Name: TIBER-EU: Lessons Learned from the TI and RT Perspective
Start: 2025-04-03T09:00:00Z
End: 2025-04-03T09:00:37.000Z
Location: BrightTALK
Rating: 5

Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats. Mandiant is now part of Google Cloud.

The M-Trends 2025 Report offers a deep dive into the latest global cyber trends and attacker tactics. Based on Mandiant's frontline incident response and threat intelligence from January 1, 2024 to December 31, 2024, this report helps readers stay ahead of the curve by providing insights on the evolving cyber threat landscape in EMEA.

Join our expert threat analyst, Jamie Collier, as he unpacks these trending metrics and significant adversary behaviours, and learn how these findings can enhance your security strategy against future attacks.

Topics will include:
*Incident response metrics, including top detection sources and initial infection vectors
*Industry targeting trends

M-Trends 2025: EMEA By the Numbers

In today's rapidly evolving digital landscape, startups and scaleups often face the dual challenge of accelerating growth while managing limited resources. This dynamic environment makes them prime targets for sophisticated cyber threats. Join experts from Google Threat Intelligence and Mandiant as they delve into the most pressing cybersecurity challenges confronting digital-native businesses.

Securing the Digital Frontier: Navigating Cyber Threats in Startups and Scaleups

This webinar, the final session in The Defender's Advantage virtual series, focuses on how Google Cloud Security can help organizations of all sizes activate their defender's advantage by guiding them through the activation of the six critical functions of cyber defense.    

You will learn about:
*The Defender's Advantage methodology and its benefits    
*How Google Cloud Security solutions map to the six critical functions of cyber defense  
*Real-world examples and case studies of how organizations have successfully implemented The Defender's Advantage with Google Cloud Security    

Join us to discover how to make Google part of your security team. 

About The Defender’s Advantage:
Google Cloud Security published The Defender’s Advantage, a cyber defense framework to help all organizations prepare for and mitigate future security incidents. We believe that security teams like yours have the ultimate cyber defense advantage, the ability to control the environment being attacked.  Learn more here: https://cloud.google.com/security/resources/defenders-advantage

Activate the 6 critical functions of cyber defense with Google Cloud Security [The Defender's Advantage series, part 4]

Modern applications increasingly rely on AI, introducing unique security challenges that demand a holistic approach to security architecture. This webinar dives deep into securing AI-powered applications, moving layer by layer from data security to infrastructure, model protection, and application-level defenses. We'll examine Google's Secure AI Framework (SAIF) as a blueprint for building robust security into each component of your AI systems, ensuring resilience against evolving threats.

Protecting AI-Powered Applications: A Deep Dive into Security Architecture

In a world where critical infrastructure is increasingly reliant on digital technologies, cybersecurity for OT (Operational Technology) and ICS (Industrial Control Systems) has become a crucial factor. In this webinar, we will discuss, among other topics, the significance of Red Teaming as part of a comprehensive security strategy.

Topics Covered include:

- Industrial cybersecurity, and why is it so important
- The types of OT attacks that have occurred in the past
- The challenges industrial cybersecurity face today
- Solutions and best practices available for protecting OT/ICS systems
- The role Red Teaming plays in a comprehensive security strategy

Together, we will analyze the challenges of industrial cybersecurity and present concrete solutions to address them.

Industrial Cybersecurity: Red Teaming as Part of a Comprehensive Security Strategy

Security operations is notoriously difficult and most organizations fall short of their expected security outcomes when it comes to threat detection, investigation, and response (TDIR). Why is that? There’s the standard answers of lack of data and context, limited attacker insight, and manual and complex processes. But there’s an additional challenge - the ability to use metrics to demonstrate the value that security teams bring to the larger organization.

Security leaders have struggled to identify metrics that demonstrate the value that the SOC delivers and how it performs, as the standard metric of success in the SOC is avoiding a breach or stopping it quickly. Thanks to the vast array of tools security pros use everyday, it’s also very difficult to build a system to properly track metrics in the SOC.

So how do you choose the metrics that matter? Join Google’s Anton Chuvakin and guest speaker, Forrester’s Allie Mellen and dig into the paradox of metrics; the easy metrics versus the metrics you really want, why we can’t agree on metric recommendations and more.

The SOC Metrics that Matter…or Do They?

Cyber defense is not just about preventing attacks; it's also about effectively responding to and recovering from incidents. This webinar will focus on the critical cyber defense functions of Validation, Response, and Mission Control, examining how they contribute to a comprehensive and resilient cyber defense program.

What you will learn:
*How to rigorously test and validate your entire cyber defense program to identify areas of improvement, and ensure preparedness against real-world threats.
*How to build and implement an effective incident response plan, from preparation and containment to eradication and recovery.
*How centralized coordination and management can enhance your organization's overall cybersecurity posture.

