Got GIAC? Free GIAC Cert Attempt Included with OnDemand 5 or 6 Day Training thru July 7


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

The Beginnerís Guide to Applying Machine Learning to Incident Response

  • Thursday, August 15, 2019 at 1:00 PM EDT (2019-08-15 17:00:00 UTC)
  • Dave Shackleford


  • DomainTools

You can now attend the webcast using your mobile device!



There is a lot of hype around Machine Learning (ML) and its application in infosec. Putting the Machine Learning snake oil aside, according to a recent report conducted by the Ponemon Institute, 49% of security professionals are finding that Machine Learning enhances their ability to prioritize threats and vulnerabilities and 47% say it increases the productivity of security personnel.

In this webinar, join SANS Analyst, Dave Shackleford and Senior Data Scientist, Sean McNee for an introduction to AI and ML, as well as how to identify technologies that actually use ML, and tips for harnessing the power of ML in Incident Response.

In this webinar you will learn:

  • What are AI and ML and how are they different?
  • How can you identify technologies that really use ML and those that just claim to for marketing purposes?
  • Tools and data to help you prioritize threats and vulnerabilities
  • Strategies for applying ML to your Incident Response workflow

Speaker Bio

Dave Shackleford

Dave Shackleford, a SANS analyst, senior instructor, course author, GIAC technical director and member of the board of directors for the SANS Technology Institute, is the founder and principal consultant with Voodoo Security. He has consulted with hundreds of organizations in the areas of security, regulatory compliance, and network architecture and engineering. A VMware vExpert, Dave has extensive experience designing and configuring secure virtualized infrastructures. He previously worked as chief security officer for Configuresoft and CTO for the Center for Internet Security. Dave currently helps lead the Atlanta chapter of the Cloud Security Alliance.

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.