Name: Applying an Effective UEBA Solution: Experiences from the Trenches
Start: 2018-05-31T17:00:00Z
End: 2018-05-31T17:00:50.000Z
Location: BrightTALK
Rating: 4.5

Exabeam is a global cybersecurity leader that delivers AI-driven security operations. High-integrity data ingestion, powerful analytics, and workflow automation power the industry’s most advanced self-managed and cloud-native security operations platform for threat detection, investigation, and response (TDIR). With a history of leadership in SIEM and UEBA, and a legacy rooted in AI, Exabeam empowers global security teams to combat cyberthreats, mitigate risk, and streamline security operations. Learn more at www.exabeam.com. 

Sometimes just having a SOC isn’t enough to address insider threat issues. Security operations teams are managing massive amounts of data across billions of events from on premises to the cloud. Looking for specific needles like insider threats in this complex haystack has special requirements that encompass both searching historic data and seeing evolving credential behavior changes as they happen. During times of organizational change—whether through downsizing, expansion, or shifts among employees, vendors, and contractors—insider threats can easily go unnoticed as the environment rapidly evolves. Addressing these insider threats requires a targeted, proactive strategy.

Join us for a webinar on December 12 to learn:

- The common scenarios that indicate you need an insider threat team, how to build a mission statement, and tools
- Four attributes of a successful insider threat program
- How behavioral analytics baseline "normal" behavior of users and devices - showing risk faster
- An automated investigation experience that replaces manual routines and effectively guides new insider threat teams

Level Up Your Insider Threat Program with AI

Cybersecurity spend is set to surpass $170 billion annually by 2027 according to IDC. Enterprises face pressing challenges in threat detection and response as adversaries use generative AI to increase compromise credentials. Approximately 60% of organizations experienced a rise in credential phishing attacks, facilitated by generative AI tools.  

Join us on November 20th to dive into modern security architectures using the Exabeam Security Operations Platform to define TDIR strategies. 

Discover how you can modernize your security operations with: 

Outcomes Navigator: Personalize outcomes and coverage levels align to MITRE Coverage Score to draw actionable actions from C-suite investment to analysts' response. 

Exabeam Copilot: Enable instant collaboration and rapid response with generative AI, turning insights into action with natural language processing (NLP) 

 

Grab this opportunity to watch a live demo on how Exabeam machine learning (ML) improves parser data, modernizes your security strategy with AI, and helps you stay ahead of threats.

Elevate Your Cybersecurity Response: Transform Threat Detection, Investigation, and Response (TDIR) with AI

Effective leadership during a cybersecurity breach is vital for both immediate response and long-term resilience. Not only does it protect the organization but also nurtures the team. By fostering an environment of communication, collaboration, and continuous improvement, as well as investing in technologies to fully equip the team, CISOs can lead their organization through crises and emerge stronger. 

In this webinar, recently hosted by SASIG Events, Exabeam’s VP and Chief Security Strategist, Steve Moore, will discuss some of the key considerations, including a first-hand perspective from Ash Hunt, Global CISO of Apex Group, covering:

- The importance of empowerment and collaboration through encouraging team involvement and decision-making responsibilities within their scope to facilitate quick responses.

- Investing in development, including training, mentorship, and how the use of AI and ML can help maximise the team’s competency at the same time as improving efficiency. 

- Fostering resilience, including mental health support and work-life balance, especially during high-pressure situations. 

- And more…

Leadership and Career Development During a Breach

In a time of continuous threats with committed adversaries, AI is becoming a powerful ally in improving threat detection, investigation and response by capitalizing on the power of machine learning, the knowledge contained in large language models (LLMs) and AI techniques such as natural language processing (NLP). As organizations continue to struggle to hire and retain their security personnel, there’s a huge opportunity in security operations for enabling technologies like these that accelerate knowledge and increase productivity.  
 
Join Steve Wilson, Chief Product Officer at Exabeam and guest speaker Allie Mellen, Principal Analyst at Forrester Research to hear the trends, hype, risks and opportunities associated with AI in Security Operations.  
 
Key learnings: 
• What are the leading use cases for GenAI and NLP?  
• How can buyers sift through the hype?  
• How secure is Gen AI? 
• Risks associated with GenAI adoption? 
• What are some benefits of an AI-Driven Security Operations Platform? 
• Why isn’t machine learning alone enough? 
• Real-world AI successes reported by customers.

The Intersection of Gen AI and Cybersecurity: Building the Case for an AI-Copilot

Join us for this webinar to learn the latest news and enhancements to Exabeam's New-Scale platform to help safeguard your environment with confidence.

