You're new(-ish?) to the environment. Security Monitoring is new to the environment. How do we go beyond basic compliance based monitoring and out-of-box signatures to finding and detecting threats? This talk will cover strategies for figuring out what to monitor in an environment and how to find support resources in your organization you may not realize are available.

Andrew Johnson (@pierogipowered) is currently building an enterprise monitoring program in the health insurance space. Prior to health insurance, he was in the steel industry like any good Pittsburgher. Besides his love of all things log related, he is a co-organizer of the BSides Pittsburgh conference and an avid bicyclist.

Back to Bsides Cleveland 2017 video list