Beyond the Alert: Google's Blueprint for Modern Threat Detection and Cloud Forensics - Seguridad Mania.com - España y América Latina

In an era of increasing digital complexity, responding to security threats requires more than just a simple alert. It demands a sophisticated, end-to-end strategy that spans from initial detection to deep forensic analysis. This session offers an exclusive look into how Google manages the full lifecycle of security incidents at a global scale. Discover how Google's detection and response team hunts for malicious activity across one of the world's largest and most complex environments. We’ll cover how we leverage automation to handle 97% of events, driving our average threat dwell time down to hours instead of weeks. Then we’ll share Google's Digital Forensics’ team approach to live, at-scale evidence acquisition using tools like GRR Rapid Response, and how we automate the entire forensic workflow — from processing to collaborative timeline analysis — to ensure a swift and thorough investigation. This session will provide security leaders and practitioners with a comprehensive blueprint for building a more resilient, efficient, and scalable security operations program, inspired by the battle-tested practices of Google's own internal teams.