Branched Execution, The Evolution of a Kill Chain - Seguridad Mania.com - España y América Latina

In modern information security, we have come to understand that just as many organizations are being exploited through external threat vectors as internal. The relative ease in which an attack can be "customized" or at least "optimized" for a specific target is ever increasing. What we would like to explore is the ability of an existing Security analytics team to use existing logs, in conjunction with a "Big Data" back end to detect threats that may be evolving. Looking at existing/known attack techniques and using logs and near-time analysis we will look for how and where a known TTP chain may deviate to circumvent a Kill Chain/Alert or other active counter measures. With this knowledge, Mike will look at how we may be able to respond and adapt to better protect our environment.