Name: Threat Hunting with VirusTotal - Episode 5
Start: 2024-01-11T16:00:00Z
End: 2024-01-11T16:01:05.000Z
Location: BrightTALK
Rating: 4.4

Transform your cybersecurity with frontline intelligence, modern security operations and AI-powered cloud innovation.

Mandiant Managed Defense presents a quarterly webinar series, "Tales from the Trenches," to help you navigate the ever-evolving threat landscape. Our security experts will dive into the latest malware and attack trends they've encountered in the previous quarter. You'll gain valuable insights into how these threats were detected, along with actionable advice to strengthen your own defenses.

In the second installment of the series, Managed Defense Consultants will detail findings from April through June 2024, including:

*Exploiting tax season with tax-theme phishing emails to deliver DARKGATE malware 
*Malicious JavaScript droppers from attempts to download pirated films

Tales from the Trenches: Malware and attack trends from Managed Defense, Q2 2024

Organizations today face the growing challenge of pulling actionable insights from the noise surrounding generative AI, as media hype often overshadows the technology's practical implications. Because of this, it’s critical to have a clear understanding of what generative AI actually is and what it isn't.

In this webinar, we will demystify the benefits, challenges, and risks of AI based on our frontline observations. From there, we will help you adopt a practical framework to assess the security of AI in your environment and outline actionable strategies to improve your specific AI security approach.

You will also walk away with knowledge of a three-pronged approach that organizations can take to secure their existing AI solutions by:

*Assessing your security posture
*Performing threat modeling for your AI solutions
*Executing threat hunting across your AI pipeline

Presenters: 
Muhammad Muneer, Principal Consultant, Mandiant, Google Cloud Security
Dan Browne, Senior Consultant, Mandiant, Google Cloud Security
Jennifer Guzzetta, Product Marketing Manager, Mandiant, Google Cloud Security (Moderator)

An Actionable Approach to Assess and Improve the Security of Your AI Solutions

Elevate your threat hunting expertise by joining a live session with a leading Google Threat Intelligence researcher and a seasoned threat hunting expert. In this hands-on session, we'll guide you through the entire threat hunting process, from crafting your pipeline to executing various hunt types. We'll delve into the strategic and tactical use of Google Threat Intelligence to uncover critical insights, identify pivot points, and pinpoint additional indicators of compromise (IOCs) for your hunts.

Threat Hunting with Google Threat Intelligence

Join our webinar to learn how AI in Google Threat Intelligence helps your team uncover hidden threats, streamline investigations, and make faster, more informed decisions. See how AI is transforming threat intelligence in real-world scenarios.

Gemini in Threat Intelligence analyzes vast datasets and acts as a force multiplier, immediately surfacing threats most relevant to your unique risk profile, reducing the noise of generic alerts. It continuously learns from your actions, tailoring its output to become increasingly relevant to your specific needs over time.

Use Cases in Threat Intelligence: Leveraging Gemini

SMS toll fraud, also known as SMS pumping, is a sophisticated cyberattack targeting businesses worldwide. Malicious actors exploit vulnerabilities in your SMS systems, generating fraudulent charges by sending high volumes of messages to premium-rate numbers. This results in significant financial losses, often reaching thousands or even millions of dollars, leaving your business liable for the fraudulent activity.

Register for this webinar to gain a comprehensive understanding of SMS toll fraud and learn actionable strategies to protect your organization.

Key topics:
> Gain insights into the complex tactics and techniques used by fraudsters to exploit your SMS infrastructure.
> Understand the direct and indirect costs of SMS toll fraud, including financial losses, operational disruptions, and potential reputational damage.
> Discover industry-leading strategies and best practices to strengthen your overall SMS security posture and proactively mitigate future threats.

The Hidden Cost of SMS Toll Fraud: Strategies to Defend Against Costly Attacks

Whether you’re the OG or new to the SOC, AI can help you save time, get results faster, and reduce stress. Join us to see how Google Security Operations practically applies AI to help teams create queries, assist in investigations, generate detections, summarize large amounts of data, and build playbooks. We’ll give you a tour of where you’ll find AI capabilities in the product, how best to use them, and which use cases work best.

