NEW SANS Stay Sharp Training - Live Online: Quickly sharpen your skills with 2-day management courses. Save 25% thru tomorrow!

Webcasts

To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

2020 SANS Enterprise Cloud Incident Response Survey Results

  • Tuesday, September 15, 2020 at 1:00 PM EDT (2020-09-15 17:00:00 UTC)
  • Chris Dale, Matt Bromiley

Sponsors

  • Cisco Systems Inc.
  • ExtraHop
  • Gigamon
  • InfoBlox
  • RSA

You can now attend the webcast using your mobile device!

  

Overview

Our 2020 Enterprise Cloud Incident Response Survey investigated the data sources and services that organizations are leveraging to detect, respond to and remediate incidents in the multi-cloud world. The survey focused less on which cloud service organizations are using, and more on what data sources they are taking advantage of, what services they find useful, and what methods are working in their programs.

Attendees at this webcast will learn about the experiences of survey participants with regard to:

  • What components are being breached
  • Preferred sources of evidence in concluding cloud compromise
  • Most prevalent cloud detection capabilities
  • Containment strategies used to control and limit damages from compromise
  • Ways forward in terms of commitment, improvement and impediments

Be among the first to receive the associated whitepaper written by SANS instructor Chris Dale with advice from SANS digital forensics and incident response (DFIR) instructor Matt Bromiley.

Click here to register for a panel discussion webcast with Chris, Matt and selected sponsors, as they explore the survey results more deeply at 1 PM ET on Tuesday, September 22, 2020.

Take the 2020 SANS Enterprise Cloud Incident Response Survey and provide insight into your current state of enterprise cloud incident response capabilities. Survey closes June 15th.

Speaker Bios

Chris Dale

Chris Dale is the founder and principal consultant at River Security, a specialist company operating out of Europe. Along with significant security expertise, Chris has a background in System Development, IT-Operations and Security Management. This broad experience in IT is advantageous when managing penetration tests, incidents and while teaching.

Along with significant security expertise, Chris has a background in System Development, IT-Operations and Security Management. This broad experience in IT is advantageous when managing penetration tests, incidents and while teaching. Chris is passionate about security -- both physical and in IT, and regularly presents and teaches at conferences and workshops. He has helped Fortune 500 understand their security challenges, contracted in government initiatives on securing democratic processes of the country, participated in expert groups in solving industry sector cyber related challenges country wide and helped build successful companies.


Matt Bromiley

Matt Bromiley is a SANS digital forensics and incident response (IR) instructor, teaching FOR508 Advanced Incident Response, Threat Hunting, and Digital Forensics and SANS FOR572 Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response. He is also an IR consultant at a global IR and forensic analysis company, combining experience in digital forensics, log analytics, and incident response and management. His skills include disk, database, memory and network forensics; incident management; threat intelligence and network security monitoring. Matt has worked with organizations of all shapes and sizes, from multinational conglomerates to small, regional shops. He is passionate about learning, teaching and working on open source tools.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.