Security Secrets: The Art Of Agile Detection Engineering Presentation

  • Date 20 Oct 2020

Security Secrets: The Art Of Agile Detection Engineering Presentation

20 Oct 2020, 14:00 - 14:45

Information Security Exchange
Language:
English

One of the biggest challenges for security teams today is to keep up with modern adversaries. A SOC needs to continuously improve detection capabilities based on the evolving adversary techniques. The time between a new attack seen “in the wild” and deploying a new detection in your SIEM is crucial to success. SOC processes, especially detection development, need modernizing in order to keep up with the advancing threat landscape. This is where the agile DevOps mindset should be adopted within SOCs to reduce the detection development time.

3 Benefits for Delegates:

  1. DevOps and its advantages in a modern SOC
  2. What modern detection development looks like using DevOps methods
  3. How to build an automated workflow for validating and testing detection content


Presented by: Patrick Bareiß, Senior Security Research Engineer, Splunk

REGISTER NOW

Business Issues

  1. Business Issues Covered
    • Balance, manage and prioritise risk‎
    • Build a robust cyber response and resilience strategy

Sponsors

Splunk