Interview: Tim Appleby on Cloud Security Solutions for Government

Security analysts spend more time staring at multiple screens and consoles of alerts instead of focusing on the real cyber detective work of finding attackers. Current SOC tools only fill in some of the blanks and require constant tuning and maintenance. There is a better way.

This Virtual Summit session covers:
-The new Extended Detection and Response (XDR) product category
-How organizations are deploying XDR technology to address attacks faster at a fraction of the cost

Be sure to check out all of the sessions in our FireEye Mandiant Virtual Summit 2021, Innovation Forward. A New Era of Resilience. - Live on April 13-15. https://virtualsummit.fireeye.com/

At the end of 2020, FireEye revealed the details of a sophisticated threat actor that took advantage of SolarWinds’ Orion Platform to orchestrate a wide-scale supply chain attack and deploy a backdoor we call SUNBURST.

This attack impacted organizations worldwide, leading executives everywhere to question whether their environment fell victim. Discovering, sharing, and shutting down access to the SUNBURST backdoor, which allowed attackers to move freely and spy on victims, required the unique expertise of Mandiant’s Frontline Applied Research and Expertise (FLARE) team. And for Mandiant Managed Defense, the identification of victims started well before the public became aware of the SUNBURST campaign.

Join Mandiant experts for a retelling of the SUNBURST discovery story and a look inside how they addressed the SUNBURST threat with customers, including stories from the front lines of this customer-focused response. Our experts will also highlight:

• How this prolific cyber-attack changes the way we view security
• SUNBURST threat actor TTPs and how Mandiant hunts for the most relevant, and dangerous threats
• What threat hunting techniques should be deployed to find today’s stealthiest attackers

Be sure to check out all of the sessions in our FireEye Mandiant Virtual Summit 2021, Innovation Forward. A New Era of Resilience. - Live on April 13-15. https://virtualsummit.fireeye.com/

For more than a decade, FireEye Mandiant’s annual M-Trends report has been a reliable source of expert insights and frontline intelligence for security professionals worldwide. This year’s highly sought-after report, being released at the Virtual Summit, provides timely data and insights based on global investigations of high-impact cyber-attacks and remediations.

Join FireEye EMEA CTO David Grout for a first-hand look at the latest incident response metrics, attacker trends and behaviours, and case study highlights from the 2021 report. This session will feature expert analysis and commentary on critical topics including:
● Ransomware Trends and Remediation Techniques
● SUNBURST / UNC2452 Investigation Insights
● Enhanced Red Teaming Tactics
● Growing Insider Threats

Be sure to check out all of the sessions in our FireEye Mandiant Virtual Summit 2021, Innovation Forward. A New Era of Resilience. - Live on April 13-15. https://virtualsummit.fireeye.com/

In the wake of intensifying cybersecurity threats, managing and enforcing Zero Trust policies across multiple cloud environments is critical, yet also complicated and laborious. State, local, and education (SLED) government agencies in particular struggle to understand how best to implement Zero Trust in complex clouds as well as track data and keep it secure.

In this session, attendees will gain insights into:

● The principles of Zero Trust and how they apply to cloud security
● The reference architecture for Zero Trust in the cloud
● Implications of the cloud Shared Responsibility Model

Be sure to check out all of the sessions in our FireEye Mandiant Virtual Summit 2021, Innovation Forward. A New Era of Resilience. - Live on April 13-15. https://virtualsummit.fireeye.com/

Intelligence-Led Security Validation: A Strategy to Prove & Communicate Competency

Today we are seeing some of the most aggressive and sophisticated adversary attacks ever recorded. To ensure the health of your organization’s security infrastructure, it’s vital to validate the efficacy of security defenses with the use of authentic and relevant content based on active threat intelligence. Intelligence-led security validation enables you to quantify your risk, prioritize resources and prove competency. The result is the ability to strengthen and maintain your cyber stance against today’s evolving and aggressive adversary landscape.

In this session, you will:

● Learn that testing or validation technology is not enough—The steps required for an effective security validation strategy include the use of authentic and active threat intelligence, and why the emulation of real attacks, rather than attack simulation, is critical
● Gain insights into how threat intelligence informs security validation efforts by identifying the threat actors that are most likely targeting your organization
● Understand how continuous validation can prove security effectiveness and operational competency—Ultimately, assuring security infrastructure health, identifying areas for optimization, and reducing risk exposure.

