Name: The Anatomy of a Scattered Spider Attack
Start: 2024-11-21T22:20:00Z
End: 2024-11-21T22:20:32.000Z
Location: BrightTALK
Rating: 0

CrowdStrike, a global cybersecurity leader, is redefining security for the cloud era with an endpoint and workload protection platform built from the ground up to stop breaches. The CrowdStrike Falcon® platform’s single lightweight-agent architecture leverages cloud-scale artificial intelligence (AI) and offers real-time protection and visibility across the enterprise, preventing attacks on endpoints and workloads on or off the network. 

There’s only one thing to remember about CrowdStrike: We stop breaches.

More than 6,000 cybersecurity experts attended CrowdStrike’s Fal.Con 2024. If you weren’t one of them and want to know what you missed – or if you were there and want a recap – this webinar overviews key moments from the 4-day, insight-packed event. 

From considering the importance of a resilient-by-design future to digging into how AI is impacting security today, the webinar presents guidance that you can use to bolster your own security program.

Tune in now to hear from industry leaders like: 

• Founder and CEO of CrowdStrike, George Kurtz
• Chief Security Officer and Head of Product Security of NVIDIA, David Reber
• Chief Business Officer of CrowdStrike, Daniel Bernard
• And more

Key takeaways from CrowdStrike’s Fal.Con 2024

As identity-based attacks evolve, your organization, like every organization, is challenged to keep up. To help you boost your defenses, this short webinar – featuring subject-matter experts from CrowdStrike – breaks down how common attack chains have transformed from 2021 through 2024. 
The presentation by Principal Product Tech Strategist, Ross Penny, and Sales Engineer, Steve Bright, is a highlight from CrowdStrike’s Fal.Con 2024 event. 
To unlock 6 minutes of security insights, including guidance for defending against real-time threats in your Microsoft identity environment, watch now.

6-minute guide to defending your Microsoft identity environment

“I like to call this technique the tale as old as security itself,” Director of Professional Services at CrowdStrike, Yinan Yang, says of social engineering. 
In this 7-minute webcast, Yang explores the types of social-engineering attacks overwhelming the cyber landscape, their impact and how they’re evolving. 
Additionally, Senior Director of Professional Services at CrowdStrike, Tim Parisi, considers why threat actors are targeting SaaS applications.
To unlock the presentation, a highlight from CrowdStrike’s Fal.Con 2024 event, watch now.

7-minute guide: The evolution of social-engineering attacks

According to findings from CrowdStrike’s 2024 Threat Hunting Report, 25 newly named threat adversaries have appeared over the last 12 months.

The only way to prepare against an adversary is to understand an adversary.

This brief BrightTALK webinar highlights key findings from CrowdStrike’s threat research, giving you the insight you need to prepare and stay secure.

Tune in to the full webcast now to learn more.

CrowdStrike Threat Report: Global threat landscape overview

Attackers today are using more automation, specifically targeting supply chains and shadow IT, and leveraging new techniques in their attack campaigns. To keep up the defense, organizations should introduce AI security capabilities of their own to reduce the manual effort required from IT teams and effectively “fight fire with fire.”

Tune in to this BrightTALK webinar to hear from CrowdStrike CTO Elia Zaitsev as he discusses how AI can accelerate the analyst experience through:

• Data ingestion
• Identification and prioritization
• Threat response
• And proactive preparedness

AI innovations transforming the analyst experience: A roadmap

The nature of cyberattacks has changed. Organizations can no longer simply fortify their traditional perimeter in order to hold off threats.

Every identity presents a potential threat, and in the worst case, a breach.

Tune in to this CrowdStrike BrightTALK webinar, which provides an in-depth breakdown of the current threat landscape by leveraging key findings from CrowdStrike’s recent research initiatives.

The state of the threat landscape: CrowdStrike’s key findings

Adversaries are becoming increasingly focused on exploiting human error to attack organizations. They are getting better at hiding in security gaps and are finding entry points faster than ever before.

In this session, you’ll learn about two concerning trends in the modern threat landscape: cross-domain attacks and insider threats. Then, leaders from CrowdStrike will take you on a journey into the adversary universe to talk about a notorious adversary that CrowdStrike tracks, called Famous Chollima.

