Name: From tabletops to threat hunting: Leveraging tabletop exercises for proactive defense
Start: 2025-04-16T15:00:00Z
End: 2025-04-16T15:01:00.000Z
Location: BrightTALK
Rating: 0

Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats. Mandiant is part of Google Cloud.

In today's complex threat landscape, anticipating and neutralizing cyberattacks is essential. Google Threat Intelligence provides the visibility and insight needed to proactively defend against emerging threats and mitigate operational risk.

Join our Google Threat Intelligence subject matter experts for an informative demonstration exploring how you can:
*Gain Comprehensive Threat Visibility: Access timely intelligence derived from Google's global infrastructure and frontline expertise, including high-fidelity Indicators of Compromise (IoCs), threat actor Tactics, Techniques, and Procedures (TTPs), and malware analysis relevant to your industry.
*Achieve Proactive Threat Detection: Utilize advanced analytics and machine learning to identify, prioritize, and respond to potential threats before they impact your organization.
*Operationalize Actionable Intelligence: Convert raw threat data into clear, actionable insights seamlessly integrated into your security workflows, enabling informed decision-making and effective risk reduction.

During this live session, you will:
*Witness Google Threat Intelligence capabilities in action.
*Understand the different Google Threat Intelligence offerings to determine the best fit for your needs.
*Engage with our threat intelligence specialists during the session.

You will walk away from this webinar equipped with actionable strategies to strengthen your security posture and safeguard critical assets using Google Threat Intelligence.

Who should attend:
Cyber Security Threat Intelligence & SOC Analysts, Engineers, Architects

Proactive Defense: Leveraging Google Threat Intelligence [June 5, 2025]

Join the authors of the M-Trends 2025 Special Report for an insightful webinar series on the latest global cyber trends and attacker tactics. Based on Mandiant's frontline incident response and threat intelligence from January 1, 2024, to December 31, 2024, this series offers a comprehensive view of the evolving cyber threat landscape. Expert analysts will unpack trending metrics, adversary behaviors, and provide actionable insights for your security strategy.

In this webinar Mandiant experts will provide detailed analysis on cloud compromise including: 

*The danger of unsecured data repositories
*The evolution of data theft in cloud and software as a service environments
*Common themes in cloud compromise investigations

Lessons from Cloud Compromise: A Deep Dive into M-Trends 2025

Proactive Defense: Leveraging Google Threat Intelligence [May 22, 2025]

The Mandiant M-Trends 2025 report sheds light on the persistent and evolving landscape. This webinar will provide a detailed analysis of two crucial trends:

*The Insider Threat from North Korean IT Workers: Discover the sophisticated methods employed by North Korean IT workers to infiltrate organizations as remote employees. We will examine their motivations for generating revenue and the inherent insider threat risks they introduce across various sectors. Learn strategies for detection and mitigation.

*A Review of Iran's 2024 Cyber Threat Activity: This session will dissect the key cyber operations and trends attributed to Iranian threat actors in 2024. We will analyze their targeting patterns, the evolution of their tactics and tools, and the geopolitical context driving their activity. Understand the implications for organizations and how to adapt your defenses.

Speakers:
Ofir Rozmann, Trust & Safety, Google Cloud
Josh Atkins, Tech Lead, Google Cloud 
Brad Curtis, Strategic Consulting Senior Manager, Google Cloud

M-Trends 2025:  North Korean IT Worker Insider Threats and the 2024 Iranian Threat Landscape

Join us for an insightful webinar highlighting two cyber threat trends identified in the Mandiant M-Trends 2025 report. 

This session will delve into two significant areas:

*The Growing Risk Posed by Infostealer Malware: Understand the increasing prevalence of infostealer malware, its evolving tactics, and the significant impact it has on organizations across industries. Learn effective detection, mitigation, and prevention strategies.

*Threats to Web3 and Cryptocurrency: Explore the emerging and persistent threats targeting the Web3 and cryptocurrency space. Gain insights into the specific vulnerabilities being exploited, the threat actors involved, and best practices for securing your digital assets and navigating this evolving landscape.

Speakers:

Adrian Hernandez, Senior Threat Analyst, Google Cloud
Joe Dobson, Principal Analyst, Google Cloud
Andrew Kopcienski, Principal Analyst, Google Cloud

M-Trends 2025: Infostealer Malware and the Threats to Web3

Amidst the hype surrounding AI-driven cyber threats, what's actually happening in the wild? Join Google Threat Intelligence experts as they move beyond theoretical discussions of abuse of AI, drawing on real-world observations of how government-backed threat actors have attempted to misuse Google’s AI-powered assistant Gemini for cyber attacks and information operations. Our goal is to shed light on these activities with security professionals to raise awareness and enable stronger protections for all. 

