Last day to get an iPad Air w/ Smart Keyboard or Pixel 4a Smartphone with 5-6 day course registration! View details.


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

A Proactive Approach to Incident Response

  • Tuesday, September 22, 2015 at 1:00 PM EDT (2015-09-22 17:00:00 UTC)
  • Alan Hall, Jacob Williams


  • Blue Coat Systems, Inc.

You can now attend the webcast using your mobile device!



Incident response (IR) costs skyrocket every year as the number of breaches increase. Whether it's paying for credit monitoring or credit card reissue, these activities are expensive. They are also brand damaging. Nobody wants to be remembered as the next "largest breach to date."

Shortening the time to detection and remediation not only saves money, but also can help reduce the number of records lost and the amount of financial damage caused by intruders. By comparing three different approaches to IR, this webcast will explore the ways in which not all forensics are created equal.

Attend this webcast and learn:

  • The differences between manual forensics, basic forensics, and proactive IR, including a case study that highlights those differences
  • Key components needed to achieve the holy grail of proactive IR
  • Actions a business can take to get there

Those who register for this webcast will be the first to receive access to the associated whitepaper.

View the associated whitepaper here.

Speaker Bios

Jacob Williams

Jacob Williams is a SANS Analyst, certified SANS instructor, course author and designer of several NetWars challenges for use in SANS' popular, "gamified" information security training suite. Jake spent more than a decade in information security roles at several government agencies, developing specialties in offensive forensics, malware development, and digital counter-espionage. Jake is the founder of Rendition InfoSec, which provides penetration testing, digital forensics and incident response, expertise in cloud-data exfiltration and the tools and guidance to secure client data against sophisticated, persistent attack on-premises and in the cloud.

Alan Hall

Alan Hall is head of product marketing for Broadcom's Symantec Security Analytics. He joined Symantec through the acquisition of Blue Coat. Prior to Blue Coat, he was the senior director of marketing at Solera Networks, a leader in network forensics and threat visibility solutions. Alan has more than 25 years of experience with networking and security technology leaders. 

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.