Watch now to learn how threat actors are taking advantage of hybrid work models and how you can keep your organization secure.

Advanced adversaries: How to keep threat actors out of your environment

As the threat landscape continues to evolve and adversaries exploit new emerging technologies, resiliency becomes critically important for defenders to stay ahead.

One of the fastest-evolving technologies and hottest topics in cybersecurity today is AI. During this 9-minute session, you’ll hear a dynamic discussion between Daniel Bernard, Chief Business Officer at CrowdStrike, and David Reber, Chief Security Officer at NVIDIA, as they share best practices for unlocking the potential of secure AI innovation.

Tune in now to discover how your organization can stay on top of advanced threats while embracing the transformative power of AI.

How to become resilient in the evolving AI threat landscape

Many cybersecurity teams tout their ability to confront disasters head-on and emphasize the ability to “bounce back” from an attack. But CrowdStrike Founder and CEO George Kurtz believes a proper defense isn’t just about reaction time: It’s about fostering a culture of resilience, a proactive organization that is always one step ahead of the opposition.

In their opening keynote to Fal.Con 2024, hear George Kurtz share his vision for a resilient-by-design future for an interconnected world, including the essential pillars necessary to make it possible.

A resilient-by-design future for an interconnected world

With the relentless evolution of cyber threats and the complexity of managing dispersed data across multiple platforms, Cribl and CrowdStrike have joined forces to simplify the way organizations protect themselves. By harnessing the power of Cribl— the Data Engine for IT and Security— and CrowdStrike Falcon® Next-Gen SIEM, we’re turning the chaos of diverse and dispersed data into clarity. This partnership ensures your security team spends less time wrestling with data and more time focusing on defending against threats.

In this session, join Ed Bailey, Principal Technical Evangelist at Cribl, and Shivan Jairaj, Regional Director for NG-SIEM & Falcon Complete, APJ at CrowdStrike, to hear key insights and practical tips for architecting an effective data engine to fuel the next-gen SIEM.

Accelerating the AI-native SOC with CrowdStrike Next-Gen SIEM and Cribl

Cloud exploitations increased 95% over the past year — a clear indicator that attack surfaces are becoming more dynamic and sophisticated in the cloud. While 2023 saw some cloud infrastructure and workload protection consolidation into unified platforms, continuous delivery and ineffective application security still elevates overall risk and leaves a gaping hole for adversaries to exploit.

Join us for a review of the current state of application security, a deeper dive into the challenges of securing applications, and see how CrowdStrike’s AI-native modern cloud security platform protects applications from code to runtime.

What to expect:
• Get insights into the challenges security teams face as developers push application changes more frequently
• Learn how to empower developers to create more secure and resilient applications
• Hear firsthand from an ASPM customer

Cloud Security Consolidation Extends Protection from Code to Runtime

As cyber threat actors get faster, smarter, and more relentless, security and IT teams face increased risk and complexity. Disjointed, underperforming point products create blind spots where adversaries thrive, delaying threat detection and response and making it harder to stay ahead of the enemy.

Join our guest speakers – Intel’s CISO, Brent Conran and IDC’s research VP, Christopher Kissel – along with CrowdStrike’s VP of Portfolio Marketing, Scott Simkin, to discuss platform consolidation trends and learn how consolidating security tools with the Falcon platform helps organizations stop breaches, save time, and save money

What to expect:

• Hear perspectives from Intel Corporation and IDC on platform consolidation and what security and IT leaders should expect in 2024
• Learn how customers who have consolidated tools with CrowdStrike realized substantial benefits around better security, improved SOC efficiency, and cost savings
• Prepare for next steps on your organization’s security consolidation journey

Cybersecurity Consolidation – Perspectives from Intel's CISO and New Research

Over the last year, breakthroughs in generative AI have captivated consumer and enterprise interest — and organizations are scrambling to keep up with technology while navigating its growing attack surface.

