OVER DEZE AFLEVERING
What happens when the call is coming from inside the house? Data exfiltration by insiders is a dangerous threat, but one that often doesn't get the same level of attention as the sexier external ones. We'll start this session with a brief overview of why and how users exfiltrate information, and we'll progress to tactics, such as effective SPL searches, for operationalizing insider threat detection. You'll leave this session better able to catch insider threats in the in the act of exfiltration instead of days, weeks, or months later.
Speaker(s)
David Doyle, Splunk Puncher, Bechtel
Eric Secules, Forensic Investigator, Bechtel
Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1179.pdf?podcast=1577146216
Product: Splunk Enterprise
Track: Security, Compliance and Fraud
Level: Good for all skill levels
Engels
Verenigde Staten
TRANSCRIPTIE 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
OUDE AFLEVERINGEN ZOEKEN
Zoek naar eerdere afleveringen van Splunk [Security, Compliance and Fraud Track] 2019 .conf Videos w/ Slides.
ANDERE AFLEVERINGEN IN DEZE PODCAST
This presentation will discuss how Security Operation Centers (SOCs) will need to change to meet the cybersecurity challenges of the 2020s. The speaker will draw on his experience as a founder of the first SOC-as-a-Service company that delivers managed security services using Splunk. Most industry …
Deception, automation, and real-time data exploitation help security organizations go on offense vs attackers. In this session we will discuss how to use a variety of deception techniques to gather threat intelligence, how to create an automated response, and how to test response playbooks to valid…
Most of us have had (or still have) nightmares about an alert that someone's exfltrating data from our organization. We've lived that nightmare at Harris, and we've learned from it. In this session, we'll discuss how we used red and purple teaming to improve our security posture post-breach. Learn …
Intel is transforming its approach to security by deploying a new Cyber Intelligence Platform (CIP) based on Splunk, Kafka, and other leading-edge technologies. Our new platform ingests data from hundreds of data sources and security tools, providing context-rich visibility and a common work surfac…
Disclaimer: De podcast en de illustraties die op deze pagina zijn ingesloten, zijn afkomstig van Splunk, eigendom van de eigenaar en niet gelieerd aan of goedgekeurd door Listen Notes, Inc.
BEWERKEN
Bedankt voor uw hulp bij het up-to-date te houden van de podcast-database .