Name: MDR, XDR, SIEM, and SOC Explained
Start: 2024-07-10T20:27:00Z
End: 2024-07-10T20:28:02.000Z
Location: BrightTALK
Rating: 0

CrowdStrike has redefined security with the world’s most advanced cloud-native platform for protecting critical areas of risk — endpoints and cloud workloads, identity, and data. The Falcon® platform harnesses real-time threat intelligence and enterprise telemetry to automate threat prevention, detection, remediation, hunting, and vulnerability observability through a single, intelligent, lightweight agent.

Join Alex Walker, CrowdStrike's Counter Adversary Operations Practice Lead, for an in-depth session on the latest sophisticated nation-state and criminal intrusions disrupted by cross-domain threat hunting operations. Discover the threats posed by notorious eCrime groups and nation-state adversaries.

Drawing from over 200 daily instances of advanced intrusion attempts, Alex will discuss specific methods adversaries use to infiltrate networks—primarily through valid credentials and exploiting critical technologies—and effective intelligence-driven strategies to mitigate risk.

Don't miss this opportunity to gain valuable insights on safeguarding your networks, technology stacks, and third-party vendor relationships against sophisticated hands-on-keyboard threats.

Cyber Intrusion Insights: Threat Hunting to Disrupt Cross Domain Threats

Cloud intrusions increased 75% over the past year — a clear indicator that attack surfaces are becoming more dynamic and sophisticated in the cloud. While 2023 saw some cloud infrastructure and workload protection consolidation into unified platforms, continuous delivery and ineffective application security still elevates overall risk and leaves a gaping hole for adversaries to exploit.

Join us for a review of the current state of application security, a deeper dive into the challenges of securing applications, and see how CrowdStrike’s AI-native modern cloud security platform protects applications from code to runtime.

What to expect in this webinar:

• Hear firsthand from an ASPM customer
• Get insights into the challenges security teams face as developers push application changes more frequently
• Learn how to empower developers to create more secure and resilient applications

Cloud Security Consolidation Extends Protection From Code to Runtime

Cloud-conscious adversaries are relentlessly targeting the cloud and using increasingly sophisticated TTPs. CrowdStrike has introduced several enhancements to Falcon Cloud Security, including improved pre-runtime and runtime detections, enhanced application risk scoring, dynamic application inventory filtering and more. Join our expert product team as they take you through these developments and get an inside look at how each feature works to protect you against adversaries targeting the cloud.

What to expect during this video:

• A rollup of recent Falcon Cloud Security feature releases
• In-depth product demos of the new features
• An advance look at what’s coming next for Falcon Cloud Security, including highlights for the 2024 product roadmap

Revolutionizing Cloud Security with the Industry's Most Complete CNAPP

Cloud-conscious adversaries are relentlessly targeting the cloud and using increasingly sophisticated TTPs. CrowdStrike has introduced several enhancements to Falcon Cloud Security, including improved pre-runtime and runtime detections, enhanced application risk scoring, dynamic application inventory filtering and more. Join our expert product team as they take you through these developments and get an inside look at how each feature works to protect you against adversaries targeting the cloud.

What to expect in this video:

• A rollup of recent Falcon Cloud Security feature releases
• In-depth product demos of the new features
• An advance look at what’s coming next for Falcon Cloud Security, including highlights for the 2024 product roadmap

Application code changes more rapidly than ever through DevOps and CI/CD. The speed and dynamic nature of application development make it nearly impossible for organizations to keep an up-to-date inventory of their applications and dependencies, leading to dangerous blind spots that adversaries can exploit. Traditional cloud security posture management (CSPM) solutions are totally unaware of the risk that exists in the code itself, which leaves many organizations vulnerable. 

Organizations must balance the reward of continuous innovation with the risk of constant change — but how? 

Join us for a virtual 45-minute deep dive to learn how to: 

•  Secure applications in production using application security posture management (ASPM)
•  Reduce time spent manually reconciling data flows  
•  Empower developers to create more secure and resilient applications "

Falcon Insider's Demo: Securing Applications at Scale

Security, at its core, is a data problem. As data volumes grow exponentially (to the tune of 28% CAGR), organisations struggle to collect, enrich and correlate their security data.

