As IT and security teams struggle to manage a complex sprawl of devices, users, cloud services, and software, there's one certainty we can rely on (thanks to the second law of thermodynamics): things will only get more complex. But there's good news! What we previously thought of as "asset management" has evolved. Today, we have “asset intelligence”, which moves from a spreadsheet approach — focused on getting an inventory of...

Just as networks have changed, so too have packet capture solutions. Modern packet capture solutions can identify the traffic that analysts can't decrypt and stop storing additional traffic to increase retention. Some can even send traffic to other devices that can ingest packet capture data, creating the need for only a single less expensive network tap to send data to multiple systems. And they’re even less expensive than their more an...

Snyk recently released a report on the State of Cloud Native Application Security to define how cloud native adoption has transformed the way modern organizations manage security threats. After surveying over 600 respondents, the report found that high levels of deployment automation empower continuous security testing when building cloud native applications. “Nearly 70% of respondents with high levels of deployment automation were able...

The 2nd annual SANS Cyber Solutions Fest aims to connect cybersecurity professionals of all levels with the latest solutions, tools, and techniques to combat today's cybersecurity threats. Featuring 4 unique levels: Threat Hunting & Intel, SOC & SOAR, MITRE ATT&ACK®, and Cloud Security Network in real-time with over 30 sponsors and learn from top industry experts Join interactive panel discussions, discover job opportunities, c...

Is your IoT dryer transferring 1GB+ of traffic daily? Does your Tesla phone home to the mothership? Is your employer monitoring you at home? Learn a quick, easy, free method for using a Raspberry Pi to gain visibility into your home network with Corelight. We'll teach you to find out what your smart (and not-so-smart) devices are doing using ZeekⓇ logs and Suricata alerts ' two flagship open source technologies ' skills transferable to y...

It seems that a new major data breach is announced every day. Many outside the information security industry struggle to understand why we can't simply secure the systems protecting our critical data. But those inside the industry know the security struggle is all too real. Between failures and change management, shadow IT, proliferation of cloud technologies, and newly announced vulnerabilities, the attack surface of every organization is con...

Today's cyber attacks seem to be changing at breakneck speed. Attackers are ever-increasing their arsenals, quickly pivoting through environments and deploying devastating malware within a matter of minutes or hours. School districts, hospitals, and critical infrastructure pipelines are held hostage for tens of millions of dollars. One thing is clear: We must constantly find ways to shift the advantage back to the defenders. In this product re...

On-premises, hybrid, and cloud operations have complicated the ongoing pursuit of network visibility, security, and incident response. Defense in depth or modularity of edge services and resiliency at the edge is reshaping the new remote workforce as companies deal with the changes in how network traffic flows and the increasing demands on the infrastructure. Although network visibility may be necessary for threat detection and investigation,...

Information Technology (IT) and Operations Technology (OT) are increasingly overlapping in the electric, gas, and water utility industry. IT includes traditional computing, storage and telecommunications systems used for decades in industries such as finance, healthcare and retail. OT includes technologies that run real-time processes such as electricity distribution, manufacturing plants and transportation systems. “IT/OT Convergence...

Enterprise security teams face several challenges that impede efforts to modernize their security operations. Tool proliferation, timely detection, ability to orchestrate across all security and IT tools and scale incident response continues to be an ongoing challenge. Sumo Logic’s Cloud Security Orchestration Automation Response (SOAR) solution augments and empowers modern SOC tools, technologies and teams by offering automated real-tim...