Work Smarter, Not Harder with Gemini in Security Operations

AI is rapidly changing the way we work and security professionals are not only thinking about how to apply generative AI to help them in their jobs, but also how to safeguard AI systems in their organizations as these tools become more prevalent. This session will outline how Google Cloud can support both of these efforts. Join us as we unpack our Product Vision for AI-Powered Security, as well as share how we are equipping defenders with strategies  and services to secure your AI data, models, applications, and infrastructure.

Securing the Future: The intersection of AI and cybersecurity

We’ve only just begun to realize the power of applying generative AI to security, but organizations using Gemini are already seeing improvement in how they manage complex security incidents. Learn how generative AI from Google Cloud can help seasoned security professionals quickly discover, investigate, and respond to threats, and help newcomers boost their skills to get more things done, faster. Join this session to learn about new features, hear from customers, and gain insights on how to address common security challenges with AI.

How AI can transform your approach to security

Outsmart attackers and protect your organization with intelligence-driven vulnerability management. In this webinar, Google threat intelligence experts will demonstrate how to prioritize vulnerabilities based on active exploit risk, get early warnings on threats, maximize patch efficiency, and reduce your attack surface.

Use Cases in Threat Intelligence: Making Vulnerability Management Easier

The complexity of cloud environments creates unique security challenges. These include dynamic attack surfaces and adversaries expertly disguising themselves with native tools.  Threat hunting becomes crucial for security teams seeking to reduce dwell time, by uncovering threats that slip past traditional defenses.

In our second installment to the Beyond Detection Threat Hunting series, Mandiant experts will discuss:
 - How to adapt your threat hunting program to cloud or hybrid environments 
 - Real-world examples of how to turn cloud compromises into hunt missions 
 - How hunt findings can influence cloud hardening and response 

Learn how to hunt for evidence from a previous or existing cloud compromise to enhance future response capabilities and realize new methods of threat detection.

Beyond Detection: Hunting for threats in the cloud

Decades of threat detection, investigation, and response initiatives over-relied on DIY approaches and delivered mostly underwhelming results. This webinar will introduce Google’s paradigm for modern security operations and demonstrate how recent advancements in applied threat intelligence, automation, and AI give defenders a chance to flip the script and generate more security outcomes with less effort.

Work Smarter, Not Harder: Frictionless Security Operations with Google

Discover how to streamline your security operations and maximize your threat intelligence investment. In this webinar, we'll explore essential use cases for Google Threat Intelligence, showcasing how it can empower your IOC Enrichment, Incident Response and Forensics, Threat Hunting, Brand Protection and Vulnerability Management.

Join us for a hands-on demonstration of each use case and see benefits of faster threat detection and proactive defense strategies.

Use Cases in Threat Intelligence: Turn Insights into Action

As more business-critical workloads are migrated to cloud environments, cloud security and security operations teams struggle to gain visibility and insight into the cloud risks that could jeopardize their business. Operational silos and disconnected tooling make it difficult to proactively identify high-risk issues and efficiently take the necessary steps to remediate them. But what if we could converge cloud security and SecOps into a single platform, with a single view of security events and data, to break down silos and manage the full lifecycle of cloud risks?

Join us to learn how proactive and reactive cloud security practices are coming together, enabled by converged platforms that unite security and SecOps teams so that more experts can act on cloud issues. See how Google Cloud’s Security Command Center can identify risks in multi-cloud environments, prioritize the most serious ones, and get them into the hands of the right teams for quick remediation. By bringing cloud security and SecOps together we can make the cloud safer.

Say Goodbye to Silos: Unify Your Cloud Security and Enterprise SecOps

The M-Trends 2024 Special Report provides an inside look at the latest cyber trends and attacker operations from around the globe. The second half of the report is dedicated to deep insights drawn directly from the frontlines of Mandiant investigations and threat intelligence findings that have shaped today’s evolving cyber threat landscape.

Join six of our report authors and experts on May 23, 2024 at 12:00pm ET as they share their point of view on these hot topics and provide best practice solutions to help improve your cyber defense capabilities in these areas.