Join us to gain practical knowledge and actionable strategies for elevating your organization's cyber resilience through robust validation, response, and mission control capabilities.

About The Defender’s Advantage:
Google Cloud Security published The Defender’s Advantage, a cyber defense framework to help all organizations prepare for and mitigate future security incidents. We believe that security teams like yours have the ultimate cyber defense advantage, the ability to control the environment being attacked. Download The Defender's Advantage ebook here: https://cloud.google.com/security/resources/defenders-advantage

Activate continuous security testing to improve cyber response [The Defender's Advantage virtual series, part 3]

Security operations teams have their hands full, especially as both data volumes and cyber threats continue to increase across on-premises data centers, endpoints, and clouds. Traditional security information and event management (SIEM) systems have evolved over the years for greater integration and visibility, and yet they remain complex beasts to manage. Meanwhile, cybersecurity talent gaps persist. In this webinar, experts from IDC and Google Cloud discuss security and SIEM trends for 2025. They also offer best practices to create a proactive security operations environment that results in greater business value, including improved productivity, a data- and intelligence-led security posture, scalability, and cost benefits.

Best practices to boost security operations in 2025

SIEM's complicated evolution has resulted in unsustainable cost increases, scope creep, and the occasional declaration that the product space is essentially dead. Thanks to deep expertise in search and data management, access to OSINT and frontline intelligence, and AI-infused features, Google SecOps demonstrates that the SIEM still has plenty of gas in the tank. Discover how SecOps is ushering in the "SIEM's Third Act" by addressing the limitations of traditional SIEMs and empowering security teams with cutting-edge tools for threat-informed defense.

What You’ll Learn:
 - The Evolution of SIEM: We'll examine the challenges posed by the increasing complexity and scope of traditional SIEMs, highlighting the need for a more streamlined and effective approach.
 - Introducing Google SecOps: Learn how Google SecOps redefines threat detection and response by leveraging the power of Mandiant and VirusTotal threat intelligence, robust SOAR capabilities, and AI-enhanced workflows.
 - Deep Dive into Key Features: We'll explore the core functionalities of Google SecOps, including data collection, threat detection, automation, and case management.
 - Differentiation in a Crowded Market: We’ll conclude by discussing key differences in Google’s approach as compared to traditional SIEM platforms, and why SecOps is well worth a look.

Google SecOps: The SIEM’s Third Act

Cryptography underpins the security of sensitive data, ensuring its protection during storage, transit, and authentication processes. However, the rapid advancements in quantum computing present a looming threat to modern cryptographic protocols. The emergence of Cryptographically Relevant Quantum Computers (CRQCs) could render current encryption methods obsolete, exposing data to potential compromise and weakening foundational security controls like digital signatures.

In this insightful webinar, Dr. Stephen Begley, Mandiant UKI Red Team Lead, will explore:

- The Quantum Threat: How CRQCs will disrupt today’s cryptographic standards.
- Post-Quantum Solutions: Insights into NIST’s Post-Quantum Cryptography (PQC) standards and their potential to safeguard future security.
- Actionable Steps: Best practices for organisations to transition to quantum-resistant technologies and initiate a post-quantum cryptographic transformation.

This session is ideal for cybersecurity professionals, IT leaders, and decision-makers who want to stay ahead of evolving threats and secure their organisations for a post-quantum future.

Prepare today to protect your secrets tomorrow.

Defending Today’s Secrets from Tomorrow’s Attacks

Join Mandiant's leading experts from Incident Response, Strategic Services, Cyber Threat Intelligence, and Security Transformation for a unique webinar that dissects the ransomware threat landscape from all angles.

Gain invaluable insights into:

- The Attacker's Perspective: Our Intelligence team reveals the latest TTPs (Tactics, Techniques, and Procedures) employed by ransomware groups, their motivations, and evolving attack patterns.

- On-the-Ground Response: Hear firsthand experiences from our Incident Response team, who will share lessons learned from the front lines of ransomware attacks and discuss strategies for effective containment and recovery.

- Proactive Defense: Our Strategic Services experts will guide you through proactive measures to bolster your organization's defenses and reduce your ransomware risk profile.

- Building Resilience: The Security Transformation team will delve into building a robust security posture and implementing effective remediation strategies to minimize the impact of a ransomware attack.

This webinar is a must-attend for CISOs, security professionals, IT leaders, and anyone responsible for protecting their organization from the growing threat of ransomware.

Deconstructing Ransomware: A Mandiant and Google Threat Intelligence perspective

A crucial aspect of effective cyber defense is the ability to produce and disseminate actionable intelligence into the hands of various security functions, in a format and language they can understand and use to make decisions. This allows for informed decision-making and proactive threat mitigation. 

This webinar will delve into the critical functions of Intelligence, Detection, and Hunting, exploring how they work together to create a robust and resilient security posture. 

