Prove Skill Mastery with GIAC Certs - Free Cert Attempt Included with OnDemand Training


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

Improving Detection and Understanding the Adversary with Deception Technology

  • Wednesday, February 27, 2019 at 1:00 PM EST (2019-02-27 18:00:00 UTC)
  • Matt Bromiley, Ori Bach


  • TrapX Security

You can now attend the webcast using your mobile device!



Despite our best efforts, security practitioners are finding the same attacker return to their systems at least twice. Why is this happening? Are our detection methods working and if not, why not? This SANS webcast and associated whitepaper will look at the evolution of attackers, whether existing defenses are working and how to improve our stance.

Attendees will learn techniques used to identify, remediate and eradicate attackers as well as tips for successfully using deception techniques, including traps and lures. A case study will illustrate key recommendations.

Be among the first to receive the associated whitepaper written by SANS instructor Matt Bromiley.

Speaker Bios

Matt Bromiley

Matt Bromiley is a SANS digital forensics and incident response (IR) instructor, teaching FOR508 Advanced Incident Response, Threat Hunting, and Digital Forensics and SANS FOR572 Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response. He is also an IR consultant at a global IR and forensic analysis company, combining experience in digital forensics, log analytics, and incident response and management. His skills include disk, database, memory and network forensics; incident management; threat intelligence and network security monitoring. Matt has worked with organizations of all shapes and sizes, from multinational conglomerates to small, regional shops. He is passionate about learning, teaching and working on open source tools.

Ori Bach

Ori Bach is General Manager, Vice President of Products at TrapX Security. He is a veteran of the fight against fraud and cybercrime working for leading companies such as IBM Trusteer, NICE—Actimize and government entities such as the Israel Ministry of Justice and the Israel Defense Force (IDF).

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.