Name: Building an Enterprise Data Strategy for the Modern SOC
Start: 2024-06-26T13:10:00Z
End: 2024-06-26T13:10:42.000Z
Location: BrightTALK
Rating: 0

Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Customers use Cribl to analyze, collect, process, and route all IT and security data, delivering the choice, control, and flexibility required to adapt to their ever-changing needs. 

Interested in seeing first-hand how Cribl can support your use case? Sign up for Cribl.Cloud and process up to 1TB/day, for free! https://cribl.io/cribl-cloud/try-cribl-cloud/


Join Ed and Jackie as they explore the challenges of securing funding for engineering and architectural projects. This webinar will emphasize the importance of connecting technical challenges to business needs and leveraging effective storytelling techniques. 

Key topics include:
• Differentiating between cost savings and cost avoidance
• Justifying data growth estimates with historical data
• The significance of clear communication and crafting a compelling narrative
• Focusing on the business problem and the technical solution

Don't miss this opportunity to gain valuable insights and strategies for successfully securing project funding.

How to get your observability project funded

Need an easier way to collect, process, and route data, at all times, and move it into any tool?  Watch this demo of Cribl Stream, where we’ll show you how to:

- Route data easily from any source to any destination, in any format
- Optimize data volumes to increase performance
- Shape data into actionable logs and metrics for analysis
- Boost signal to noise ratio via enrichment with third-party data
- Gain the flexibility to test, migrate, or add any tool without adding new agents or infrastructure

Take back control of your data.

Unlocking Data Insights: A Cribl Stream Demo

In this session, Synopsys will explore the transition from traditional syslog and Logstash setups to the dynamic capabilities of Cribl. Chanda Pulliam will share firsthand experiences, from scalability issues to performance challenges, how her team navigated these obstacles, to effectively transition to Cribl and Elastic.

Additionally, this session will cover how the team identified the size of events in Elasticsearch and the pivotal role it played in measuring total storage usage and savings post-Cribl implementation. Lastly, we'll hear about the intricacies of this methodology, showcasing how it enabled us to gain granular insights into our log data, optimize storage utilization, and realize significant cost savings.

Navigating Transition: From Syslog and Logstash to Cribl

What does it take to build software for the most security demanding customers in the world? Building secure products is part of Cribl's engineering identity. We have built a secure software development lifecycle that is both culturally and policy-driven, with product security tooling and processes integrated into every architecture review, every pull request, and every major and minor release.

Ed Bailey will chat with Cribl’s CISO Myke Lyons and Product Security Manager Rory McEntee about our software development lifecycle security program in this live discussion. Cribl has invested in a world-class Product Security Team with over 80 years of combined software security development experience to ensure our programs are robustly maintained, effective, and highly auditable.

LiveStream: Secure SDLC

In the effort to transform an outdated and disorderly SIEM into a modern, streamlined, and manageable solution, Cribl was utilized to develop a centrally managed environment. This empowered teams to handle multiple data sources and destinations with improved time-to-value, reduced data flow steps, and increased sustainability.

Join this session to learn how Cribl was used to modernize and streamline SIEM operations into a single point of management solution.

Modernizing the Data Pipeline

This session explores how the AMEX team utilized Cribl Stream to navigate a complex SIEM landscape. They talk about the several challenges they faced including evaluating new SIEMs, managing high-volume data in our current SIEM, and ultimately migrating to a new solution – all without disrupting ongoing security operations.

Reduce Risk and Choose the Right SIEM

Join our expert speakers as they dive into the integration of AI and machine learning within business systems. The session will emphasize the crucial collaboration between data science and security teams. Our speakers will identify the challenges and potential threats such as prompt injection, context poisoning attacks, and the emerging threat of model extraction.

Key discussion points will include:

- The importance of training for data scientists and security teams
- The necessity of secure data handling practices
- The significance of effective communication and collaboration within project teams

You'll leave this session with valuable insights into the intersection of AI, machine learning, and cybersecurity.

Collaboration Between Security & Data Science for Secure AI Development

As the cybersecurity landscape becomes more complex, organizations need a better way to detect, investigate, and respond to security incidents. Siloed data with high storage costs just isn’t sustainable. Join us to explore how Cribl’s suite of products and Amazon Security Lake can help your team support massive amounts of data and quickly make sense of all the information without breaking the bank. Whether you’re looking to conduct threat detection, threat hunting, or even retrospective breach investigations, Cribl and AWS have you covered.

Watch this webinar to learn about:
- Enhancing data storage and costs by intelligently managing and processing data before it reaches Amazon Security Lake.
- Augmenting interoperability by bridging the gap between disparate data sources with a unified view of security data.
- Accelerating threat detection and investigation with data exploration and analytic capabilities.

Speakers: Ed Bailey, Principal Technical Evangelist, Cribl, Perry Correll, Principal Technical Content Manager, Cribl and Marc Luescher, Sr. Solution Architect, AWS

Optimize Analytics and Cost Efficiency with Cribl and Amazon Security Lake

The observability and cybersecurity markets are becoming linked through their shared challenge of managing increasing amounts of data, but this combined market is shifting quickly. The past year has seen multiple acquisitions, as well as a new round of VC-fueled companies hoping to address these data challenges. On this webinar, we’ll explore:

- Market categories seeing the most consolidation and growth.
- Where, and when, AI will augment new and existing tooling.
- How enterprises should plan for a disruptive year across the vendor landscape.

The 2024 Observability & Security Market Map

Cribl’s Ed Bailey and Jackie McGuire give a preview of the 2024 RSA Conference. Discover what is next in cybersecurity and how Cribl is going to play a big role in how Security data is going to be managed and optimized for use cases across the enterprise. Please join us for a fun and insightful conversation!

