Who's Watching the Watchers?
- Mike Poor
We have instrumented our networks to the Nth degree. We have firewalls, IDS, IPS, Next Gen Firewalls, Log correlation and aggregation... but do we know if we have it right? Will we detect the NextGen(TM) attackers?
In this talk we will explore ways that we improve the signal/noise ratio in our favor, and help identify the needle in the needlestack.
Bonus Sessions
The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into four categories:
- Lunch & Learn: Short presentations given during the lunch break.
- SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
- Vendor: Events hosted by external vendor exhibitors.
- Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
| Session | Speaker | Type |
|---|---|---|
| GIAC Program Overview | — | Special Events |
| SANS Technology Institute Open House | — | Special Events |
| Introducing the CompTIA CASP Exam | Seth Misenar | SANS@Night |
| SANS 8 Mobile Device Security Steps | Chris Crowley | SANS@Night |
| Who's Watching the Watchers? | Mike Poor | SANS@Night |
| Identifying Today's Top 5 Lateral Movement Techniques | Alissa Torres | SANS@Night |
| The 13 Absolute Truths of Security | Keith Palmgren | SANS@Night |
| Session | Speaker | Time | Type |
|---|---|---|---|
| General Session - Welcome to SANS | — | Monday, November 18th, 8:15am - 8:45am | Special Events |
| Windows Exploratory Surgery with Process Hacker | Jason Fossen | Monday, November 18th, 7:15pm - 9:15pm | Keynote |
| Session | Speaker | Time | Type |
|---|---|---|---|
| Vendor Showcase | — | Tuesday, November 19th, 10:30am - 10:50am | |
| Vendor Showcase | — | Tuesday, November 19th, 12:30pm - 1:15pm | |
| Vendor Showcase | — | Tuesday, November 19th, 3:00pm - 3:20pm |
