Name: Defending Against Evolving Ransomware Attacks: Modern Security that Stays Ahead of the Adversary
Start: 2024-09-27T22:57:00Z
End: 2024-09-27T22:57:42.000Z
Location: BrightTALK
Rating: 5

CrowdStrike has redefined security with the world’s most advanced cloud-native platform for protecting critical areas of risk — endpoints and cloud workloads, identity, and data. The Falcon® platform harnesses real-time threat intelligence and enterprise telemetry to automate threat prevention, detection, remediation, hunting, and vulnerability observability through a single, intelligent, lightweight agent.

Safeguarding health systems against cyberattacks is a round-the-clock responsibility. 75% of all detections are malware-free activities and involve identity techniques, as analyzed by our CrowdStrike Overwatch team. What this means is most adversaries are not “breaking in” but are “logging in” oftentimes without being detected by stealing credentials and bypassing unmanaged endpoints to execute an attack. 

Listen to this on-demand session where CrowdStrike healthcare executive strategists, Todd Felker and Wael Younan, discuss ways to prevent your health system from identity-related attacks. Together, they explore how cross-domain visibility and enforcement can enable security teams to detect lateral movement, gain comprehensive insight into attack paths, and identify malicious activity.

Key takeaways: 
• How adversaries are using identity attacks and their impact to healthcare
• Use of Remote Monitoring and Management (RMM) tools and social engineering tactics
• Understanding of Access Brokers and their involvement in identity attacks
• Key solutions to identify sophisticated adversary access methods to help prevent and protect against them

Combating Identity Attacks on Your Health System CrowdStrike Healthcare Executive Insights webinar

Hear the latest adversary trends and tradecraft from our report to gain firsthand insights from the CrowdStrike 2024 Threat Hunting Report.

This briefing will include insights into:
• New adversaries and behaviors
• Increasing adversary stealth and sophistication
• Modern threats to cloud, identity and endpoint environments

CrowdStrike 2024 Threat Hunting Report Briefing

Last year, cloud intrusions surged by 75% due to escalating activity by cloud-conscious adversaries like FANCY BEAR, SCATTERED SPIDER and LABYRINTH CHOLLIMA.1 

This webinar exposes their tactics and shows how these adversaries infiltrate and exploit cloud environments. Discover how advanced cloud detection and response (CDR) capabilities can keep you one step ahead of these threats.

Join us to explore:

• The evolving cloud threat landscape: Understand the latest trends in how adversaries target cloud infrastructures and the methods they use to exploit vulnerabilities.
• Best practices for cloud detection and response: Learn actionable strategies and best practices to enhance your cloud security posture, improve detection capabilities, and ensure a rapid response to potential threats.
• In-depth demo of advanced CDR: See how CrowdStrike CDR prioritizes detections in real time so you can respond faster to cloud threats.

Outpacing Threats in the Cloud: Detection and Response Streamlined

Civilian government agencies need robust solutions that align with stringent federal mandates and Zero Trust security frameworks. CrowdStrike not only meets all federal mandates but also ensures compliance with M-21-31, effectively supporting civilian agencies in meeting critical cybersecurity requirements. 

Key Topics of Discussion:
• Interactive Demo of Falcon Next-Gen SIEM: Witness the real-time capabilities of our advanced SIEM technology and see how we stop breaches with unprecedented speed.
• Compliance and Efficiency: Learn how our solution aids in adhering to M-21-31 requirements and fits within Zero Trust architectures.
• Cost-Effective Data Solutions: Explore how CrowdStrike provides cost-effective long-term storage solutions that outpace legacy SIEMs in handling data growth.
• NG-SIEM Roadmap: Discover the future developments for Falcon Next-Gen SIEM and see how to accelerate deployment with a growing array of out-of-the-box connectors.
• AI-powered Threat Hunting: See how AI-powered detections can elevate analysts of all skill levels and accelerate incident response capabilities.

