Anatomy of a Hack Disrupted: How Out-of-the-Box Rules Caught an Intrusion - Seguridad Mania.com - España y América Latina

This is a true story about how technology, skills, and teamwork combined to catch and remediate a sophisticated intrusion on a delicate network. 

In this webinar, Randy Franklin Smith of Ultimate Windows Security and Erick Ingleby of LogRhythm take participants through the fascinating discovery and subsequent investigation of a sophisticated hack involving never-before-seen malware, DNS poisoning and malicious proxies. The presenters explain how the security operations team tracked the intrusion with VPN concentrator logs, packet analysis, server and endpoint logs. The session illustrates not only the value of SIEM technology when done right, but it also shows how a security operations center and infosec teams join forces to catch a sophisticated intrusion early on, prevent damage and then perform full remediation and responsible follow up.