SANS WhatWorks in Detecting and Blocking Advanced Threats

Learn how a large research organization ensures effective operations and cybersecurity capabilities, and how advanced threat protection from FireEye helps get the job done. A leading research organization must allow users to collaborate online, manage their own IT environments, and rely on the Internet to perform their day to day activities—all high risk activities. The desire to take a more aggressive approach to detecting security incidents prompted them to look at new threat detection systems. The team found that FireEye performed as a proactive advanced threat protection platform that actively inspected traffic on their high speed networks and detected malicious events that were unseen by other installed network security systems. The FireEye solution installed easily, is monitored and maintained with very little personnel overhead, and has a very low rate of false positives. Hear a real-world user story in an interview webcast between SANS Director of Emerging Security Trends, John Pescatore, and a cybersecurity analyst.