Attendees will gain insights into:

*Specific cases of attempted misuse of Gemini by Chinese, Iranian, North Korean, and Russian government backed actors.
*How AI is being leveraged  across various stages of cyberattacks, from initial reconnaissance to post-compromise activities.
*In-depth analysis of government-backed threat activity and if it represents novel or unique AI-enabled attack or abuse techniques.

Presenters:

*Jamie Collier, Lead Threat Intelligence Advisor (Europe), Google Threat Intelligence Group
*Aurora Blum, Threat Intel Analyst, Google Threat Intelligence Group
*Bart Inglot, Security Engineer, Google Threat Intelligence Group

Adversarial misuse of generative AI: Analysis beyond the hype

The M-Trends 2025 Report offers a deep dive into the latest global cyber trends and attacker tactics. Based on Mandiant's frontline incident response and threat intelligence from January 1, 2024 to December 31, 2024, this report helps readers stay ahead of the curve by providing insights on the evolving cyber threat landscape.

Join our expert threat analysts on May 13th as they unpack these trending metrics and significant adversary behaviors, and learn how these findings can enhance your security strategy against future attacks.

Topics will include:
*Incident response metrics, including top detection sources and initial infection vectors
*Industry targeting trends

Speakers:
Kirstie Failey, Principal Threat Analyst, Google Cloud
Kelli Vanderlee, Senior Manager, Google Cloud
Alexa Rzasa, Product Marketing Manager, Google Cloud

M-Trends 2025: By the Numbers

Proactive Defense: Leveraging Google Threat Intelligence [May 8, 2025]

Proactive Defense: Leveraging Google Threat Intelligence [April 24, 2025]

Join us for a live threat hunting webinar hosted by Google Threat Intelligence experts.

In this session, we will walk through recent threat campaigns, including phishing and vulnerability exploitation. We'll also take a closer look at the activity of a threat actor and provide an overview of the Google Threat Intelligence platform.

The session will conclude with a live Q&A, giving you the opportunity to engage with our experts and enhance your threat hunting practices.

Presenters:
Sara Ouled, Technical product consultant for Google Threat Intelligence, Google Cloud 
Alexandra Martin, Technical product consultant for Google Threat Intelligence, Google Cloud

Threat Hunting with Google Threat Intelligence

Join SANS Principal Instructor Josh Lemon as he unpacks the findings of the highly anticipated SANS 2025 Threat Hunting Survey. In an age where adversaries are leveraging generative AI and exploiting cloud vulnerabilities, understanding advanced threat detection strategies is more critical than ever. This webcast reveals how organizations are adapting their threat hunting practices to combat increasingly sophisticated attacks. 

This webcast provides actionable insights to elevate your cybersecurity practices, including:
*The role of generative AI in reshaping threat detection.
*How to overcome challenges and seize opportunities in cloud-based environments.
*Real-world strategies for defending against supply chain attacks.
*Innovative and practical approaches to stay ahead of emerging threats.

SANS 2025 Threat Hunting Survey: Advancements in Threat Hunting Amidst AI and Cloud Challenges

This webinar, the final session in The Defender's Advantage virtual series, focuses on how Google Cloud Security can help organizations of all sizes activate their defender's advantage by guiding them through the activation of the six critical functions of cyber defense.    

You will learn about:
*The Defender's Advantage methodology and its benefits    
*How Google Cloud Security solutions map to the six critical functions of cyber defense  
*Real-world examples and case studies of how organizations have successfully implemented The Defender's Advantage with Google Cloud Security    

Join us to discover how to make Google part of your security team. 

About The Defender’s Advantage:
Google Cloud Security published The Defender’s Advantage, a cyber defense framework to help all organizations prepare for and mitigate future security incidents. We believe that security teams like yours have the ultimate cyber defense advantage, the ability to control the environment being attacked.  Learn more here: https://cloud.google.com/security/resources/defenders-advantage

Activate the 6 critical functions of cyber defense with Google Cloud Security [The Defender's Advantage series, part 4]

Cybersecurity should be a team sport. Attackers are sharing tactics and sometimes infrastructure, so defenders need to work together as well. Sharing threat intelligence within trusted circles is no longer a "nice to have"—it's an essential component of a robust security strategy. Join our webinar to learn how Google Threat Intelligence empowers you to collaborate with internal groups, industry peers, MSSPs, and Mandiant experts to strengthen all of our collective defense.