Who Should Watch:
• Federal CISOs and CIOs
• Cloud Security Architects
• IT and Cybersecurity Professionals
• Federal Risk and Compliance Officers

Securing Civilian Agencies: Next-Gen SIEM for Enhanced Protection

Join CrowdStrike to explore the capabilities of Falcon Next-Gen SIEM, designed specifically for DoD and military branches. This webinar will showcase the strengths of CrowdStrike's LogScale and FSR solution. Not only does it meet the NSA’s guidelines for visibility and analytics under the Zero Trust framework, but it also boasts DoD IL5 authorization. CrowdStrike provides comprehensive protection for endpoints, identities, and workloads.

Key Topics of Discussion:
• Interactive Demo of Falcon Next-Gen SIEM: Witness the real-time capabilities of our advanced SIEM technology and see how we stop breaches with unprecedented speed.
• DoD Zero Trust Strategy Compliance: Learn how our solution supports the DoD's Zero Trust architecture, enhancing security across endpoint, identity, and workload protection.
• Cost-Effective Data Solutions: Explore how CrowdStrike provides cost-effective long-term storage solutions that outpace legacy SIEMs in handling data growth.
• NG-SIEM Roadmap: Discover the future developments for Falcon Next-Gen SIEM and see how to accelerate deployment with a growing array of out-of-the-box connectors.
• AI-powered Threat Hunting: See how AI-powered detections can elevate analysts of all skill levels and accelerate incident response capabilities.

Supercharge Your SOC Performance: Enhancing DoD Threat Hunting with Falcon LogScale

By now, you’ve seen all the acronyms and buzzwords: MDR, XDR, SIEM, SOC, NGAV…The list goes on.
 
Keeping up with today’s advanced threat landscape is already hard enough, but knowing which technologies, solutions, and partners are necessary for your business to stay secure is also difficult to navigate.
 
Join CrowdStrike for a virtual lunch and learn as we take a step back and provide detail on the acronyms and trends you’re seeing from modern cybersecurity vendors.
 
You’ll learn:
 
• The 101 overview on solutions like MDR, XDR, SIEM and SOC
• Why these solutions matter to you and how businesses are leveraging them today
• Understanding the benefits of managed security solutions and when it may be time to consider them

MDR, XDR, SIEM, and SOC Explained

Join Alex Walker, CrowdStrike's Counter Adversary Operations Practice Lead, for an in-depth session on the latest sophisticated nation-state and criminal intrusions disrupted by cross-domain threat hunting operations. Discover the threats posed by notorious eCrime groups and nation-state adversaries.

Drawing from over 200 daily instances of advanced intrusion attempts, Alex will discuss specific methods adversaries use to infiltrate networks—primarily through valid credentials and exploiting critical technologies—and effective intelligence-driven strategies to mitigate risk.

Don't miss this opportunity to gain valuable insights on safeguarding your networks, technology stacks, and third-party vendor relationships against sophisticated hands-on-keyboard threats.

Cyber Intrusion Insights: Threat Hunting to Disrupt Cross Domain Threats

Cloud intrusions increased 75% over the past year — a clear indicator that attack surfaces are becoming more dynamic and sophisticated in the cloud. While 2023 saw some cloud infrastructure and workload protection consolidation into unified platforms, continuous delivery and ineffective application security still elevates overall risk and leaves a gaping hole for adversaries to exploit.

Join us for a review of the current state of application security, a deeper dive into the challenges of securing applications, and see how CrowdStrike’s AI-native modern cloud security platform protects applications from code to runtime.

What to expect in this webinar:

• Hear firsthand from an ASPM customer
• Get insights into the challenges security teams face as developers push application changes more frequently
• Learn how to empower developers to create more secure and resilient applications

Cloud Security Consolidation Extends Protection From Code to Runtime

Cloud-conscious adversaries are relentlessly targeting the cloud and using increasingly sophisticated TTPs. CrowdStrike has introduced several enhancements to Falcon Cloud Security, including improved pre-runtime and runtime detections, enhanced application risk scoring, dynamic application inventory filtering and more. Join our expert product team as they take you through these developments and get an inside look at how each feature works to protect you against adversaries targeting the cloud.

