THIR Summit Solutions Track

Theres a high chance that hidden threats already exist inside your organization's networks. No matter how thorough and sophisticated an organizations security precautions may be, it cannot assume that its security measures are impenetrable. By themselves, prevention systems are insufficient to counter focused human adversaries who know how to get around today's advanced security and monitoring tools. It takes highly skilled and focused hunters to defeat these persistent adversaries.

Threat hunting and incident response tactics and procedures have evolved rapidly over the past several years. Teams can no longer afford to use antiquated incident response and threat hunting techniques that fail to properly identify compromised systems. The key is to constantly look for attacks that get past security systems and to catch intrusions in progress, rather than waiting until after attackers have completed their objectives and done damage to the organization. For the incident responder, this process is known as "threat hunting". Now more than ever individuals need to learn and use advanced skills to hunt, identify, counter, and recover from a wide range of threats within enterprise networks, including APT nation-state adversaries, organized crime syndicates, and hactivists.

Join this SANS lead forum as we explore various threat hunting and incident response topics through invited speakers while showcasing current capabilities available today. Presentations will focus on technical case-studies and thought leadership using specific examples relevant to the industry.

Relevant topics:

•    Incident Containment and Remediation
•    Kill Chain Strategies
•    Windows, Mac and iOS Forensic Analysis and Incident Response
•    Open-Source Tools and the SIFT Workstation
•    Cyber Threat Intelligence
•    Reverse-Engineering Malware