Name: Fundamentals of SIEM
Start: 2023-11-06T11:35:00Z
End: 2023-11-06T11:35:50.000Z
Location: BrightTALK
Rating: 3.3

ManageEngine Log360 is a unified SIEM solution with integrated DLP and CASB capabilities for investigating, detecting, and responding to security threats. On-premises, cloud, or both - Log360 has it covered. It is simple to deploy, has a centralized console to manage multiple environments, and licensed based on the pay only for what you use model.

Explore how MSPs can double monthly recurring revenue (MRR) by tackling evolving cyberthreats with proactive SIEM implementation.

Doubling your MSP MRR with advanced SIEM strategies

Explore the hidden dangers of software vulnerabilities and discover effective strategies to safeguard your systems against potential exploits.

A Comprehensive Look at Software Vulnerability Exploits and Defense

Threat actors keep looking for new and sophisticated attack techniques to gain access to your organization's network. So how do you stay ahead of them?

Join us in conversation with Graham Cluley, an award-winning security researcher, podcaster, and public speaker, as we discuss enterprise security best practices, attack techniques, and how to prevent them.

Mastering enterprise security:Expert tips, and real-world examples for companies

It's Cybersecurity Awareness Month and what better way to kick start it than with webinars on tips to combat cyberattacks?

In this four-part webinar series, we'll discuss the four Cybersecurity & Infrastructure Security Agency (CISA)-recognized action steps that everyone needs to take and how Log360 can help.

In this second part you'll learn about:

1. All about passwords
2. Password attacks, and
3. How to prevent them

Password Attacks and how to prevent them

It's Cybersecurity Awareness Month and what better way to kick start it than with webinars on tips to combat cyberattacks?

In this four-part webinar series, we'll discuss the four Cybersecurity & Infrastructure Security Agency (CISA)-recognized action steps that everyone needs to take and how Log360 can help.

In this first part you'll learn about:

1. The cybersecurity landscape
2. Critical security threats, and
3. Three methods of threat detection

The cybersecurity landscape, and ways to protect your organization

Why you will love this webinar series:

Data. Patterns. Algorithms. These three words may seem like answers to a cybersecurity crossword puzzle, but in IT, they're each essential components in solving cybersecurity threats. These three aspects help with detecting malicious activity quickly and stopping attacks before they get started.

Machine learning (ML) in cybersecurity is a fast-growing trend. It helps businesses analyze threats better and respond to security incidents and cyberattacks. It also helps automate repetitive security tasks, saving your IT security team's time.

Join us for this two-day webinar series where we dive deep into the world of machine learning and explore some real-life examples of mitigating cyberthreats like account compromise, insider threats, data breaches, and more. Learn how you can use this latest cybersecurity trend to strengthen your defenses.

Day 2 - Webinar series - Machine learning in SIEM

Day 1 - Webinar series - Machine learning in SIEM

Originally developed as a banking trojan in 2014, Emotet malware was once described as the world's most dangerous malware. What makes this malware so perilous is that it is available for hire to cybercriminals, who can then use it to install other types of malware, like ransomware, onto the victim's computer.

This video talks about what Emotet malware is, how it spreads, and ways you can protect your network against it. Watch the video to learn more.

Threats in 3 Minutes - Emotet, the World's Most Dangerous Malware (Explained)

Mimikatz exploits Windows' single sign-on capability to harvest credentials. Until Windows 10, a feature called WDigest was used to save encrypted passwords to memory along with the secret key to decrypt them. Mimikatz also adjusts itself to stay on top of changes, which makes it the perfect tool for threat groups that can develop their own methods of injecting the tool to carry out their attacks successfully and steer clear of any endpoint security controls that may stand in their way.

In this video, we explain what Mimikatz is, the Mimikatz commands, how the tool works, and ways to defend against Mimikatz attacks. Watch the video to learn more. Three minutes is all it takes!

Threats in 3 Minutes - Mimikatz Tool (Explained)

Conti is a ransomware-as-a-service affiliate program associated with Russian threat actors. The developers of this ransomware sell or lease their ransomware technology to affiliates who use the technology to carry out attacks. The group also has a website on which they expose the sensitive documents from various attacks carried out on organizations in different sectors.

