40 min listen
What can we do today to prevent tomorrow's breach? - Michael Mumcuoglu - ESW #352
What can we do today to prevent tomorrow's breach? - Michael Mumcuoglu - ESW #352
ratings:
Length:
47 minutes
Released:
Mar 8, 2024
Format:
Podcast episode
Description
Defenders spend a lot of time and money procuring and implementing security controls. At the heart of SecOps and the SOC are technologies like XDR, SIEM, and SOAR. How do we know these technologies are going to detect or prevent attacks? Wait for the annual pen test? Probably not a good idea. In this segment, we'll talk with Michael Mumcuoglu about how MITRE's ATT&CK framework can help defenders better prepare for inevitable attack TTPs they'll have knocking on their doors. Segment Resources: CardinalOps Contributes to MITRE ATT&CK for Fourth Consecutive Release ESG Report: Operationalize MITRE ATT&CK with Detection Posture Management Report: Enterprise SIEMs offer inadequate threat detection 2023 State of SIEM Detection Risk Report Show Notes: https://securityweekly.com/esw-352
Released:
Mar 8, 2024
Format:
Podcast episode
Titles in the series (100)
Enterprise Security Weekly #5 - "SEIM": "Cyber Deception" comes to Defcon and IoT, Cisco makes a push for Voice over WiFi, Sumo Logic monitors your Lambdas, and identity management integrates with SEIM? All that and more so stay tuned! Full Show... by Enterprise Security Weekly (Video)