January: Best Practices for Scoping Infections and Disrupting Breaches
Attendees of this webcast joined Chuck McGann, Chief Cyber Strategist and former CISO of the US Postal Service, and David Page, Sales Engineer at Splunk, to learn about the specific data sources and capabilities required to determine the scope of an infection before it turns into a breach. This session and live demonstration provided a deeper look into:
Capabilities required to distinguish an infection from a breach
Specific analysis steps to understand the scope of an attack
Data sources required to gain deep and broad visibility
Plus, Mr. McGann discussed how adopting a continuous breach response posture can help you understand the full scope of all infections.