Interactive Courses + DFIR NetWars Available During SANS Cyber Security Central in June. Save $300 thru 5/12.


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

Part 2 | SANS Security Analytics Survey Results: What's Working? What's Not?

  • Thursday, December 08, 2016 at 1:00 PM EST (2016-12-08 18:00:00 UTC)
  • Dave Shackleford, Kinshuk Pahare, Mike Reagan


  • AlienVault
  • Anomali
  • LogRhythm
  • Lookingglass Cyber Solutions, Inc.
  • Rapid7 Inc.

You can now attend the webcast using your mobile device!



Improvements in detection and response are coming slowly as organizations adopt, automate and utilize security analytics and intelligence, according to the 2015 Analytics and Intelligence Survey. In it, respondents said they'd seen some improvements in reduction of false positives, reduced attack surface, and visibility into unknown threats. Results also indicated they were buried under security data and need better analytics with machine learning to connect the dots.

What has improved since our 2015 survey? Out of the data organizations collect, how much data are they actually analyzing? How well integrated are they with their third-party intelligence providers? And have their program improvements resulted in fewer impactful breaches?

This second segment of a two-part webcast goes beyond improvements in visibility to address how analytics can assist in improving risk posture. Attendees will learn about:

  • Progress organizations are making in improving visibility and security with their security analytics and intelligence capabilities
  • Roadblocks to effective implementation of analytics
  • Best practices to improve risk posture utilizing security analytics and intelligence

The Part 1 webcast, on December 7, 2016, will focus on how organizations are utilizing security analytics during real threat events, how they're utilizing analytics and intelligence, and how automated their processes are. Click here to register for Part 1.Be among the first to receive the associated whitepaper, including best practices and tool types to help organizations improve their risk posture with accurate, timely security analytics and intelligence, written by SANS Analyst Dave Shackleford.

View the associated whitepaper here.

Speaker Bios

Dave Shackleford

Dave Shackleford, a SANS analyst, senior instructor, course author, GIAC technical director and member of the board of directors for the SANS Technology Institute, is the founder and principal consultant with Voodoo Security. He has consulted with hundreds of organizations in the areas of security, regulatory compliance, and network architecture and engineering. A VMware vExpert, Dave has extensive experience designing and configuring secure virtualized infrastructures. He previously worked as chief security officer for Configuresoft and CTO for the Center for Internet Security. Dave currently helps lead the Atlanta chapter of the Cloud Security Alliance.

Kinshuk Pahare

Kinshuk Pahare is the director of product management for LookingGlass Cyber Solutions. He is responsible for product strategy, business development and product marketing for the Threat Intelligence Management Platform and Threat Mitigation product lines and has over 10 years’ experience in the security industry. Prior to joining LookingGlass, Kinshuk held various roles in product management and corporate development at Cisco, where he was part of the group responsible for Cisco’s Network as a Sensor and Enforcer (NaaS/E) offering. Later, he was instrumental in technology due diligence and the post-acquisition product strategy of the SourceFire acquisition. Kinshuk has also held engineering and product management roles at ASA and Juniper.

Mike Reagan

Mike Reagan is the chief marketing officer at LogRhythm and brings a successful track record in marketing, business development and sales management in the security, storage, networking and software industries spanning over 24 years. Before joining LogRhythm he was VP of Sales and Marketing at Vericept, where he was a member of the founding executive team. During his seven year tenure, he played a critical role in driving compound annual growth of over 90% and establishing the company as a market leader in Data Leak Prevention. Reagan has also held a variety of executive management positions in Sales, Marketing, Channels and Strategic Alliances at OnStream, Inc., Decisioneering, Inc. (now a division of Oracle) and EMC Corp. He holds a B.A. degree from Providence College.

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.