Reinventing ETL for Detection and Response Teams
Explore innovative strategies for efficient, cost-effective data collection and log enrichment tailored to Detection and Response teams' unique requirements in cybersecurity.
The Fault in Our Metrics - Rethinking How We Measure Detection and Response
Rethinking cybersecurity metrics: A practical framework for developing effective detection & response measurements that incentivize progress and tell a compelling story to leadership.
PhishDefend - A Reinforcement Learning Framework for AI-Augmented Phishing Detection and Response
Explore a reinforcement learning framework for measuring AI-augmented phishing detection and response, enhancing cybersecurity strategies against evolving threats.
A Blueprint for Modern Security Operations
Discover a fresh approach to cybersecurity, combining reactive and proactive techniques with AI to effectively defend against sophisticated threats.
The Fault in Our Metrics: Rethinking How We Measure Detection and Response
Rethink detection and response metrics with a practical framework, new maturity model, and visual examples. Learn to measure capabilities effectively and tell a compelling story using micro-purple testing techniques.
What's Next for Security Professionals - Innovations in Threat Prevention and AI-Driven Security
Explore the convergence of security capabilities, AI-driven innovations, and insights from industry leaders to transform your organization's security approach.
Harnessing AI in Security Operations
Explore AI's role in SOCs, addressing threat abstraction and correlation challenges. Enhance AI solution evaluation skills, separate hype from reality, and design AI-ready security operations.
Unlocking Security Insights for Everyone with AI - Using Large Language Models
Discover how AI and Large Language Models democratize cloud security by simplifying complex data analysis, enabling plain-language queries, and fostering better organizational collaboration.
Leverage Recorded Future Playbooks to Automatically Integrate Threat Intelligence with Microsoft Azure
Automate threat intelligence integration in Microsoft Azure using Recorded Future Playbooks for enhanced detection, enrichment, and prevention in Sentinel and Defender ATP.
Detecting Credential Compromise in AWS
Learn how to detect compromised AWS credentials without prior IP knowledge, crucial for preventing costly data breaches and infrastructure abuse in cloud environments.
Reduce Security Alert Fatigue - Focus on What Matters
Learn strategies to prioritize and manage security alerts effectively, minimizing fatigue and focusing on critical issues in cloud-native environments.
Microsoft Defender: Stop Attacks and Reduce Security Operations Workload with XDR
Comprehensive XDR solution preventing attacks, detecting threats, and automating security operations. Integrates Microsoft 365 Defender and Azure Defender for proactive threat hunting and customized detection tools.
Bypassing Falco - How to Compromise a Cluster without Tripping the SOC
Explore techniques to bypass Falco's default ruleset, enabling stealthy cluster compromise. Learn 9 bypass classes for target enumeration, privilege escalation, and lateral movement without alerting security teams.
Introduction to PowerShell Scripting for Security - Hack3rcon 2014
Learn essential PowerShell scripting techniques for enhancing cybersecurity, covering key concepts and practical applications to strengthen your defensive capabilities.
Open Source GitOps for Detection Engineering
Explore an open-source GitOps framework for efficient detection engineering, enabling version control, collaboration, and automated deployment of security rules and policies.
Full Circle Detection - From Hunting to Actionable Detection
Comprehensive guide to creating efficient detection rules, from initial hunting ideas to actionable alerts for security analysts, using a real-world example of an Outlook persistence technique.
Beyond Security Operations
Explore advanced security operations strategies with ExpressVPN's SOC Manager. Learn cutting-edge techniques to enhance cybersecurity measures and stay ahead of evolving threats in this insightful DefCamp 2022 presentation.
You Disliked Mimikatz? Wait for Kekeo
Explore advanced Windows authentication exploitation techniques and tools, focusing on the powerful kekeo utility for penetration testing and security analysis.
Security Learns to Sprint - DevSecOps
Explore how DevOps can revolutionize application security by integrating it into daily development and operations workflows, enabling faster and more secure software delivery.
Why the Role of CISO Sucks and What We Should Do to Fix It
Explore challenges faced by CISOs, including stress, career risks, and organizational resistance. Learn strategies to thrive in this evolving role and enhance cybersecurity leadership effectiveness.
Look Ma, No Hands! - Decentralizing Security for Scale
Explore decentralizing security operations for scalability, empowering developers with tools and practices to integrate security seamlessly into their workflow.