LiveStream: Cribl at RSA 2024

Managing data efficiently is becoming more complex and it's crucial to keep up with regulations. Elastic and Cribl work together to make data management easier for public sector organizations. Together the pair are bringing better data integration, analytics and observability to the table, so agencies can make smarter decisions and deliver better services. 

Tune in to learn how the Cribl product suite integrates with the Elasticsearch SIEM platform to help your agency: 
- Strengthen your agency's security with a Zero Trust approach
- Handle large volumes of data more efficiently and get more insights from your analytics
- Explore how to meet compliance requirements with advanced SIEM and security analytics

Better Together: Building a Zero Trust Strategy with Cribl and Elastic

IT and security teams are drowning in data. Storing it all to meet compliance regulations and for future analysis can be a challenge, especially with limited resources and tight budget constraints. Data lakes often become a data swamp — a mere dumping ground for data. And all in messy, disparate formats. How can teams get value out of their data once it’s stored?  

Join this webinar to learn how to get a data lake up and running quickly, without the burden of complex setup and management. A managed data lake can help to:
- Easily get data in, and get data out
- Embrace open formats to ensure long-term data retention while avoiding vendor lock-in
- Keep data secure, prevent unauthorized access, and encourage data sharing

And the best part? You don’t have to be a data or cloud expert. Ready to work smarter, not harder with your data lake? Tune in today.

3 ways to fast-track your data lake strategy without being a data expert

Artificial Intelligence (AI) is rapidly transforming the field of cybersecurity, with the potential to revolutionize how we protect our data and systems from attack. The recent open source releases of several large language and mixed modality models also has the potential to revolutionize the way attackers develop exploits and find vulnerabilities.

In this session, Jackie McGuire will cover what AI actually is (and isn’t), how it works (and doesn’t), and provide an easy-to-understand overview of the potentials and predicaments associated with AI in security.

Generating Buzz: The Promises and Perils of AI in Security

During this module, Perry and Sri focus on harnessing the monitoring capabilities of edge systems to analyze service error logs and pinpoint the underlying cause of issues, all while retaining the ability to route and store them efficiently.

The Network Edge: Leveraging the Data

As a follow up to our webinar, "From Fragmentation to Liberation: Unleashing the Power of Unified Data Management', Jackie McGuire continues the conversation to explore the critical significance of a data-centric strategy to strengthen security measures, enhance cost-effectiveness and refine data governance protocols. Join us as we reveal the advantages of a customized data engine and the evolving challenges facing engineering and security teams during this surge in data volumes.

At Cribl, we believe YOUR DATA IS YOUR DATA and you should be able to access and explore all data anywhere, discover value in data that previously was unexplorable, and connect it all to any tool your organization needs. Join us to see how our suite of products can help you with your biggest data challenges.

Full-Throttle Data Management: Building a Data Engine to Power the Future

This module dives into the essence of Kubernetes and the pivotal role of edge visibility for administrators. We’ll discuss the necessity of a reliable system for collecting and organizing logs, metrics, and events in the complex landscape of container orchestration. Discover the significance of comprehending the data generated in a scaled Kubernetes environment. We will also explore performance monitoring to track CPU and memory usage by applications or containers.

Interested in diving deeper into this subject? Check out our blog for a comprehensive insight into the utilization of products like Cribl Edge. You’ll discover how it offers the visibility and management necessary for organizations aiming to harness the full potential of Kubernetes. https://cribl.io/blog/kubernetes-cribl-edge-because-logging-and-metrics-shouldnt-be-a-mystery-novel/

The Network Edge: Kubernetes Environments

This module dives into the complexities associated with monitoring Windows systems. The landscape of Windows observability presents intricate challenges due to the diverse array of services, applications, and workloads operating on individual hosts. Spanning from web servers to databases, Active Directory to DNS, messaging systems to custom applications, the Windows environment comprises an intricate network of interconnected components, each producing logs, metrics, and events crucial for performance analysis and issue diagnosis. Our aim is to provide guidance in deciphering the wealth of data generated and understanding its inherent value.

Interested in learning about the real-time collection and processing of observability data, including metrics and logs, from various endpoints such as Windows machines, applications, and microservices? Be sure to explore our blog for more information. https://cribl.io/blog/cribl-edge-and-windows-a-perfect-pair-for-observability/

The Network Edge: Windows Devices & Their Data

Security, at its core, is a data problem. As data volumes grow exponentially (to the tune of 28% CAGR), organisations struggle to collect, enrich and correlate their security data.

As a result, today’s data onboarding processes involve countless log formats and ingestion methods, resulting in deployment delays, cost overruns and employee burnout. Gaining complete visibility of your data across your environments, no matter where it lies, is critical for security teams to stay ahead of modern threats.

In this session, Ed Bailey, Principal Technical Evangelist at Cribl, and Arfan Sharif, Director – Technical Marketing of NG-SIEM & XDR at CrowdStrike, will share and explore:

- Mid-year review of 2024 IT and Security key trends and predictions
- The evolution of the SOC to address today’s threat challenges
- Building an enterprise security data strategy – tips and best practice

Building an Enterprise Data Strategy for the Modern SOC

Security

SecOps

Secure Data

IT Architecture

ITOps

DevOps

Threats

Log Management

Ingestion

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

Get powerful marketing data and analytics insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on the analytics that quantify your investments.

Data and Analytics

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Building an Enterprise Data Strategy for the Modern SOC

Presented by

About this talk

More from this channel