What to expect during this video:

• A rollup of recent Falcon Cloud Security feature releases
• In-depth product demos of the new features
• An advance look at what’s coming next for Falcon Cloud Security, including highlights for the 2024 product roadmap

Revolutionizing Cloud Security with the Industry's Most Complete CNAPP

Cloud-conscious adversaries are relentlessly targeting the cloud and using increasingly sophisticated TTPs. CrowdStrike has introduced several enhancements to Falcon Cloud Security, including improved pre-runtime and runtime detections, enhanced application risk scoring, dynamic application inventory filtering and more. Join our expert product team as they take you through these developments and get an inside look at how each feature works to protect you against adversaries targeting the cloud.

What to expect in this video:

• A rollup of recent Falcon Cloud Security feature releases
• In-depth product demos of the new features
• An advance look at what’s coming next for Falcon Cloud Security, including highlights for the 2024 product roadmap

Application code changes more rapidly than ever through DevOps and CI/CD. The speed and dynamic nature of application development make it nearly impossible for organizations to keep an up-to-date inventory of their applications and dependencies, leading to dangerous blind spots that adversaries can exploit. Traditional cloud security posture management (CSPM) solutions are totally unaware of the risk that exists in the code itself, which leaves many organizations vulnerable. 

Organizations must balance the reward of continuous innovation with the risk of constant change — but how? 

Join us for a virtual 45-minute deep dive to learn how to: 

•  Secure applications in production using application security posture management (ASPM)
•  Reduce time spent manually reconciling data flows  
•  Empower developers to create more secure and resilient applications "

Falcon Insider's Demo: Securing Applications at Scale

Security, at its core, is a data problem. As data volumes grow exponentially (to the tune of 28% CAGR), organisations struggle to collect, enrich and correlate their security data.

As a result, today’s data onboarding processes involve countless log formats and ingestion methods, resulting in deployment delays, cost overruns and employee burnout. Gaining complete visibility of your data across your environments, no matter where it lies, is critical for security teams to stay ahead of modern threats.

In this session, Ed Bailey, Principal Technical Evangelist at Cribl, and Arfan Sharif, Director - Technical Marketing of NG-SIEM & XDR at CrowdStrike, will share and explore:
• Mid-year review of 2024 IT and Security key trends and predictions
• The evolution of the SOC to address today’s threat challenges
• Building an enterprise security data strategy – tips and best practices

Building an Enterprise Data Strategy for the Modern SOC

Adversaries using compromised credentials are increasing in numbers and sophistication. IDC finds that more than 30% of organizations have experienced a ransomware breach within a one-year span. 

Watch this on-demand webinar on how CrowdStrike Falcon Identity Protection can help you stop modern attacks from adversaries like Scattered Spider who leverage stolen credentials across a unified endpoint and identity platform to effectively stop breaches. Our identity security experts will cover the key capabilities and best practices of our unique unified approach to stopping identity-based attacks.

In this CrowdCast you will learn how Falcon Identity Protection has benefitted customers with:
-$2M savings over 3 years by consolidating endpoint and identity protection 
-85% faster responses to threats with full attack path visibility
-75% savings in compliance and support costs with Active Directory hygiene

Stop Identity-focused Adversaries with a Unified Approach to Identity Protection

SCATTERED SPIDER, COZY BEAR, and other identity-focused adversaries have made identity-based attacks on cloud environments more prevalent than ever. The alarming rise in access brokers have made it easy for adversaries to buy stolen credentials. To combat these threats, you need a trusted Identity Threat Detection and Response (ITDR) solution that goes beyond only focusing on Microsoft AD.

CrowdStrike is proud to unveil significant product innovations that extend our industry-leading ITDR solution to protect cloud-based identity environments—like Microsoft Entra ID—and support the latest authentication frameworks.