Topics will include:
- China-nexus attackers targeting edge devices and platforms that lack EDR
- Trending adversary operations and motivations behind zero-day attacks
- The evolution of phishing techniques amidst modern security controls
- How attackers leverage AiTM to compromise MFA safeguards
- The reasons and solutions behind growing cloud and hybrid cloud intrusions
- How AI is effectively used in red and purple teams to help boost cyber defenses

Presenters:
Ryan Tomcik, Principal Security Analyst, Mandiant - Google Cloud Security
Mathew Potaczek, Principal Threat Analyst, Mandiant - Google Cloud Security
Josh Fleischer, Principal Security Analyst, Mandiant - Google Cloud Security
James Sadowski, Principal Intelligence Analyst, Google Cloud Security
Tucker Clark, Senior Security Consultant, Mandiant - Google Cloud Security
Josh Madeley, Regional Lead, Mandiant - Google Cloud Security
Jennifer Guzzetta, Product Marketing - Google Cloud Security (Moderator)

M-Trends 2024 Round Up: Expert Insights on 6 Key Topics

While many organizations have threat intelligence as part of their security operations program, most struggle to apply it effectively, and lack the required resources and expertise to keep up with the latest threat actors and TTPs. In this webinar, we’ll take a look at the new intelligence-driven approach in Google Chronicle Security Operations, and how it can deliver turnkey security outcomes with threat intelligence that’s personalized, relevant, and seamlessly embedded.

Stay ahead of the latest threats with intelligence-driven security operations

The M-Trends 2024 Special Report provides an inside look at the latest cyber trends and attacker operations from around the globe. Packed with timely data from Mandiant frontline incident response investigations and threat intelligence findings between January 1, 2023 - December 31, 2023, readers can increase their awareness of the evolving cyber threat landscape and glean new, effective ways to stay on top of their cyber defense game.

Join two of our top threat analysts on May 21, 2024 at 12:00pm ET as they discuss these trending metrics and notable adversary behaviors. Learn how these findings can affect your security approach to future compromise. 

Topics will include:
- Global and regional dwell times
- Detection by source trends
- Industry targeting metrics
- New threat actor techniques, motivations, and behaviors
- Top infection vectors and malware families
- Ransomware attack developments
- And more!

M-Trends 2024: By the Numbers of Today's Top Cyber Threats & Attacker Operations

Google Threat Intelligence is changing the game in threat intelligence. By unifying the frontline expertise of Mandiant, the VirusTotal  intel community and Google security insights, we are bringing to you unmatched breadth and depth, so you can get a panoramic view of the threat landscape, understand the "why" and "how" behind attacks, and turn insights into rapid action.

In this webinar, you will:

*Discover how Google Threat Intelligence provides unmatched visibility compared to other leading vendors.
*See a live demo of how to quickly identify the most relevant threats and respond to those threats most likely to target your organization.
*Learn how to operationalize threat intelligence for proactive defense, from automated alerts to AI-assisted malware analysis.
*Understand how Google's team of experts can support your threat intelligence journey, from training to embedded analysts.

Introduction to Google Threat Intelligence

Mandiant Managed Defense presents a quarterly webinar series, "Tales from the Trenches," to help you navigate the ever-evolving threat landscape. Our security experts will dive into the latest malware and attack trends they've encountered in the previous quarter. You'll gain valuable insights into how these threats were detected, along with actionable advice to strengthen your own defenses.

In the first installment of the series, Managed Defense consultants will detail findings from January through March 2024, including:

*Phishing emails deploying ASYNCRAT malware
*Ongoing exploitation of ScreenConnect vulnerabilities and hardening guidance 
*New FAKEUPDATES technique compromising Outlook email signatures

Reserve your spot today!

Tales from the Trenches: Malware and attack trends from Managed Defense

Threat Hunting with VirusTotal - Episode 4

Threat Hunting with VirusTotal - Episode 3

Threat Hunting with VirusTotal - Episode 2

Threat Hunting with VirusTotal

Join one of our top VirusTotal researchers for a step by step LIVE session on VirusTotal Threat Hunting.  This time we will cover how to hunt through Sigma rules with the latest features we have added on macOS and Linux, and explore how Crowdsourced AI analysis compares to and complements the identified Sigma rule matches. We will see how to carry out other hunting activities based on infrastructure and behaviors to detect interesting malicious activity.

Threat Hunting with VirusTotal - Episode 5

Threat Hunting

Threat Intelligence

Threat Analysis

Threat Detection

SecOps

Security Operations

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

The storage community on BrightTALK is made up of thousands of storage and IT professionals. Find relevant webinars and videos on storage architecture, cloud storage, storage virtualization and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Storage

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Threat Hunting with VirusTotal - Episode 5

Presented by

About this talk

More from this channel