$400 Amazon Gift Card with OnDemand Training through March 10 - Learn More!


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

ICS Active Defense Primer

  • Monday, June 10, 2019 at 2:00 PM EDT (2019-06-10 18:00:00 UTC)
  • Kai Thomsen

You can now attend the webcast using your mobile device!



As targeted threats against ICS environments are becoming more prevalent it has become more important than ever for organizations and companies responsible for critical infrastructure to increase their defensive posture.

In this Webcast Kai Thomsen will give a short introduction into the four different concepts that make up active defense

- Threat Intelligence

- Asset Identification and Network Security Monitoring

- Incident Response

- Threat and Environment Manipulation

and how they can be applied in ICS environments.

Speaker Bio

Kai Thomsen

Kai leads a team of analysts in responding to or proactively hunting for threats in customers’ ICS environments. Prior to Dragos, Kai was the lead Incident Responder at the German car manufacturer AUDI AG where played a key role in establishing an integrated IT defense team responsible for enterprise IT, ICS, and connected car infrastructure.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.