This video will cover how Conti ransomware works, evasion techniques, and how to remove Conti ransomware.

Watch the video to learn more!

Threats in 3 Minutes - Conti Ransomware (Explained)

Logging is a fundamental feature of software. A flaw in Log4j, a Java-based logging utility, has been deemed as one of the most high-profile security risks with a severity score of 10/10.

Numerous enterprise applications and open-source applications commonly use Java Apache Log4j. However, the scary part is that it is hard to detect which applications use Log4j due to the way it's implemented and developed.

The Log4j flow allows third-party servers to execute software code remotely, making it easy to perform all kinds of malicious actions on the targeted machine. This opens the door for detrimental damage, by stealing sensitive data, taking control of the affected machine, and installing ransomware that locks the system until the ransom demand has been met.

In this video, we will be covering what the Log4j vulnerability is, how it's exploited, and how you can fix it.

Watch the video to learn more!

Threats in 3 Minutes - Apache Log4j Vulnerability (Explained)

Security professionals are tasked with the hardest job there is. When things are running smoothly, they are taken for granted. But when things go wrong, that is when they enter the spotlight. To ensure security in your enterprise, it is important to be educated about the latest trends in cyber threats and also have the right set of tools and processes in place in your security operations center.

An auditing tool like a SIEM solution can go a long way in helping you achieve network security. With SIEM, not only can you mitigate security threats but also ensure that your enterprise meets stringent compliance mandates. Our IT security product specialist Siddharth will help you get started with SIEM in this webinar and clarify all your queries in the live chat session.

Log Auditing 101: Stay compliant and secure your enterprise with SIEM

Unusual events occur in a network that is under attack. These events, called anomalies, can be tracked by security teams to identify and investigate potential security threats at an early stage. Modern day security information and event management (SIEM) solutions come with user and entity behavior analytics (UEBA) to help security teams do just that.

So, what are the anomalies you need to watch out for, and how do you analyze your logs to spot these anomalies? Join our webinar to get started with monitoring your network for anomalous security events.

By attending this webinar you'll learn:

1. How to augment SIEM with UEBA
2. How to audit anomalies and risk scores of users
3. Five anomalies to track in your network
4. Use cases for SIEM and UEBA

5 anomalies to watch out for in your network

Analyzing log data and identifying which security events are of concern among thousands of routine events can be a challenge, especially if you aren't sure which events to track. While IT security requirements vary for different enterprises, there are a few key security events that raise major security and compliance concerns for everyone. 

To help you stay on top of security, Siddharth, our product expert, will guide you through the five most critical events your organization should be on the lookout for.

Top five critical alerts you need for IT security

Effective log management ensures that the network activity data hidden in the logs is converted into meaningful, actionable security information.

In the first session of our Active Directory & IT Security webinar series, join Siddarth, our product expert to learn about the log management best practices when using a SIEM tool in your network.

In this video we discuss:

Important log management and SIEM concepts
Best practices for SIEM
Tips for evaluating SIEM solutions
and more.

Log management best practices for SIEM

The episode 4 of this series talks about defense evasion and credential access, which are some of the attack progress tactics used by adversaries.

[Episode - 4] Demystifying the MITRE ATT&CK Framework - Talk show

The episode 3 of this series talks about understanding attack advancement tactics used by adversaries, such as persistence and privilege escalation.

[Episode - 3] Demystifying the MITRE ATT&CK Framework - Talk show

The fundamentals of SIEM: 
- Real-time analysis of all alerts from across the network.
-The major components of an effective SIEM solution.
-Building a next-gen security operations center from the ground up.
-Metrics to measure the effectiveness of your SOC.

Fundamentals of SIEM

Cyber Security

SIEM

Cyber Defence

Cyber Attacks

Cyber Incident Response

Security Awareness

Security Operations Center

Cyber Defense

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Fundamentals of SIEM

Presented by

About this talk

More from this channel