Special Offer w/ OnDemand: Get an iPad (32 G), Galaxy Tab A, or Take $250 Off OnDemand Training thru Jan 27


To attend this webcast, login to your SANS Account or create your Account.

Needs of a Modern Incident Response Program

  • Wednesday, June 11, 2014 at 1:00 PM EDT (2014-06-11 17:00:00 UTC)
  • Brandon Tansey, Tom Cross


  • Lancope

You can now attend the webcast using your mobile device!



Recent high-profile data breaches highlight a dire need for improved incident response. Despite this fact, a recent survey indicated that typically, less than 10 percent of organizations' security budgets are used for incident response activities.

So how do we beef up incident response? Today's CSIRT must leverage skilled professionals, documented processes and network analysis tools that enable it to continuously and relentlessly hunt for and thwart advanced attackers.

Join Lancope and SANS to learn:

  • What your CSIRT should look like
  • Which processes, policies and best practices can be implemented to maximize its success
  • The tools required for your CSIRT to collect, analyze and act on valuable security data already available on your network
  • Speaker Bios

    Tom Cross

    Tom Cross is Director of Security Research at Lancope. He has over a decade of experience as a security researcher and thought leader. Tom was previously manager of the IBM X-Force Advanced Research team. He is credited with discovering a number of critical security vulnerabilities in enterprise class software and has written papers on topics including security issues in Internet routers, securing wireless LANs and protecting Wikipedia from vandalism. He frequently speaks on security issues at conferences around the world.

    Brandon Tansey

    Brandon Tansey is a security researcher at Lancope working to find ways to better utilize NetFlow to solve information security problems. Prior to his current position at Lancope, Brandon worked as both a security engineer and a security analyst in a high security environment.

    Need Help? Visit our FAQ page or email webcast-support@sans.org.

    Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.