OnDemand Includes 4 Months Access to Course Content - Special Offers Available Now!


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

A Proactive Approach to Incident Response

  • Tuesday, September 22, 2015 at 1:00 PM EDT (2015-09-22 17:00:00 UTC)
  • Alan Hall, Jacob Williams


  • Blue Coat Systems, Inc.

You can now attend the webcast using your mobile device!



Incident response (IR) costs skyrocket every year as the number of breaches increase. Whether it's paying for credit monitoring or credit card reissue, these activities are expensive. They are also brand damaging. Nobody wants to be remembered as the next "largest breach to date."

Shortening the time to detection and remediation not only saves money, but also can help reduce the number of records lost and the amount of financial damage caused by intruders. By comparing three different approaches to IR, this webcast will explore the ways in which not all forensics are created equal.

Attend this webcast and learn:

  • The differences between manual forensics, basic forensics, and proactive IR, including a case study that highlights those differences
  • Key components needed to achieve the holy grail of proactive IR
  • Actions a business can take to get there

Those who register for this webcast will be the first to receive access to the associated whitepaper.

View the associated whitepaper here.

Speaker Bios

Jacob Williams

Jacob Williams is a SANS Analyst, certified SANS instructor, course author and designer of several NetWars challenges for use in SANS' popular, "gamified" information security training suite. Jake spent more than a decade in information security roles at several government agencies, developing specialties in offensive forensics, malware development, and digital counter-espionage. Jake is the founder of Rendition InfoSec, which provides penetration testing, digital forensics and incident response, expertise in cloud-data exfiltration and the tools and guidance to secure client data against sophisticated, persistent attack on-premises and in the cloud.

Alan Hall

Alan Hall is the Director of Strategic and Product Marketing for Blue Coat's Advanced Threat Protection Group. He joined Blue Coat through the acquisition of Solera Networks, a leader in Security Analytics and threat visibility solutions. At Solera Networks, Alan was responsible for corporate and product marketing from Solera's start-up days as a security innovator to a recognized leader in Security Analytics and acquisition by Blue Coat. Alan has more than 20 years experience with technology companies and a primary focus working with networking and security solution leaders.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.