Watch this CrowdCast to:

-Learn from CrowdStrike experts as they detail the anatomy of SCATTERED SPIDER’s successful identity-based attacks.
-See how CrowdStrike Falcon® Identity Protection can safeguard your organization against the latest identity tactics, techniques, and procedures (TTPs) of today’s prolific adversaries.
-Watch a LIVE demo highlighting the latest identity protection product innovations introduced by CrowdStrike.

Tales from the Battlefield Stop Breaches by SCATTERED SPIDER and More

Whether you’re the one-person IT team, a security leader trying to get started, or an experienced IT/Security leader trying to take a rapidly growing company’s protection to the next level – keeping up with modern cybersecurity is stressful. 

Knowing the right solutions, when to implement them, and how to create a security-first culture within the entire organization is often learned through guidance and advice of trusted peers, industry experts or partners. 

Join CrowdStrike and your industry peers for a special event, as we shine the spotlight on three small business protectors and they share their perspectives on:

• Tips to ramping up your cybersecurity program - with resource challenges considered 
• The range of solutions, tools and partners that can help fast track your cybersecurity maturity
• How to build a culture of cybersecurity with executives and end users within your organization
• How partnering with CrowdStrike has helped better protect their business while reducing costs

Small Business Protectors Panel: Building a Culture of Security

Recently, COZY BEAR , a Russia state-nexus adversary (aka Midnight Blizzard, APT29 and Nobelium), conducted high-profile attacks on Microsoft’s corporate systems. The Microsoft breach — detected on January 12, while the compromise happened in late November 2023 — involved common identity techniques like password spraying and credential scanning, compromising corporate email accounts, including those of Microsoft’s senior leadership team.

Join us for this timely discussion on safeguarding your organization from modern adversaries like COZY BEAR. 

Industry experts in this CrowdCast will cover:
- How sophisticated threat actors exploit weak identity security controls
- Why existing endpoint-only solutions and the security features included in Microsoft bundles are ineffective
- How you can use CrowdStrike Falcon Identity Protection to proactively enhance identity security, and to stop attacks in real time

Stay Protected from Modern Cyberattacks with Falcon Identity Protection

Organizations often use 10+ tools for IT device and fleet management. IT and security teams find themselves hindered by disjointed point products and siloed teams, slowing down workflows to address crucial IT and security use cases like compliance and threat investigation. 

In this webinar, you’ll hear from Enterprise Strategy Group and CrowdStrike experts on the challenges facing IT and security teams and how IT automation can help you streamline operations and stop breaches. 

Discover how CrowdStrike Falcon® for IT and the unified AI-native CrowdStrike Falcon platform, with its single agent and console, helps your organization save valuable time and money by consolidating point products and breaking down barriers between IT and security.

Presenters:
Adam Roeckl, Sr. Product Marketing Manager, CrowdStrike
Gabe Knuth, Senior Analyst, Enterprise Strategy Group
Keyauri Kendrick, Sr. Technical Marketing Manager, CrowdStrike

Introducing the Next Generation of IT Automation: CrowdStrike Falcon for IT

Ransomware attacks have evolved. Armed with stealthy, sophisticated malware, today’s ransomware is difficult to detect and even more challenging to halt. Today, 75% of attacks are malware free and impossible for legacy solutions to detect.
Ransomware attacks pose a significant threat to your business, your reputation, and the trust of your customers. Traditional antivirus and endpoint protection measures are no longer sufficient.
Join CrowdStrike for this exclusive event to:
● Gain insights into the evolving nature of ransomware.
● Recognize the limitations of traditional security tools that leave you vulnerable in today’s threat landscape.
● Watch a demo of the latest antivirus and modern endpoint security solutions that will keep you ahead of cybercriminals and ransomware attacks.

Defending Against Evolving Ransomware Attacks: Modern Security that Stays Ahead of the Adversary

Ransomware

ransomware attacks

Malware

cybercriminals

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Defending Against Evolving Ransomware Attacks: Modern Security that Stays Ahead of the Adversary

Presented by

About this talk

More from this channel