Name: XDR and Container Security: A Holistic Approach to Threat Detection and Response
Start: 2025-02-13T05:00:00Z
End: 2025-02-13T05:00:57.000Z
Location: BrightTALK
Rating: 0

Modern cars are no longer just a means of transportation. Their built-in services can manage everything for drivers and passengers alike from seat heating, to using voice-controlled GPS to find a coffee, or make theater ticket reservations. Along with the development of consumer services, driver safety services have also been developed – distance sensors to neighboring cars, speed limit recognition and the eCall safety system, to name a few.

These hi-tech solutions designed to improve the user experience and make your journey safer, are architecturally based on algorithms and technologies that in themselves carry threats to information security. The wider the user experience, the wider the attack surface for an attacker. 

In this webcast, Cyberthreats to modern automotive industry, Sergey Anufrienko and Alexander Kozlov, security researchers at Kaspersky ICS CERT will discuss:

• Threat landscape: how has changed and evolved over the last 10 years
• Top threats the automotive industry is exposed to
• Standards of automotive security
• Trends in automotive security

Cyberthreats to modern automotive industry

Join us at Reasons to use Suricata for incident response and threat hunting as we delve into the world of Suricata, a powerful open-source network intrusion detection system (NIDS). In this webinar, we will explore the reasons why Suricata has become a go-to solution for incident response and threat hunting, and how it can effectively bolster your cybersecurity defenses.

Our expert, Tatyana Shishkova, Lead security researcher of Kaspersky Global Research and Analysis Team (GReAT), will provide a comprehensive introduction to Suricata’s capabilities. Gain insights from practical examples and understand how Suricata can be leveraged to proactively detect and neutralize potential cyber threats.

• get to know which threats can be detected using Suricata, and why it is crucial to write effective Suricata rules
• learn more about cases using Suricata for incident response and threat hunting
• discover new life hacks on Suricata

Reasons to use Suricata for incident response and threat hunting

Security Operations Centers (SOCs) have long recognized the critical need for building effective detection techniques. In this webinar, Andrey Tamoykin, an expert at Kaspersky SOC Consulting will explain how to develop and prioritize a detection backlog from scratch using the MITRE ATT&CK framework.

We will explore various open-source tools to automate and streamline this process, providing practical insights and solutions to common challenges in detection engineering. This session will also cover key SOC development aspects driven by an optimized detection backlog.

Who will benefit from this webinar?
- SOC Managers
- Security Monitoring Team Leads
- Detection Engineers
- SOC Researchers
- SIEM Analysts

Join our webinar to enhance your detection capabilities and ensure your SOC stays ahead of evolving threats with actionable strategies and tools.

Building and prioritizing detection engineering backlogs with MITRE ATT&CK

While some of the existing cybersecurity solutions already provide Endpoint Detection and Response functionality for small and medium business, implementation of EDR in these organizations can cause doubts. Kaspersky’s long-term experience in the development and implementation of EDR Solutions found the following has frequently raised concerns:

• EDR is just a “better antivirus”;
• This technology is only suitable for large enterprises as it is meant to discover sophisticated threats that don’t target small companies;
• EDR is a sophisticated solution that requires security staff - trained in detection and response;
• EDR provides capabilities for full response and remediation;
• EDR becomes shelf ware very quickly.

Are these concerns fair? Join this webinar to find it out and decide if EDR technology fits your company’s need

Addressing myths around EDR

Hardly a day goes by without yet another organisation falling prey to a cyberattack or data breach that has led to reputational and financial losses. The security landscape will get even more tumultuous, with APAC organisations expected to continue facing tough security challenges arising from the shortage of talent, new cloud vulnerabilities and the proliferation of surreptitious malware. Against this backdrop, security operations have become more challenging, driving organisations to consider new approaches that improve the timeliness and accuracy of threat detection while automating response actions. 

Hear from the panel experts in Cybersecurity Frontiers: Crafting Future-Ready Defenses in a Connected World as the panellist shares how you can build a resilient culture and prepare for future challenges.

Cybersecurity Frontiers: Crafting Future-Ready Defenses in a Connected World

The sensitive data stolen from companies during a cyberattack often ends up on darknet markets. With the rise of the cybercrime as a service business model, we observe that not only data obtained from attacks is for sale but also for the information necessary to organize that attack.

