visibility and control back into your hands. 

Join this webinar with Crowdstrike’s Tina Thorstenson, VP of Industry Business Unit & Executive Strategist, and Kamil Imtiaz, Director of IT SecOps Product Marketing, to educate yourself on Gartner’s definition of EASM, its associated benefits, and 5 things to consider before investing in an EASM solution.

5 Considerations for Investing in External Attack Surface Management

According to 2023 Crowdstrike threat research, exploitation of web-facing services, a sharp increase in the use of zero-day exploits on enterprise software, and adversaries pivoting from traditional endpoints to targeting cloud are three of the most significant dynamics impacting APAC’s cybersecurity landscape today.

However, the trends, and emerging attack vectors, don’t stop there. 

In this webinar, Crowdstrike’s APAC experts—Fabio Fratucello, Scott Jarkoff, and Mark Goudie—dissect their 2023 Global Threat Report (GTR), showcasing the specific cybersecurity trends, threats, and adversaries impacting APAC geographies and industry sectors.

Watch the session or risk missing this threat intelligence gathered by Crowdstrike’s Global Overwatch and APAC Incident Response teams, which includes a deep dive into the cyber espionage landscape, over-arching APJ trends, and more.

2023 APAC Global Threat Report: Attack Vectors, Trends, & Adversaries

Today’s security professionals recognize that threat intelligence is a critical component in their cyber toolkit, enabling them to proactively respond and pre-empt advanced threats. Yet many of these same professionals are having a difficult time understanding the array of threat intelligence solutions and how to best utilise them within their organisations.

This webcast addresses these challenges and highlights the importance of leveraging threat intelligence as a critical part of an effective cybersecurity strategy.

Join CrowdStrike’s Director, Strategic Threat Advisory Group for APJ, Scott Jarkoff, to learn how to get the most value out of threat intelligence by effectively applying it across your organization — from security operations to executive leadership.

Demystifying Threat Intelligence

Learn how to navigate the new attack trends and tradecraft identified by the expert Falcon OverWatch team

Every year, CrowdStrike’s proactive 24/7 threat hunting team, Falcon OverWatch™, publishes its findings detailing the novel and prominent adversary tradecraft that it unearthed over the preceding year.

Join us for this webinar where our threat hunting experts will discuss how adversary tradecraft and tooling evolved over the past year, and highlight the particular intrusions and tooling that stood out most to them. Take away real-world experiences and insights from these front-line experts and use it to inform your security strategy and stay ahead of fast-moving threats in the weeks and months ahead.

In this webcast, you will learn:
• Why we observed a 50% increase in interactive, hands-on-keyboard threat activity year-over-year
• Which industry sectors were hit hardest by eCrime and targeted intrusions
• How adversary tradecraft is evolving, including how it was developed and deployed, and the steps OverWatch threat hunters took to unearth these stealthy, sophisticated attacks
• Why we face a critical inflection point today due to the rise of cloud-based attacks, and how specialized cloud threat hunting will work to keep these threats at bay.
• Where attack trends and tradecraft are headed over the next 12 to 18 months, and key recommendations for threat hunters and other defenders to apply at their organizations right away

Nowhere To Hide: 2022 Falcon OverWatch Threat Hunting Report [APJ]

A unique perspective on eCrime in APAC from CrowdStrike's threat intelligence and OverWatch teams.

When it comes to understanding what’s happening with the major criminal groups perpetrating cyber attacks today, we can take a lot of our cues from the Marvel Cinematic Universe (MCU) and DC Extended Universe (DCEU).

Just like the fictional heroes and villains in MCU and DCEU, the real-life eCrime adversaries (“Spiders”) are extremely intertwined with each other. These Spiders have spun vast webs where they work together to complete big game hunting ransomware attacks and other similar attacks around the world.

That collaboration has led to higher levels of automation, greater sophistication in initial access techniques and even ransomware as a service (RaaS) affiliate programs. That’s reflected in an average eCrime breakout time in 2021 of just 98 minutes.

This CrowdCast webinar will keep you up to date with the current and emerging threat landscape, the active eCrime adversaries, and their techniques, targets and methods. CrowdStrike has combined the latest insights of our threat intelligence research and analytics team with the on-the-ground experiences of our APAC Falcon OverWatch™ managed threat hunting and response service.

Essential Update On The e-Crime Adversary Universe: Ransomware & More in 2022

As organizations migrate more services and applications to the cloud, adversaries have shifted their focus to exploit a broader attack surface.

From vulnerability exploitation to credential theft, attackers are going after any weak points that allow them to compromise the ever-growing amount of critical business data and applications hosted in the cloud.

We will share insights into today’s top cloud security threats and  cloud vulnerabilities, along with best practices to address them. Join the workshop to learn:
• The top cloud security threats in 2022
• The main cloud security adversaries
• The most targeted cloud vulnerabilities
• What you can do to ensure effective cloud security

Speakers:
• David Puzas (Head of Product Marketing, Cloud Security)
• Joshua Shapiro (Sr. Manager, Strategic Threat Advisory Group)
• Scott Fanning (Sr. Director, Product Management, Cloud Security)

Combating the Rise in Threats to Cloud Environments

Join us in this webinar to discover the dynamic evolution of hacker tradecraft and tooling over the past year and gain unparalleled insights from our expert threat hunters as they discuss standout intrusions and techniques.

In this webcast you will learn about:
• The hardest-hit industry sectors targeted by eCrime and targeted intrusions.
• The startling 583% surge in identity-based Kerberoasting attacks and learn how specialized identity threat hunting can halt them in their tracks.
• How to defend against rising cloud-based intrusions with effective countermeasures.
• The evolution of adversary tradecraft, from development to deployment, and the steps taken by Falcon OverWatch threat hunters to unearth these stealthy, sophisticated attacks.
• Predictions of attack trends and tradecraft in the next 12 months and how you can arm yourself with immediate countermeasures to become a formidable defender.

CrowdStrike’s 2023 Threat Hunting Report

IT Security

Threat Management

Cyber Security

Threat Hunting

Application Security

Cloud Security

Attack Vectors

Artificial Intelligence

Ransomware

Data Protection

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

CrowdStrike’s 2023 Threat Hunting Report

Presented by

About this talk

More from this channel