Join Megan DeBlois, Google Threat Intelligence Product Manager, as she explores how private collections within Google Threat Intelligence can provide a secure and confidential space to share critical intelligence, including IOCs, TTPs, and strategic insights. Discover how these trusted circles enable you to:

*Proactively improve your organization's defenses
*Stop threats before they impact your systems
*Gain a deeper understanding of the evolving threat landscape. 

Don't miss this opportunity to learn how to build and share private collections within your trusted circle.

Don't go it alone: Use private collections in threat intelligence to strengthen your trusted circles

This talk is designed to illuminate how Mandiant contextualizes Threat Profiles and provide implementation ideas on how they can be leveraged to bolster organizational security. We will discuss the strategy behind creating a Threat Profile, highlight the types of information Mandiant considers key to enable successful defender advantage, and then explain how to build a proactive strategy with the Threat Profile as the foundation. 


Attendees will learn how to identify stakeholders, conceptualize business operations, identify relevant intelligence, and use this data to shape an organization's defensive posture. We will showcase some examples of how clients have used our reports to enhance their security operations.

So you need a Threat Profile... now what?

Cyber defense is not just about preventing attacks; it's also about effectively responding to and recovering from incidents. This webinar will focus on the critical cyber defense functions of Validation, Response, and Mission Control, examining how they contribute to a comprehensive and resilient cyber defense program.

What you will learn:
*How to rigorously test and validate your entire cyber defense program to identify areas of improvement, and ensure preparedness against real-world threats.
*How to build and implement an effective incident response plan, from preparation and containment to eradication and recovery.
*How centralized coordination and management can enhance your organization's overall cybersecurity posture.

Join us to gain practical knowledge and actionable strategies for elevating your organization's cyber resilience through robust validation, response, and mission control capabilities.

About The Defender’s Advantage:
Google Cloud Security published The Defender’s Advantage, a cyber defense framework to help all organizations prepare for and mitigate future security incidents. We believe that security teams like yours have the ultimate cyber defense advantage, the ability to control the environment being attacked. Download The Defender's Advantage ebook here: https://cloud.google.com/security/resources/defenders-advantage

Activate continuous security testing to improve cyber response [The Defender's Advantage virtual series, part 3]

A crucial aspect of effective cyber defense is the ability to produce and disseminate actionable intelligence into the hands of various security functions, in a format and language they can understand and use to make decisions. This allows for informed decision-making and proactive threat mitigation. 

This webinar will delve into the critical functions of Intelligence, Detection, and Hunting, exploring how they work together to create a robust and resilient security posture. 

You will learn:
*How to effectively gather, analyze, and operationalize threat intelligence to inform your cyber defense strategy
*Best practices for developing and implementing high-fidelity detections that align with attacker tactics and techniques
*Methodologies and tools used to proactively hunt for threats and identify hidden adversaries in your environment

Join us to gain valuable insights and practical strategies for strengthening your organization's cyber defenses through an intelligence-led approach to detection and hunting.

Intelligence-led detection and threat hunting  [The Defender's Advantage virtual series, part 2]

Join us for a LIVE session with one of our top Google Threat Intelligence researchers to gain valuable insights into the Financial Institutions context. The session will feature curated, real-time, and actionable strategic intelligence from Google Threat Intelligence.

*Get the latest information on emerging threats and attack trends.
*Learn how to apply this intelligence to strengthen your organization's security posture.
*Have your questions answered during the live Q&A.

Use cases in Threat Intelligence: Strategic Threat Intelligence for Financial Institutions

Tabletop exercises (TTXs) help organizations evaluate their response to cyber threats, but they can also inform proactive security efforts. This webinar is designed for security teams looking to connect strategic technical exercises with operational defense. Mandiant experts will walk through the process of developing a tabletop exercise and using its scenarios to build a targeted threat hunt.

You will learn how to:
*Design a tabletop exercise
*Extract useful insights
*Apply insights in a structured threat-hunting approach

Presenters: 

Alishia Hui, Sr. Consultant, Mandiant, Google Cloud
Muhammad Muneer, Principal Security Consultant, Mandiant, Google Cloud
Tanya Wilkins, Product Marketing Manager, Security, Google Cloud (Moderator)

From tabletops to threat hunting: Leveraging tabletop exercises for proactive defense

Threat Hunting

Cyber Defense

Security Operations

Threat Detection

Threat Analysis

Security Analysis

Cyber Defence

Threat Assessment

Cyber Security

Cyber Skills

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

From tabletops to threat hunting: Leveraging tabletop exercises for proactive defense

Presented by

About this talk

More from this channel