Complexities of Incident Response + Real Time Defender Velocity
April 14, 2020 by CJ LogsdonMonday May 4th, 2020 / 6:30 PM (PST)
WHO: Southwest CyberSec Forum
WHEN: 1st Monday of each month 6:30 PM (PST)
WHERE: Online
WHY: To stay current with new cyber threats, explore new security technologies, and network with your peers.
FREE: No membership fees, no RSVP’s
Sponsor: SentinelOne
Our thanks to SentinelOne for sponsoring this months meeting!
A group of defense and intelligence experts saw savvy attackers compromising endpoints seemingly at will. Traditional approaches failed to provide sufficient protection. They founded SentinelOne to develop a dramatic new approach to endpoint protection. It’s one that applies AI and machine learning to thwart known and unknown threats.
Our team understands how much endpoints matter. When attackers come after our privacy, intellectual property, infrastructure, and collaborative modes of working, they assault more than just data. We’re under attack, and so are our values. That’s why we’re dedicated to keeping our breakthrough platform ahead of threats from every vector. Gartner, NSS Labs, and industry leading organizations recognize that our approach sets us apart.
Contact: Shaq Misra Enterprise Sales shaqm@sentinelone.com 801-414-9641
[6:30-6:35 PM]
Announcements
- Announcements and Updates (~5 min)
[6:35-6:50 PM]
Cyber Security Community updates
- Cyber threat update with Erik Graham (~15 min)
[6:50-7:05 PM]
Sponsor Segment
- Short presentation by our sponsor (~15 min)
[7:05-7:50 PM]
Real Time Defender Velocity
by David Gold – Sr. Director, Sales Engineering – West SentinelOne
Bio:
David Gold recently joined SentinelOne as Sr. Director of Sales Engineering for the West. David has more than 15 years experience in enterprise information security and brings a strong track record of innovation and customer focus to SentinelOne. Previous to SentinelOne he was the VP of Product and VP of Solutions Architecture at ProtectWise and helped launch and build the company from stealth to a successful exit to Verizon. David helped define the network detection and response market and has helped many organizations develop detection and response strategies and to embrace cloud delivered technologies. He has also led Firewall Product Management at McAfee and has held various roles in sales engineering, product management and support at Websense, Intel, McAfee and Secure Computing.
Topic:
Organizations spend more money on cyber security tools every year, yet the number of breaches and the cost of these breaches continues to increase. A new approach is needed that relies on autonomous analysis that can respond at machine speed. By embracing automation, AI and big data analytics organizations can better prevent threats, find and detect what is missed, provide contextual linking for forensic and threat hunting – and even more importantly self heal and fully recover when necessary.
[7:50-8:40 PM]
Complexities of Incident Response
by Chris Pavan; Security Professional, Helios Group
Bio:
Chris Pavan is a veteran incident responder with experience supporting the US military and working in national forensics projects. He is a previous SWSCF speaker and is heavily invested in the Phoenix cyber security community.
Topic:
Chris Pavan will review a forensic case involving a vulnerable minor which touches on a lot of the standard items inherent in any cyber-security forensic case. This particular case ran into a number of unique challenges relating to victims’ rights, the inherent bureaucracy and sometimes siloed mentality of law enforcement agencies and the complex and sometimes conflicting legal framework that must be navigated by the investigator to juggle all these competing dynamics. The presentation will highlight some of the entrenched challenges we still need to deal with not only as cyber security professionals but as a society.