Threat hunting and SOC teams find themselves in an ever-changing landscape where identifying infrastructure TTPs and adversary domains can be critical to stay ahead of attacks. Manual processes can only get you so far before you’re inundated with so much noise that the bigger picture is lost; parsing through that much data manually hinders prioritization of what’s most important and correlating relevant data points in a campaign becomes challenging.
With that said, you can increase your speed of analysis using security orchestration automation response (SOAR) platforms to help manage and better understand alerts encountered on a daily basis.
Join DomainTools and ISC2 on March 7 to discuss how to separate signal from noise and to automate complex actions and investigations with world class domain and DNS data.
Presenter: Taylor Wilkes-Pierce, Global Director of Solutions Engineering, DomainTools
Moderator: Anthony Lim, CSSLP, Director Advocate, (ISC)² Singapore Chapter