OnDemand Special Offer - iPad Air w/ Smart Keyboard, Surface Go, or $300 Off!


To attend this webcast, login to your SANS Account or create your Account.

Improving ICS/OT Visibility and Threat Detection with the Dragos Platform

  • Tuesday, June 02, 2020 at 12:00 PM EDT (2020-06-02 16:00:00 UTC)
  • Tim Helming, Ben Miller


  • Dragos, Inc.

You can now attend the webcast using your mobile device!



Our 2019 ICS Year In Review research revealed that adversaries are expanded their targeting and capabilities and increasingly focused on remote connectivity - a trend with particular relevance with the uptick in COVID-mandated remote work. As cyber threats like these continue to grow, it has become more important than ever for ICS owners and operators to have a clear, accurate picture of their OT/ICS environments. This is easier said than done, however.

Join Dragos Vice President of Product Tim Helming and Dragos Vice President of Professional Services & R&D Ben Miller as they share observations from our 2019 ICS Year In Review research from threat hunts, incident response and real-world engagements. They'll show how we incorporated this research and lessons learned working with customers into the Dragos platform to provide better visibility and threat detection of your industrial environment.

They'll cover:

  •    How to build a comprehensive view of the assets in your environment
  •    How to triage detections and respond to known or suspected dangerous events
  •    How to use MITRE's ATT&CK framework for ICS to improve your security posture
  •    How to use asset identification and characterization for better situational awareness

Speaker Bios

Tim Helming

Tim has nearly 20 years of experience in cybersecurity and leads the Dragos product team comprised of product managers, user experience (UX) designers, and technical writers focused on delivering world-class products to the ICS community.

Ben Miller

Ben leads a team of analysts in performing active defense inside of ICS/SCADA networks. He is responsible for a range of services including threat hunting, incident response, penetration testing and assessments for the industrial community as well as advanced research and innovation within ICS security.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.