· Streamlined Data Collection: New Cloud Collectors streamline log ingestion, saving security personnel valuable time and resources, and improving organizations' ability to quickly and accurately detect threats.

· Enhanced Copilot Integration: Extended the generative AI capabilities of Exabeam Copilot to include natural language assistance to create new dashboard visualizations without complex queries, streamlining compliance reports, IoC detection, and SOC performance.

· Regional Support: Exabeam cloud coverage for the Kingdom of Saudi Arabia is now live, enabling deployment of the New-Scale Platform in that region.

· Compliance Achievement: Exabeam has completed the AICPA SOC 2 Type II Audit and is compliant without exception, demonstrating its commitment to maintaining the highest standards in security and privacy.

October 2024 Quarterly Launch - New-Scale Exabeam Security Operations Platform

October 2024 marks our 10th consecutive quarterly release, bringing you new product enhancements to help safeguard your environment with confidence.

Learn more about the latest enhancements to LogRhythm SIEM, our self-hosted SIEM platform. Product leaders will demo the latest enhancements and provide guidance on how to apply these enhancements to your team.

· Enhanced Log Source Management: A new location for pending log source management in the Web Console gives analysts immediate visibility into sources, enabling them to efficiently edit log sources through the API.

· Optimized Analytics: New versions of Elasticsearch and the Advanced Intelligence Engine service make security analytics more powerful, enabling greater efficiency with quicker and more accurate TDIR through: 
              -Up to 50% improvement in detection pipeline throughput o 87% faster loading of log sources in the client console
              -Up to 10x improvement in processing of pattern matching rules 

· New and Enhanced Log Sources: Over 60 new and enhanced log sources, including Rubrik, Anomali, and Akamai, added to over 1,000 existing out-of-the-box log sources as a continued commitment to provide customers accurate and modern TDIR.

October 2024 Quarterly Launch - LogRhythm SIEM

The break-neck speed of technology innovation creates opportunities and challenges for security professionals. You wouldn’t drive a car if you could only see two-thirds of the road, yet we are expected to defend our ecosystems with similar levels of visibility, dispersed with an over-reliance on manual controls. During this webinar, we will dissect these challenges and provide best practice recommendations with a focus on positive business outcomes.

Register for this webinar to learn:

-Why visibility is still such a huge challenge for security teams, and what can be done about it
-How to approach automating more of our threat detection, investigation, and response operations
-How to focus on business outcomes to bridge the gap to providing security at the speed of technology innovation

APAC - The Machines Are Learning, But Are We?

NA/UKI - The Machines Are Learning, But Are We?

Join Jake Haldeman & Gabrielle Hempel for episode 9 of "The Cybersecurity Brew," a podcast-style webinar series providing expert advice on navigating the ever-changing threat landscape.

During this series, our hosts share their thoughts around the latest and most significant cybersecurity headlines that impact you and answer your most pressing questions to help you defend and protect your environment.

Each episode brings new insights and understanding into the threat landscape, so make sure to subscribe to our BrightTALK channel and series to watch every session.

Cybersecurity Brew Episode 9

With the November presidential election approaching, there’s no better time to discuss how you can help ensure the integrity and cyber resilience of the electoral process. 

Join Kevin Kirkwood, Chief Information Security Officer, and Gabrielle Hempel, Customer Solutions Engineer, for this webinar around the importance of election security to learn:

• An overview of election security infrastructure
• Significant lessons learned from historical security incidents
• Current guidance from CISA on assessing your risk and operational security for election officials 
• Ways to protect election infrastructure with a SIEM

Election Security: Guidance to Assess Risk and Protect Infrastructure

46% of organizations find themselves struggling with the balance between limited resources and upholding a proactive, as opposed to reactive, approach to cybersecurity.

Along the same lines, many organizations continue to be challenged with finding the sweet spot between maintaining compliance while continuing to stay competitive and drive business value.

In this episode of The State of Security Teams webinar series, learn strategies for developing a more proactive security posture despite limited resources, and ways to integrate compliance into your broader business strategy.

Episode 4: How Security Teams Can Confront Compliance and Resource Constraints

July 2024 marks LogRhythm’s 9th consecutive quarterly release, bringing you new product enhancements to help safeguard your environment with confidence.

Product leaders will share the latest news and enhancements.

July 2024 Quarterly Launch - Cloud-Native SIEM

July 2024 marks LogRhythm’s 9th consecutive quarterly release, bringing you new product enhancements to help safeguard your environment with confidence.

