Security teams need to build consistent, reusable design patterns for cloud security controls that can be automated and maintained readily over time. Within cloud infrastructure, many controls can be provisioned and enabled ahead of time and operate autonomously in any deployment scenario. Commonly termed “guardrails,” these controls ensure that security capabilities are always enabled and operate within the context of deployments...

This two-hour workshop will introduce the student to Docker containers and images. During the workshop, we will create an image that contains the Command Line Interfaces for AWS, Azure, and Google Cloud as our example, but the same process would be followed for any Linux-based command line tool. During the session, we will build, test, and troubleshoot the creation of the Dockerfile and publish the image to Docker Hub. Next, we will set up Git...

Join us for a panel discussion presented by Emerson and Dragos, as they share their insights around OT cybersecurity as partners - while also depicting the unique expertise, experience, and responsibilities that they bring to the table to defend customer installations and environments together. Although the core focus of the conversation will be on DeltaV systems, a high-level overview of OT cybersecurity and the Industrial Control Systems (IC...

In its sixth year, the SANS 2023 SOC Survey explored SOC capabilities, deployment architecture, technology use and satisfaction, capabilities outsourced and satisfaction with outsourced providers. With survey data from active SOC managers and analysts, this webcast will cover the escalating movement to the cloud, orchestration, and tool changes. It explores the developing promise of deception, AI and machine learning. Key topics will include c...

Zero trust is a cybersecurity concept, and implementation architecture, that emphasizes the need for strict verification of all devices, users, and networks before granting access to sensitive data and systems. Security teams love the idea of zero trust, but what goes behind implementing and successfully maintaining zero trust architecture? During this event, we'll bring together experts and industry leaders to discuss the latest developments...

The castle model is dead, it's time to move on. Protecting our corporations primarily from the outside looking in is a naive and inefficient approach. Prevention is great, but inevitably the defenses will fail, and the attackers are on the inside. Threats attacking us from the inside are real, and we can neither avoid it nor can we "trust our employees". While it would be nice to trust employees, and we can trust most of them, we need to be vi...

This is a 2 hour hands-on workshop. As with any enterprise environment, we can (and should) focus on hardening our defenses to keep the adversaries out, but these defenses may some day be evaded via a variety of methods. Cloud is no different. In this workshop, which is a follow-on from the talk “Building Better Cloud Detections... By Hacking? (Azure Edition)“, we will work through the process of creating a detection that we can us...

Functionality is mission-critical to all organizations. It is also the critical element to anyone seeking to do harm to that mission. For an organization and its partners to make use of functionality, it must be visible to both. Organizations face uncertainty, because with increasing visibility comes an increased attack surface, and therefore increased risk. Or does it? This webcast looks at the correlation between the two, and how we can use...

Learn More and Submit Your Proposal “Can we use AI in our workplace?” — This question is being asked of every CISO and technical leader worldwide. The answers are not easy. Many CISOs and technical managers are trying to educate themselves quickly on the risks and benefits associated with using AI in the workplace. In addition, businesses and organizations are concerned about how AI can be used to possibly disrupt or introduc...

As federal agencies and private organizations continue the push to Zero Trust deadlines, we’ve all got some some Trust issues to work on. The best thing to do is get it all out in the open and don’t let your relationship with your networks get toxic. Moving to Zero Trust requires a good foundation that your organization can build trust on. In this Webinar, experts from Corelight’s Public Sector team will discuss how security...