Expert Playbooks for Non-Expert Use

  • Thursday, 18 Jun 2020 12:30PM EDT (18 Jun 2020 16:30 UTC)
  • Speaker: Alex Kirk

Despite advances in processes and tooling, people are still a critical element of security operations. Analysts, however, are not a monolithic group with the same set of skills or experiences, so leveraging the collective knowledge of top-tier defenders is desired,

One way to scale scarce human defender resources across the security problem is to embed their knowledge and experience into the tools used by all members of the incident detection and response team. Corelight shows that the combination of best-in-breed data and expertly-designed playbooks gives security teams the best capability to manage security incidents.