You will learn:
*How to effectively gather, analyze, and operationalize threat intelligence to inform your cyber defense strategy
*Best practices for developing and implementing high-fidelity detections that align with attacker tactics and techniques
*Methodologies and tools used to proactively hunt for threats and identify hidden adversaries in your environment

Join us to gain valuable insights and practical strategies for strengthening your organization's cyber defenses through an intelligence-led approach to detection and hunting.

Intelligence-led detection and threat hunting  [The Defender's Advantage virtual series, part 2]

Cyber threats are constantly evolving. Learn how to stay ahead of them in 2025 with security expert Jamie Collier.

Join this deep-dive session based on the Cybersecurity Forecast 2025 report, where we will cover key trends and insights to help strengthen your cyber defenses in the year ahead, including:

*Attacker use  of AI
*The evolving threat landscape from Russia, China, Iran, and North Korea
*Ransomware and multifaceted extortion as the most disruptive form of cyber crime
*The growing threat of infostealer malware

Google Cloud EMEA Cybersecurity Forecast 2025

2024 Enterprise Strategy Group survey data shows us that 99% of organizations are reporting that AI is improving employees productivity and job satisfaction. Investing in security operations (SecOps) processes is a natural extension of this trend, in which AI-fueled threat intelligence, endpoint protection, and SIEM can level-up your proactive security and attack prevention prowess.
 But how do you ensure these AI implementations bear fruit? 
Alongside experts from Google Cloud Dave Gruber, Principal Analyst of Ransomware, SecOps & Services at ESG, unpacks the practical use cases and applications for AI in SecOps.
 Explore the real impact of applying AI within your SecOps functions as we unveil:
• 5 top use cases—including threat hunting, detection & response engineering, and malware analysis
• Why you need a security-specific LLM for the job (vs. a general purpose LLM)
And Google Cloud’s Gemini in Security Operations with a real-time demo.

Practical use cases for AI in SecOps with Google Cloud and ESG

In einer Welt, in der kritische Infrastrukturen immer stärker von digitalen Technologien abhängig sind, wird die Cybersicherheit von OT- und ICS-Systemen zu einem entscheidenden Faktor. Wir möchten Sie daher herzlich zu unserem Webinar einladen, in dem wir unter anderem die Bedeutung von Red Teaming als Teil einer ganzheitlichen Sicherheitsstrategie erklären.

Termin: Mittwoch, 4. Dezember, 10:00 Uhr

Themenschwerpunkte:

- Was ist industrielle Cybersicherheit und warum ist sie so wichtig?
- Welche Arten von OT-Angriffen gab es in der Vergangenheit?
- Vor welchen Herausforderungen steht die industrielle Cybersicherheit heute?
- Welche Lösungen und Best Practices gibt es zum Schutz von OT/ICS-Systemen?
- Welche Rolle spielt Red Teaming in einer umfassenden Sicherheitsstrategie?

Gemeinsam analysieren wir die Herausforderungen der industriellen Cybersicherheit und zeigen Ihnen konkrete Lösungsansätze auf.

Industrielle Cybersicherheit: Red Teaming als Teil einer ganzheitlichen Sicherheitsstrategie

Password leaks and data breaches are increasing, exposing user credentials to cybercriminals.

Protect your users and your business with proactive password leak detection.

Register now for this webinar to:
> Understand the scale of password leaks and how they're exploited.
> Discover how reCAPTCHA password leak detection provides insights into leaked credentials  before they're misused.
> Learn how to set up password reset and other mitigation steps empower users to protect their accounts immediately.

Register now to learn how to safeguard your users and business by implementing proactive password security measures that detect and respond to threats.

Beyond Bots: Protecting Your Users from Password Leaks with reCAPTCHA

Mandiant Managed Defense presents a quarterly webinar series, "Tales from the Trenches," to help you navigate the ever-evolving threat landscape. Our security experts will dive into the latest malware and attack trends they've encountered in the previous quarter. You'll gain valuable insights into how these threats were detected, along with actionable advice to strengthen your own defenses.
In the second installment of the series, Managed Defense Consultants will detail findings from July through September 2024.

Tales from the Trenches: Malware and attack trends from Managed Defense, Q3 2024

In this session Mandiant Consultants will share some of the lessons learned during TIBER tests both from the perspective of the Threat Intelligence and the Red Team provider.

Key topics covered in this webinar will include:

- Common pitfalls and challenges encountered during TIBER assessments
- Best practices for integrating threat intelligence and red teaming into your assessment strategy
- Innovative methodologies and tools for maximising the effectiveness of your TIBER assessment
- Actionable takeaways and expert guidance for ensuring a smooth and successful TIBER assessment experience

TIBER-EU: Lessons Learned from the TI and RT Perspective

Cyber Attacks

Cyber Defence

Threat Analysis

Threat Detection

Threat Hunting

Threat Assessment

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

TIBER-EU: Lessons Learned from the TI and RT Perspective

Presented by

About this talk

More from this channel