Name: Let’s Talk SOC: Ep 3 - What to Know Before Reinvesting in SIEM
Start: 2023-06-22T09:00:00Z
End: 2023-06-22T09:00:11.000Z
Location: BrightTALK
Rating: 0

We help protect organisations from today’s most pervasive cybersecurity threats. With us on your team, you’ll rest easy knowing your mission-critical assets are safe from threat actors.

Secureworks® CTU™ experts provide an update on Operation CRONOS, the ongoing law enforcement disruption of one of the largest and most prolific ransomware groups of recent years, LockBit. This webinar will build on the detail provided in Episode 1 of Inside the Threat by discussing the most recent law enforcement action which uncovered links between LockBit and notorious Russian cybercriminal group, EvilCorp. 

CTU researchers will also look at the impact of this latest phase of Operation CRONOS on both the operators of LockBit and the wider ransomware ecosystem, providing practical advice for safeguarding your organization from ransomware.

In this informational webinar, you will:
  -- Gain insights into the latest developments in the ongoing disruption of LockBit and the newly discovered links to EvilCorp. 
  -- Discover how continued law enforcement activity has impacted the wider ransomware ecosystem and what this means for the threat landscape. 
  -- Learn how to protect your organization from ransomware attacks.

Inside the Threat: Secureworks CTU Analysis | Episode 4: LockBit Disruption Update

Many mid-market organizations face security-specific challenges as they grow. It’s not easy protecting an increasingly unique and complex environment without enough resources or staff to confidently keep up with the threats they are facing. So how can these organizations change from reactive to proactive to increase their vigilance, improve their resiliency, and gain strategic guidance to elevate their security programs? Unfortunately, many managed detection and response (MDR) solutions fall short of being able to provide a flexible and holistic solution that doesn’t break their cybersecurity budget.

This on-demand webinar covers the challenges mid-market companies face, what a more tailored MDR solution should deliver, and how Secureworks® Taegis™ ManagedXDR Plus builds on the strong foundation of MDR for significantly less than it would cost to accomplish similar outcomes internally.

How to Tailor Security with Limited Resources

In the last year, 90% of organizations have suffered identity breaches as cyber attacks involving identities grow more sophisticated and widespread(1). Organizations rely heavily on their identity infrastructure to enable collaboration, remote work, and access to internal systems. But the complexity and room for gaps and errors in these systems make it an attractive target for threat actors, posing significant risks across all sectors.

To manage user identities and control access to resources, most organizations use identity and access management (IAM) systems. It's not enough. Analysis of these systems uncovered that 95%(2) are misconfigured. These misconfigurations provide cybercriminals with opportunities to escalate privileges and leverage identities to further their attacks. While IAM systems are crucial to an organization's security strategy, they must be complemented by additional security layers to proactively combat these tactics. Identity threat detection and response (ITDR) can provide these additional layers, identifying risks and anomalies and detecting potential breaches early.

In this informational webinar, you will learn:
 • The current state of identity threats and the expanding identity attack surface
 • Why organizations benefit from identity threat prevention as well as detection and response
 • How ITDR can help safeguard against the escalating risks associated with identity threats

Sources:
1. Identity Defined Security Alliance (IDSA), 2023 Trends in Securing Digital Identities, July 2023
2. Calculated based on existing Secureworks customer data gathered from incident response

Stop Identity Attacks in Their Tracks: A Roadmap to Risk Reduction

From opportunistic cyberattacks to state-sponsored threats, join this webinar to learn the latest tools, tactics, and motivations behind today's cybercriminal threats.

By understanding the motivation of today’s cybercriminals, your organization will have the insight they need to build a blueprint for cyber resilience. Learn how to take a more effective and efficient approach to prevention, detection, and response to reduce your cyber risk.

This Informational Webinar will cover:
 • Threat actor behavior and motivation to help understand the latest trends in cybercrime
 • Real-world examples of how organizations have both fallen victim to and protected themselves from threats
 • How to strengthen your cyber-resilient programs with managed detection & response (MDR)

Build a Cyber-Resilient Organization: Know the Threat to Beat the Threat

Join Nash Borges, Head of Engineering, and Chris Yule, Director of CTU Capabilities, as they explore how integrating threat intelligence into security platforms enhances overall protection. 

This presentation highlights how embedding deep analytics and real-world insights can drive superior detection, deliver unmatched response, and ensure that your security investments provide maximum value.

Embedding Threat Intelligence for Super Security

Join Secureworks Global Threat Intelligence 2024 MC, Julia Belle, as she hosts a compelling fireside conversation with Cynthia Kaiser, Deputy Assistant Director, FBI Cyber; Will Lyne, Head of Cyber Intelligence at the UK National Crime Agency; and Don Smith, Vice President, Secureworks CTU.

This discussion will highlight the crucial role of international cooperation, public-private partnerships, and ongoing efforts to understand and counter the impact of cybercrime and cyber threats.

Fireside Chat: Bridging Borders in Cybersecurity

Wendy Thomas, CEO, covers the importance of threat intelligence and how it is crucial for securing your mission.

Global Threat Intelligence Summit 2024 Closing Remarks

Join in as Alexandra Rose, Director of Threat Intelligence and Government Partnerships, and Stacy Leidwinger, VP of Marketing, discuss how the CTU and threat intelligence help businesses maintain a defensible position amid increasing regulatory pressures.

Context Matters: Defending Your Business with Threat Intelligence

As threat actors increasingly use compromised systems and cloud-based platforms, the challenge for network defenders grows. The rapid turnover of this infrastructure, especially within shared or re-allocated cloud environments, makes detection and remediation more difficult. 