As a result, today’s data onboarding processes involve countless log formats and ingestion methods, resulting in deployment delays, cost overruns and employee burnout. Gaining complete visibility of your data across your environments, no matter where it lies, is critical for security teams to stay ahead of modern threats.

In this session, Ed Bailey, Principal Technical Evangelist at Cribl, and Arfan Sharif, Director - Technical Marketing of NG-SIEM & XDR at CrowdStrike, will share and explore:
• Mid-year review of 2024 IT and Security key trends and predictions
• The evolution of the SOC to address today’s threat challenges
• Building an enterprise security data strategy – tips and best practices

Building an Enterprise Data Strategy for the Modern SOC

Adversaries using compromised credentials are increasing in numbers and sophistication. IDC finds that more than 30% of organizations have experienced a ransomware breach within a one-year span. 

Watch this on-demand webinar on how CrowdStrike Falcon Identity Protection can help you stop modern attacks from adversaries like Scattered Spider who leverage stolen credentials across a unified endpoint and identity platform to effectively stop breaches. Our identity security experts will cover the key capabilities and best practices of our unique unified approach to stopping identity-based attacks.

In this CrowdCast you will learn how Falcon Identity Protection has benefitted customers with:
-$2M savings over 3 years by consolidating endpoint and identity protection 
-85% faster responses to threats with full attack path visibility
-75% savings in compliance and support costs with Active Directory hygiene

Stop Identity-focused Adversaries with a Unified Approach to Identity Protection

SCATTERED SPIDER, COZY BEAR, and other identity-focused adversaries have made identity-based attacks on cloud environments more prevalent than ever. The alarming rise in access brokers have made it easy for adversaries to buy stolen credentials. To combat these threats, you need a trusted Identity Threat Detection and Response (ITDR) solution that goes beyond only focusing on Microsoft AD.

CrowdStrike is proud to unveil significant product innovations that extend our industry-leading ITDR solution to protect cloud-based identity environments—like Microsoft Entra ID—and support the latest authentication frameworks.

Watch this CrowdCast to:

-Learn from CrowdStrike experts as they detail the anatomy of SCATTERED SPIDER’s successful identity-based attacks.
-See how CrowdStrike Falcon® Identity Protection can safeguard your organization against the latest identity tactics, techniques, and procedures (TTPs) of today’s prolific adversaries.
-Watch a LIVE demo highlighting the latest identity protection product innovations introduced by CrowdStrike.

Tales from the Battlefield Stop Breaches by SCATTERED SPIDER and More

Whether you’re the one-person IT team, a security leader trying to get started, or an experienced IT/Security leader trying to take a rapidly growing company’s protection to the next level – keeping up with modern cybersecurity is stressful. 

Knowing the right solutions, when to implement them, and how to create a security-first culture within the entire organization is often learned through guidance and advice of trusted peers, industry experts or partners. 

Join CrowdStrike and your industry peers for a special event, as we shine the spotlight on three small business protectors and they share their perspectives on:

• Tips to ramping up your cybersecurity program - with resource challenges considered 
• The range of solutions, tools and partners that can help fast track your cybersecurity maturity
• How to build a culture of cybersecurity with executives and end users within your organization
• How partnering with CrowdStrike has helped better protect their business while reducing costs

Small Business Protectors Panel: Building a Culture of Security

Recently, COZY BEAR , a Russia state-nexus adversary (aka Midnight Blizzard, APT29 and Nobelium), conducted high-profile attacks on Microsoft’s corporate systems. The Microsoft breach — detected on January 12, while the compromise happened in late November 2023 — involved common identity techniques like password spraying and credential scanning, compromising corporate email accounts, including those of Microsoft’s senior leadership team.

Join us for this timely discussion on safeguarding your organization from modern adversaries like COZY BEAR. 

Industry experts in this CrowdCast will cover:
- How sophisticated threat actors exploit weak identity security controls
- Why existing endpoint-only solutions and the security features included in Microsoft bundles are ineffective
- How you can use CrowdStrike Falcon Identity Protection to proactively enhance identity security, and to stop attacks in real time

Stay Protected from Modern Cyberattacks with Falcon Identity Protection

Organizations often use 10+ tools for IT device and fleet management. IT and security teams find themselves hindered by disjointed point products and siloed teams, slowing down workflows to address crucial IT and security use cases like compliance and threat investigation. 