Once an attacker gains access to the infrastructure of an organization, they can then sell that access to other advanced cybercriminals, such as ransomware operators. The price for accessing potential victims’ systems is relatively inexpensive when compared to the possible damage to the targeted business. In fact, the average cost for access to a company’s systems lies between the range from $2000 to $4000. Meanwhile, such attacks result in significant financial and reputational losses to the attacked organization and may even cause suspension of work and disruption of business processes. SMBs and enterprises are both key targets of such attacks.

Yuliya Novikova and Sergey Shcherbel, security experts at Kaspersky, shed light on how a company’s data and the information on their systems is sold on darknet markets.
In this webinar you will learn:
- Which types of company data are most widespread on dark markets
- Which criteria cybercriminals use to evaluate the price for organization’s data
- How to keep your data protected

Dark market for corporate data: how cybercriminals sell access to your company

Join this webinar to gain practical insights into the challenges faced by your industry peers involved in security operations and related activities.

We will explore common issues and effective strategies pertaining to cybersecurity incident detection and response and answer any questions that may arise. Our discussion will also cover aspects of threat intelligence, including the benefits it can offer organizations and obstacles that can arise while implementing these practices in your team.

Critical topics such as SOC team composition, hybrid SOC structures, Threat Intelligence (TI) and Threat Hunting (TH) operations will also be included, and we will discuss the challenges of hybrid SOC related to relationships with MSSP, particularly when customizing daily operations and processes to collaborate with external service providers.

SOC Consulting: Insights and live-on cases

Global Endpoint Detection and Response adoption is on the rise, making it a de-facto standard for many organizations. Everybody has heard about it, but sometimes it’s hard to determine what you need for a particular task: EPP or EDR.

Join Nikita Zaychikov, Senior Product Marketing Manager at Kaspersky, to explore what EDR is really about, how it is different from EPP and when it’s best to use it. 
• EDR and EPP: what is the difference
• Why we need or don’t need EDR: exploring options for different organizations
• EDR myths
• EDR adoption in the world
• Types of EDR

EPP vs EDR: difference, use cases, adoption

Let’s Dive into the threat landscape as Vitaly Kamluk, Director, Global Research & Analysis Team focused on emerging threats, technological impacts, strategic defenses, regulatory considerations, and building a resilient cybersecurity posture.

Threat Landscape in APAC and Globally

As cyber threats continue to evolve, mastering the art of digital forensics investigation is an essential for investigating security incidents and safeguarding critical systems. This webinar will focus on Windows digital forensics, offering an overview of the tools and techniques used to uncover digital evidence on Windows systems.

During the session, we will explore the key aspects of Windows forensics, including the major stages of the forensics process, beside a technical session on analysing Windows artifacts to reveal traces of cyber attack.

Additionally, we will provide an overview of our newly released online training course on Windows Digital Forensics. This course covers topics such as methods of obtaining diverse digital evidence, in-depth analysis of browsers and email histories, and the use of timestamps to restore incident scenarios, making it a valuable resource for cybersecurity professionals aiming to enhance their forensic analysis skills.

On the path to reveal the mystery with Digital Forensics

Join this webinar, Elevating Cyber Resilience: Unveiling the Power of XDR as Ilya Markelov, Head of Unified Platform Product discusses XDR implementation strategies and future prospects. The presentation educates and encourages organizations to adopt XDR to strengthen their cybersecurity defenses in an increasingly complex threat landscape.

Elevating Cyber Resilience: Unveiling the Power of XDR

As the world discusses ChatGPT-3 and its impressive capabilities, the business community is concerned about the AI’s potential to change the game for cyber criminals and wreak havoc in the world of defense organizations. Should businesses soon expect a wave of even more advanced cyber-attacks or simply more attacks? Will current cybersecurity solutions be enough? Or will ChatGPT instead provide cybersecurity specialists with more efficient and smarter defensive and threat hunting tools?

In this webinar, Kaspersky experts will discuss how ChatGPT currently influences the cyber threats landscape and cybersecurity in organizations, and contemplate whether this is a real game changer for the industry and, in particular Security Operation Centers (SOCs). The experts will also discuss the potential benefits of using ChatGPT in threat hunting and malware analysis.

In this webcast you will find out:
- If ChatGPT can really influence the threat landscape. Where can cyber criminals use it, and will it be effective?
- Will the emergence of ChatGPT and similar AI language models lead to increased cybersecurity costs?
- If ChatGPT is capable of becoming an autonomous hacking AI-tool
- How can cybersecurity experts employ ChatGPT: a demonstration of a scanner for Indicators of Compromise (IoCs)

The webinar will be conducted by Kaspersky's Vladislav Tushkanov, lead data scientist, Maher Yamout, senior security researcher, and Victor Sergeev, incident response team lead.