Join CrowdStrike’s Chief Scientist, Dr. Sven Krasser, and VP of Portfolio Marketing, Scott Simkin, for an in-depth discussion on large language models (LLMs), top applications for security operations, and practical guidance for navigating emerging market offerings and the growing risks of generative AI. We’ll also peek behind the curtain at CrowdStrike’s LLM-based security technology, Charlotte AI, and hear early insights from beta customers.

What to expect:
• Learn the fundamentals of LLMs and the value they bring to security teams
• Discover the emerging attack surface of LLMs and potential risks of generative AI tools
• Understand key criteria organizations should consider when evaluating and comparing LLM technologies

Generative AI Accelerates Protection and Investigation

In this simulation, we’ll immerse you in a high-stakes scenario where today’s most notorious adversary — SCATTERED SPIDER — has infiltrated your organization. Can you stop the threat before it’s too late?

Watch Part 4 of the Unstoppable Innovations CrowdCast Series to understand SCATTERED SPIDER’s underhanded schemes, from social engineering to abusing security tools. During this webinar, you’ll learn the steps you should take to detect, investigate, and respond to threats using CrowdStrike’s next-gen SIEM.

What to expect:
Take part in a realistic simulation of an advanced attack orchestrated by SCATTERED SPIDER.
Discover how you can expedite investigations using cutting-edge tools like Charlotte AI Investigator and a new XDR incident workbench.
Find out how you can defeat threats with next-gen SIEM powered by the CrowdStrike Falcon® platform.

Rise Above SCATTERED SPIDER with Next-Gen SIEM

Threat actors are getting bolder, stakes are higher, ransom costs and extortions are growing exponentially. These attacks can cause huge financial and reputation damage to organizations and affect their customers, or even worse, critical infrastructure or supply chains.

This webinar will be delivered by the CrowdStrike Falcon Complete team where they will execute a live Ransomware attack scenario. A public facing host that is unprotected by Falcon has become compromised. The intruder is leveraging it to laterally move across the environment via RDP in attempts to deploy ransomware.

CrowdStrike Falcon Complete - Attack & Defend Demo

Join us in this webinar to discover the dynamic evolution of hacker tradecraft and tooling over the past year and gain unparalleled insights from our expert threat hunters as they discuss standout intrusions and techniques.

In this webcast you will learn about:
• The hardest-hit industry sectors targeted by eCrime and targeted intrusions.
• The startling 583% surge in identity-based Kerberoasting attacks and learn how specialized identity threat hunting can halt them in their tracks.
• How to defend against rising cloud-based intrusions with effective countermeasures.
• The evolution of adversary tradecraft, from development to deployment, and the steps taken by Falcon OverWatch threat hunters to unearth these stealthy, sophisticated attacks.
• Predictions of attack trends and tradecraft in the next 12 months and how you can arm yourself with immediate countermeasures to become a formidable defender.

CrowdStrike’s 2023 Threat Hunting Report

Ransomware attacks are evolving. And if your organization isn’t prepared, you could be in for rude awakening in 2024. A recent survey reported that as many as 79% of organizations have experienced a successful ransomware attack over the last year.

Beyond the cost of a ransom, your organization must bear the burden of business disruption, irreparable damage to your reputation and customer trust, and other long-term impacts. Too many organizations have a false sense of security when it comes to their defenses, especially if you leverage decades-old traditional AV or endpoint security products.

Join us in this webinar to learn about:
• The major ways that ransomware has evolved going into 2024
• The gaps in traditional security tools that make your environment an easy target for adversaries
• How modern endpoint security solutions enable your organization to have an adaptable defense that can outpace and outsmart today’s adversaries

How Ransomware is evolving in 2024

Ransomware poses a significant and evolving threat to organisations in Australia and New Zealand, with consequences ranging from operational disruption, financial losses and damaged brand equity.

This webinar will delve into the intricate details of ransomware attacks, with a particular focus on Scattered Spider, exploring how this adversary conducts each phase of the attack from reconnaissance to extortion.

Join Jana Dekanovska, where she will equip you with mitigation strategies against this adversary.

The Anatomy of a Scattered Spider Attack

Cyber Security

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

The Anatomy of a Scattered Spider Attack

Presented by

About this talk

More from this channel