In this webinar, you’ll hear from Enterprise Strategy Group and CrowdStrike experts on the challenges facing IT and security teams and how IT automation can help you streamline operations and stop breaches. 

Discover how CrowdStrike Falcon® for IT and the unified AI-native CrowdStrike Falcon platform, with its single agent and console, helps your organization save valuable time and money by consolidating point products and breaking down barriers between IT and security.

Presenters:
Adam Roeckl, Sr. Product Marketing Manager, CrowdStrike
Gabe Knuth, Senior Analyst, Enterprise Strategy Group
Keyauri Kendrick, Sr. Technical Marketing Manager, CrowdStrike

Introducing the Next Generation of IT Automation: CrowdStrike Falcon for IT

Many organizations are struggling to keep pace in the modern threat landscape. Hindered by disjointed point products, siloed teams, and inconsistent data protection policies, defenders face adversaries who exploit these gaps with impunity. Through a series of live demos, discover the newest cutting-edge innovations in the AI-powered Falcon platform, which revolutionizes protection by unifying and disrupting legacy approaches across IT, security and data protection.

In this session you’ll see the latest innovations and roadmaps covering:

- NEW! Falcon for IT: Break down IT and security silos with automated workflows and a single lightweight agent to solve the most critical IT automation use cases
- Falcon Data Protection: Discover how organizations can securely fuel innovation with our industry-first visibility to confidently stop data leakage via Gen AI tools
- Falcon Exposure Management: Reduce risk and secure all critical attack surfaces by delivering complete visibility, AI-powered risk prioritization and point-product consolidation

Unifying Security, IT Ops & Data Protection with State of-the-Art Defenses

User identities, endpoints, applications, and networks have all turned into attack vectors, expanding the attack surface and elevating business risk.  

Point security solutions target an area but often fail to integrate well with others. This leads to a false sense of security, leaving security gaps and exposing organizations to cyber risks and costly remediation efforts. 

Beyond the Perimeter brings together leaders from Zscaler, CrowdStrike and Okta to discuss the pivotal role AI plays in cybersecurity and why best-of-breed integrations provide critical defense for a resilient end-to-end Zero Trust architecture. 

Join us to:
- Discover key considerations when building an AI-powered Zero Trust security architecture

- Learn how best-in-class integrated solutions provide superior security and improve operational efficiencies

- Hear from our customers on how to future-proof your security investments as threats evolve in the face of AI

- Watch integration demos showcasing real-life scenarios that empower security teams on how to build a robust end-to-end protection

Speakers: 
Syam Nair, CTO and EVP of R&D, Zscaler
Elia Zaitsev, CTO, CrowdStrike
Sagnik Nandy, President & Chief Development Officer, Okta
Eddie Parra, Sr. Director Partner Solutions, Zscaler 
Chris Kachigan, Vice President, Global Solution Architecture, CrowdStrike

Beyond the Perimeter 2024: Cybersecurity Designed for the AI Revolution

In the first session of the Unstoppable Innovations CrowdCast Series, Jason Waits, CISO of Inductive Automation, a CrowdStrike customer, shares how Charlotte AI — CrowdStrike’s conversational AI assistant — enables his team to turn hours of work into just minutes or even seconds. Jason will be joined by CrowdStrike’s VP and Head of Portfolio and Product Marketing, Scott Simkin, to discuss how Charlotte AI turns every user into a power user of the Falcon platform, simplifying cybersecurity management and helping security teams stop modern cyberattacks. Lucia Stanham, Sr. Product Marketing Manager at CrowdStrike will hold a demo of Charlotte AI and how it enables security teams to stay a step ahead of adversaries like COZY BEAR.

You'll also learn how Charlotte AI:

Elevates analysts of all skill levels by delivering actionable answers in easy-to-understand summaries and workflow automation
Accelerates investigation and response times and expediting workflows, from writing queries to incident investigations to summarizing threat intelligence
Enables safe, responsible adoption of generative AI with built-in controls, such as viable source data and role-based access controls

Learn more and register now to attend sessions two and three: https://www.crowdstrike.com/resources/crowdcasts/unstoppable-innovations

Accelerate | Transforming Security Operations with Generative AI

Legacy vulnerability scanners are just not cutting it. While the average breakout time for eCrime has shrunken to 62 minutes, most legacy vulnerability scanners are still taking weeks and months to complete a scan of the entire infrastructure. Outdated tooling is putting security teams on the backfoot, giving adversaries an edge.