In this session, experts from Secureworks and Amazon Web Services (AWS) explore effective strategies to protect organizations from these evolving threats, focusing on the unique challenges and solutions within cloud-based environments.

Defending Against Dynamic Attacker Networks: Insights from AWS and Secureworks

As a newcomer to the dark web research team, Secureworks Threat Intelligence Knowledge Manager, Rebecca Taylor, relays her learnings after six months monitoring the criminal underground. Rebecca will share her experiences and insights on how employees’ digital footprints can make their way into the dark web and impact business security.

Musings from a Dark Web Newbie: Digital Footprints and Dark Web Insights

Tim Mitchell provides insights into the ever-evolving world of ransomware, highlighting how loyalties and tactics continue to change in the post-LockBit era.

The Shifting Sands of Ransomware

Chris Yule, Director of CTU Capabilities, leads a panel discussion featuring partners from Mimecast and SentinelOne, along with our own expert, Aiden Sinnott. The panel will explore the realities and misconceptions surrounding deepfakes, AI, business email compromise (BEC), and social engineering.

Deepfake Deep Dive: Truths and Myths in AI and Social Engineering

Presented by Director of Threat Intelligence, Rafe Pilling, this session explores the series of technical breadcrumbs and analytical pivots used to unmask an Iranian APT operator.

The Winding Road to Attribution

Mark Osborn examines China’s ongoing use of cyber intrusions to further its political, military and economic aims and answers the question, “How are China’s intelligence collection operations evolving?”

An A to Z of dominance: Chinese cyber threat in the age of the Xictionary

Don Smith, VP of the Counter Threat Unit, hosts a roundtable discussion with senior research experts Rafe Pilling, Sarah Kern, and Keith Jarvis, focusing on the latest threat trends, including state-sponsored attacks, credential compromises, ransomware, and more.

State of the Threat Roundtable

Adversary-in-the-Middle (AiTM) phishing attacks have notably increased in the past year, requiring new focus in customer defense strategies. This session will discuss how attackers use email or messaging services to intercept and manipulate communications between users and legitimate services. We’ll also explore the Axios AiTM campaign and how tools like Evilginx have been leveraged in these attacks, along with practical strategies to detect and prevent this growing threat.

Adversary-in-the-Middle (AiTM) Attacks: What You Need to Know

This session will provide a comprehensive review of Russian hostile state cyber tradecraft, focusing on the techniques used in the Ukraine conflict and other global operations. We’ll explore how Russia’s military, intelligence agencies, patriotic proxies, and contracted private companies combine computer network exploitation with information warfare to project power. From the abuse of perimeter network devices and poorly protected accounts to the manipulation of social media platforms, we’ll examine both traditional and novel tactics used by Russian actors. Viewers will gain insights into how these strategies impact global cybersecurity.

Russian Tradecraft: A Year in Review

In 2024, law enforcement takedowns of prominent ransomware groups have impacted the cybercrime ecosystem. Together, we’ll analyze how effective these actions have been in disrupting criminal networks and the broader implications for the threat landscape. Viewers will gain insights into the successes and challenges of using takedowns to combat cybercrime.

Law Enforcement Takedowns: How Effective Are They?

Let's Talk SOC: Ep.18 - Holistic Monitoring: Why Now and What’s the Benefit?

Let's Talk SOC: Ep. 17 - A Year in Cybersecurity: Key Takeaways & Future Trends

Let's Talk SOC: Ep. 16 - AI in Cybersecurity: Powerful Ally and Force Multiplier

Let's Talk SOC: Ep. 15 - Automation in Cybersecurity: Collaborative Intelligence

Let's Talk SOC: Ep. 14 - Beyond the Hype: What AI Really Means for Cybersecurity

Let's Talk SOC: Ep. 12 - Ransomware Preparedness: How Ready are you?

Let's Talk SOC: Ep.11- Proactive Threat Hunters: Transforming Managed Security

Lets's Talk SOC: Ep.10 - Ransomware Goes Pro: How to Up Your Protection Game

Let’s Talk SOC: Ep.9 -Covering All the Bases for Successful Incident Management

Let’s Talk SOC: Ep 8 - Cybersecurity or Cyber Insurance?

Let’s Talk SOC: Ep 7 – Doubling Down on Defense with Secureworks & Microsoft

Let’s Talk SOC:Ep 6- Understanding Your Attack Surface & Extending Your Response

Let’s Talk SOC: Ep 5 - Manufacturing Under Attack: Defending Against Ransomware

Let’s Talk SOC: Ep 4 - Moving Beyond the Endpoint: Why EDR Isn’t Enough

Let’s Talk SOC: Ep 2 - The First 24 Hours after a Cyberattack

Let’s Talk SOC: Ep1 - Defending the Defenders: Lessons Learned as a CISO

Let’s Talk SOC – A Podcast Series Brought to You by Secureworks

What We'll Cover 

 - XDR vs. SIEM 
 - Investment level needed for a SIEM purchase 
 - SOAR platform: necessary or not? 

Security Information and Event Management (SIEM) has been the solution of choice for many organizations over the years, but is it keeping up with the current demands of security teams? If you’re considering SIEM as a cybersecurity solution, listen in on this conversation with Justin Davis, Senior Systems Engineer, for what you need to know about SIEM before making additional investments.

Let’s Talk SOC: Ep 3 - What to Know Before Reinvesting in SIEM

Cyber Security

Cyber Attacks

Threat Defence

Threat Detection

threat response

managed detection

SecOps

Incident Response

Ransomware

SOAR

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Let’s Talk SOC: Ep 3 - What to Know Before Reinvesting in SIEM

Presented by

About this talk

More from this channel