ChatGPT - good or evil? AI impact on cybersecurity

Over the last few years, financial malware families originating from Latin America have progressively expanded malware operations outside the region, targeting Financial Institutions in Asia, Europe, and North America. These malware attacks renew their toolsets and employ various new innovative techniques, which enables them to spread globally. The attacks scope are broad, covering PoS, ATMs, Android devices, and Windows-based machines.

In this session, Dmitry Bestuzhev, Fabio Assolini and Oleg Gorobets will cover:

The techniques and tactics most frequently used by cybercriminals
The most widespread financially motivated malware families targeting financial institutions
Insights into how to detect and contain such threats – How Kaspersky’s offerings can help companies overcome this fight

How threat actors move globally and tactics to combat banking threats

Modern cars employ a wide array of communication interfaces. Some, like Bluetooth and Wi-Fi, directly engage users, while others, such as RDS and GPS, provide user-facing services, and still others, like CAN and Ethernet buses, ensure the proper functioning of the car's internal systems. These interfaces contribute to the extensive flow of data within the car, forming its data flow graph. Within this graph, they serve as the "entry points" for malicious attackers seeking access to the vehicle. However, tampering with them does not necessarily lead to the loss of the car's security features.

In this webcast, cybersecurity experts, Alexander Kozlov and Sergey Anufrienko from Kaspersky's ICS CERT, will delve into the automotive security. Together, we will examine:

- We'll explore which interfaces attackers tend to favor when targeting cars and the reasons behind their choices.
- We'll focus on the techniques attackers employ when conducting attacks through specific interfaces, with an emphasis on classical techniques.
- We'll discuss how to defend against these threats and evaluate the feasibility of reducing associated risks.

Join us for this webinar, where we'll equip you with the knowledge and tools to not only comprehend the ever-evolving landscape of automotive security but also to safeguard your modern vehicle effectively.

Overview of modern car compromise techniques and methods of protection

Join this webinar to get actionable information that will help you plan and develop your own security operations strategy and will guide you towards practically proven solutions. During the webinar, Roman Nazarov, Head of SOC Consulting at Kaspersky, will provide a comprehensive review of our consulting services – SOC Maturity assessment and SOC Framework development – and share informative insights based on successfully completed projects, including:

• The most common SOC services and their dependence on customers’ business areas
• Typical internal SOC processes and organizational structure and what influences them
• Common issues in security operations and how they’re mitigated

Kaspersky Security Operations Center provides consulting services for customers who aren’t ready to outsource their operations to a Managed Detection and Response team but want to develop internal security operations practices.

SOC consulting projects: common methodology and insights

In 2023, Kaspersky Managed Detection and Response (MDR) received more than 314,000 alerts worldwide. Kaspersky team processed these alerts and accumulated as anonymized customer cases to provide information about the current threat landscape. Sergey Soldatov, Head of Kaspersky Security Operations Center, will discuss the nature of the identified incidents and highlight the most common tactics and techniques attackers used.
- Who are your potential attackers?
- How do they operate today?
- How can their activity be detected?

Findings highlighted in this webinar will help you to be aware of existing attack techniques and protect businesses from the growing number and complexity of real-life threats.

MDR Report Analyzing the state of the global threat landscape

As the digital landscape continues to evolve, so do the threats that organizations face. We cordially invite you to our upcoming webinar, where we will delve into the dynamic world of cybersecurity and explore strategies to defend against the ever-changing threat landscape using XDR (Extended Detection and Response).

Navigating the 2024 Cybersecurity Terrain XDR Defense Strategies

In an age where cybersecurity threats are becoming increasingly sophisticated and dynamic, a holistic approach to threat detection and response is imperative. Extended Detection and Response (XDR), with its all-rounded threat detection and response capabilities, offers a powerful solution to address the evolving threat landscape in the world of containers. Explore the synergy between XDR and container security, offering a comprehensive strategy to understand threat detection and response in container security, and how XDR can be a game-changer in the cybersecurity strategy.

This event is a must-attend for security professionals, CTOs, CISOs, IT leaders, and anyone interested in staying ahead of the curve in the ever-evolving cybersecurity world. Join us to explore how XDR can be your ally in protecting containerized applications and securing your digital infrastructure.

XDR and Container Security: A Holistic Approach to Threat Detection and Response

Cyber Security

Container Security

Cyber Defense

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

XDR and Container Security: A Holistic Approach to Threat Detection and Response

Presented by

About this talk

More from this channel