Don’t settle for outdated methods. Discover how the emerging approach of Exposure Management innovates beyond legacy Vulnerability Management, not just in speed, but a variety of other ways, to put the power back in the hands of security teams to safeguard the modern enterprise. 

We’ll break it down by dissecting the struggles and limitations of traditional scanner-based VM approaches, discuss what exposure management is, and showcase why Exposure Management is crucial in today's dynamic threat landscape.

Join us and expert security practitioners as we reveal the game-changing ways Exposure Management empowers proactive security, surpassing legacy methods. Learn how our AI-native Crowdstrike Falcon platform, with its Falcon Exposure Management module, offers unmatched visibility across your entire attack surface and can help reduce intrusion risk by up to 50%.

Why attend?
Out with the old: Understand the limitations of legacy Vulnerability Management in today's threats.
In with the new: Explore the importance of Exposure Management in risk management.
Real power in action: See and discover how Exposure Management leads the charge in proactive security

Don't miss your chance to become more aware of exposure management strategies and how you can proactively defend your enterprise. Join us as we unveil the future of security with AI-native Exposure Management.

How AI-Powered Exposure Management Outpaces Legacy Vulnerability Management

Organizations have adapted to a cloud-first world but still face challenges implementing an effective data protection strategy that goes beyond just compliance. Despite the use of endpoint data loss prevention (DLP) tools, many organizations still can’t confidently identify sensitive data movement — from origin to destination — without impacting the user experience and business productivity.
 
CrowdStrike and Enterprise Strategy Group (ESG) have teamed up to provide insights and best practices on the latest data protection trends. Join this CrowdCast as we discuss:
-    The latest data protection trends
-    Challenges with traditional DLP implementations
-    How to address data leaks through Generative AI
-    How to protect data without impacting user experience

Effective data protection solves security, not just compliance

An average enterprise manages 45 different security tools. The average time for a lateral attack is less than 80 minutes.* As cyber threats evolve, managing security tools to combat these threats is growing increasingly complex.

How do you solve this security puzzle? Cybersecurity platform consolidation. Enhance your organization’s ability to manage security and combat threats by bringing harmony and integration to your team’s security stack.

Join this unique event to hear customers share their keys to success in solving this complex security challenge. You’ll hear from:
- Matt Morgan, VP, Customer & Integrated Marketing at CrowdStrike, on getting started in your consolidation journey
- Imran Akhtar and Robert Peden, Cybersecurity Managers at Cox Automotive, about how they achieved consolidation success with the CrowdStrike + Zscaler joint solution
- Ken Collins, Sr. Director of Information Security at Sunbelt Rentals, about how they utilize the CrowdStike partner ecosystem to effectively manage their security tools
- Andrew Candella, Senior Analyst, Identity Management at Ciena, as he shares how he uncovered and mitigated app overlap in his organization 
* https://www.crowdstrike.com/cybersecurity-101/secops/cybersecurity-platform-consolidation/

Customer Spotlight: The Value of Cybersecurity Simplicity

By now, you’ve seen all the acronyms and buzzwords: MDR, XDR, SIEM, SOC, NGAV…The list goes on.
 
Keeping up with today’s advanced threat landscape is already hard enough, but knowing which technologies, solutions, and partners are necessary for your business to stay secure is also difficult to navigate.
 
Join CrowdStrike for a virtual lunch and learn as we take a step back and provide detail on the acronyms and trends you’re seeing from modern cybersecurity vendors.
 
You’ll learn:
 
• The 101 overview on solutions like MDR, XDR, SIEM and SOC
• Why these solutions matter to you and how businesses are leveraging them today
• Understanding the benefits of managed security solutions and when it may be time to consider them

MDR, XDR, SIEM, and SOC Explained

SIEM

Threat Hunting

IT Automation

Threat Intelligence

Threat Detection

Endpoint Security

Endpoint Management

AIOps

Artificial Intelligence

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

MDR, XDR, SIEM, and SOC Explained

Presented by

About this talk

More from this channel