Get practical pen test, red team, purple team, or exploit dev training from expert instructors at this Novembers HackFest!

Webcasts

To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

Analyzing the Enhanced Analysis of GRIZZLY STEPPE Report

  • Friday, February 17, 2017 at 1:00 PM EST (2017-02-17 18:00:00 UTC)
  • Robert M. Lee

You can now attend the webcast using your mobile device!

  

Overview

Following the initial GRIZZLY STEPPE report, DHS's NCCIC took feedback from the community and released an updated version of their report. The enhanced version showcases a number of best practices for Report writing. This webcast will use the latest report as a positive case study of how to better write reports and will give additional insights into finalizing intelligence in reports.

Speaker Bio

Robert M. Lee

Robert M. Lee, a SANS certified instructor and author of ICS515 ICS Active Defense and Incident Response and FOR578 Cyber Threat Intelligence courses, is the founder and CEO of Dragos, a critical infrastructure cyber security company, where he focuses on control system traffic analysis, incident response and threat intelligence research. He has performed defense, intelligence and attack missions in various government organizations, including the establishment of a first-of-its-kind ICS/SCADA cyber threat intelligence and intrusion analysis mission. Author of SCADA and Me and a nonresident National Cyber Security Fellow at New America, focusing on critical infrastructure cyber security policy issues, Robert was named EnergySec’s 2015 Energy Sector Security Professional of the Year.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.