A Logo

Feel free to include my content in your page via my
RSS feed

Help Irongeek.com pay for
bandwidth and research equipment:

Subscribestar or Patreon

Search Irongeek.com:

Affiliates:
Irongeek Button
Social-engineer-training Button

Help Irongeek.com pay for bandwidth and research equipment:

paypalpixle


Waking up the data engineer in you! - Jared Atkinson Derbycon 2019 (Hacking Illustrated Series InfoSec Tutorial Videos)

Waking up the data engineer in you!
Jared Atkinson
Derbycon 2019

At almost every company we visit, we find that there is a disconnect between data engineers and security analysts. Security analysts are responsible for using available data to find potential adversaries, while data engineers are responsible for securing, standardizing, and making data available for analysts. It may seem obvious that these two roles should work together, but it is usually not the case which limits how analysts can use data and technology to detect adversaries. This talk focuses on why it is important for security analysts to understand data engineering basics before building detections. We will use a detection use case to show how a non-scalable process can be made into an efficient detection by looking at telemetry as the foundation of a strong detection capability.

Jared is the Adversary Detection Technical Lead at SpecterOps where specializes in Detection Engineering and Digital Forensics. In this role, he helps private sector orgs build their detection programs. In his previous life, Jared lead incident response missions for the U.S. Air Force Hunt Team.

@jaredcatkinson

Back to Derbycon 2019 video list

Printable version of this article

15 most recent posts on Irongeek.com:


If you would like to republish one of the articles from this site on your webpage or print journal please contact IronGeek.

Copyright 2020, IronGeek
Louisville / Kentuckiana Information Security Enthusiast