Be sure to check out all of the sessions in our FireEye Mandiant Virtual Summit 2021, Innovation Forward. A New Era of Resilience. - Live on April 13-15. https://virtualsummit.fireeye.com/

How do security leaders need to evolve to keep up with changing business conditions? How should security leaders be talking to the board of directors, and how should they leverage technology to drive positive business outcomes? Security leaders across industries are facing many of the same challenges and changes in today’s workplace. In this session we will discuss insights with a panel of security leaders in different industry segments. There will be an open Q&A discussion at the end.

In this session, panelists will discuss:
- Challenges security leaders face on a daily basis
- New techniques or processes being deployed to secure a company network

Be sure to check out all of the sessions in our FireEye Mandiant Virtual Summit 2021, Innovation Forward. A New Era of Resilience. - Live on April 13-15. https://virtualsummit.fireeye.com/

Cyber threat intelligence (CTI) is a powerful weapon for organizations to identify and better understand relevant threats and how to defend against them. But it goes further than that. When shared across the company from vulnerability management and the security operations center to risk management and senior leadership, CTI can drive better business outcomes.

Join FireEye Mandiant for an in-depth discussion about:
● How CTI insights should be extended to broader teams, including who, why it matters, and how it can be leveraged in business decision-making
● Real-world examples and best practice approaches to sharing CTI with business leadership
● How to leverage CTI to optimize and validate defenses

Be sure to check out all of the sessions in our FireEye Mandiant Virtual Summit 2021, Innovation Forward. A New Era of Resilience. - Live on April 13-15. https://virtualsummit.fireeye.com/

If you can measure it, you can improve it. One major challenge for cyber security teams is establishing a measurable process of validating their security operations to be able to identify gaps in detection coverage and areas of redundancy to provide specific areas of improvement including potential saving across your security controls.

This webinar will discuss how to:
• Operationalize Threat Intelligence: Ensure your security controls stand up to the latest tactics, techniques and procedures used by threat actors in your region and industry.
• Plan security improvements: From both a technology and process perspective.
• Establish evidence-based KPIs to improve security controls.
• Report the organization’s ability to mitigate pertinent cyber risks to senior stakeholders

Join this session to uncover how security validation proves the value of your efforts and ultimately reinforces your organization’s security posture.

Be sure to check out all of the sessions in our FireEye Mandiant Virtual Summit 2021, Innovation Forward. A New Era of Resilience. - Live on April 13-15. https://virtualsummit.fireeye.com/

On December 13, 2020, FireEye discovered a global intrusion campaign performed by a highly evasive attacker leveraging the SolarWinds supply chain to compromise multiple global victims. The campaign, which may have begun as early as Spring 2020, is the work of highly skilled and likely nation-backed actors and was conducted with significant operational security. FireEye is continuing to track the threat actors behind this campaign and has labeled them UNC2452.

In this session, you will learn first-hand:
● What FireEye Mandiant knows and continues to uncover about these threat actors
● Multiple techniques the actors are using to achieve their mission while obscuring their activities to evade detection
● Insights into detection and defensive strategies that organizations should deploy in the aftermath of UNC2452

Be sure to check out all of the sessions in our FireEye Mandiant Virtual Summit 2021, Innovation Forward. A New Era of Resilience. - Live on April 13-15. https://virtualsummit.fireeye.com/

A cyber threat profile enables organizations to benchmark and understand risks as a function of internal operations against the evolving threat landscape. Integrating a dynamic cyber threat profile into an organization’s sustainable workflow also better equips them to identify key priorities for further investment using an intelligence-led approach to cyber security.

Join Igors Konovalovs, Director, GSS Sales, Asia Pacific, FireEye, to learn why a cyber threat profile should be the centerpiece of any intelligence-led program. Specifically, the discussion will offer:

● Industry case studies and best practices for developing a dynamic cyber threat profile
● How to use a cyber threat profile to identify threats that matter most
● Ways to maintain a cyber threat profiles as part of an intelligence-led security program

Be sure to check out all of the sessions in our FireEye Mandiant Virtual Summit 2021, Innovation Forward. A New Era of Resilience. - Live on April 13-15. https://virtualsummit.fireeye.com/