Threat Techniques for the People: Prevalence, Priorities, Detection, Direction

As security professionals, it’s nearly impossible to sort out which information is relevant and which isn’t. This industry has its own media ecosystem, a booming Twitter research scene, and vastly more industry events than there are days in the year. While the news is talking about state-level adversaries and zero-days, Twitter is awash with observations from researchers and vendors about the malware du jour and other varyingly useful information. All the while, you’re left wondering what matters to you and the organization you’re tasked with defending. It is, to put it succinctly, overwhelming. In this talk, we’ll preview Red Canary’s 2021 Threat Detection Report in order to sort out which threats and adversary techniques were most prevalent throughout 2020. By understanding the threats that are likely to materialize in your environment—and the techniques that adversaries have employed—you can start setting detection priorities based on real-world, confirmed threat data.