Learn more about the latest enhancements to LogRhythm SIEM, our self-hosted SIEM platform. Product leaders will demo the latest enhancements and provide guidance on how to apply these enhancements to your team.

July 2024 Quarterly Launch - LogRhythm SIEM

The communication gap between security teams and non-security executives has always been a persistent barrier to effective cybersecurity management. In fact, more than 50% of cybersecurity professionals report difficulty in conveying the need for specific security solutions to executives who may not have a technical background.

In this episode of The State of the Security Team webinar series, learn how you can tailor your security communication to reach a shared organization-wide understanding of how to protect your company’s sensitive data and infrastructure.

Episode 3: Bridging the Communication Gap in Cybersecurity

Embark on a transformative journey into the heart of cybersecurity excellence this Valentine’s day with LogRhythm's CEO, Chris O'Malley, and Kev Eley, VP of Sales Europe, in this dynamic webinar that addresses why you should love your SIEM.

The foundation of a successful cyber security strategy lies in cultivating a robust partnership with a SIEM vendor that is attuned to your unique requirements and wants to build a loving long term relationship.
LogRhythm marks its seventh consecutive quarter of significant innovation, reaffirming our commitment to helping customers detect and respond to cyber-attacks. Encapsulating an unwavering commitment to innovation, a proactive approach to challenging the status quo, and a consistent history of fulfilling promises to serve customers.

Join us to explore LogRhythm's SIEMphony of love – detailing how their unique stance and partnership, not only guides organizations through evolving challenges but transforms the very essence of SIEM. You will depart with insights from proven strategies that ensures your security teams are equipped to navigate the future with skill and confidence.

Loving Your Logs This Valentine's Day

In this webinar, Jake Anthony will discuss the principals of Living off the Land (LOTL) attacks, the potential impact on today’s organizations, and how this type of threat actor may be more difficult to detect due to it using built-in legitimate tools and processes in an organizations’ operating systems. He will also discuss what security tools can be implemented and used to help protect an organization from LOTL attacks, detailing a real-life case study, and LogRhythm customer example.  
You will learn:
• The essentials of Living off the Land attacks, what they are, and how they are being used by today’s cyber criminals
• How the Volt Typhoon attack group recently used LOTL to pre-position themselves on IT networks for disruptive or destructive cyberattacks against critical infrastructure organizations 
• How a security information event management solution can be put in place to monitor, detect, investigate, and respond to such stealthy and sophisticated attacks

Living Off the Land Attacks: How best to protect your organizations' assets

PCI DSS is a set of security policies that protects credit card data and transactions. If your business processes credit card payments, you are likely required to comply. Demonstrating your PCI DSS compliance is no easy feat, but it can be made a lot easier with the right tools and processes in place.

Join Mikiann McIntosh, Risk & Compliance Engineer, and Kyle Dimitt, Compliance Research Engineer, for this on-demand webinar outlining everything you need to know for your PCI DSS compliance efforts. Through their conversation, you’ll learn:

• What PCI DSS compliance is and an overview of requirements
• Actionable steps to become PCI compliant
• How to demonstrate PCI compliance with a SIEM

How to Be PCI DSS Compliant: Tips, Tools, and Processes

This year, companies are experiencing better alignment of security strategies with business objectives, and increased confidence in budget allocation and perception of security effectiveness.

In this episode of The State of the Security Team webinar series, learn more about the success metrics of modern security teams and how you can create a proactive and resilient security culture within your organization.

Episode 2: How Modern Security Teams are Finding Success In 2024

Security mature organizations are increasingly utilizing User and Entity Behavior Analytics (UEBA) to quickly surface, prioritize, and respond to anomalous and alarming user behavior. 

Join Stephen Frank, director of technology & security at National Hockey League Players' Association (NHLPA), and Matt Willems, LogRhythm senior technical product manager, as they discuss how to apply UEBA to meet security use cases. The duo will outline NHLPA’s key use cases and how LogRhythm is supporting their security initiatives.

During the webinar, we’ll present:
• Why UEBA is a critical security capability
• NHLPA’s security environment and key use cases
• How LogRhythm is advancing their UEBA capabilities
• A brief demo of LogRhythm’s UEBA solutions

Register now to get an inside look at how NHLPA is working with LogRhythm to enhance their UEBA capabilities.

Applying an Effective UEBA Solution: Experiences from the Trenches

User Behavior

Behavioural Analytics

Security Analytics

Insider Threat

Threat Analysis

Threat Detection

Security Analysis

Cyber Security

Privileged Access Management

Cyber Attacks

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Applying an Effective UEBA Solution: Experiences from the Trenches

Presented by

About this talk

More from this channel