Best moments from [3-4-22] “Hacking Automated Response” – Super Cyber Friday

By
Andrew Freels
-

Here are six minutes of our best moments from Friday, March 4th, 2022 for Super Cyber Friday. Topic will be “Hacking Automated Response: An hour of critical thinking about more than just endpoint response capabilities.”

Watch the full video.

Our guest for this discussion were:

Got feedback? Join the conversation on LinkedIn.

HUGE thanks to our sponsor Deepwatch

Increasing ransomware attacks and their evolving sophistication have been putting more pressure on security teams than ever before. Luckily, managed detection and response (or MDR) has emerged as a critical component for improving security operations, reducing ransomware risk, and minimizing the overall impact an attack can have. Visit Deepwatch.com to see how we help to prevent breaches for our customers, by working together.

Best Bad Idea

Congrats to Drew Brown, information system security developer, Federal Aviation Administration for winning this week’s Best Bad Idea.

Other honorable mentions go to:

“Crowdsource all automated responses since the mob is always best at choosing the best option.” – Larry Rosen, manager, security advisory, Avanade

“Use AI to automate everything. It learns as it goes!” – Ian Poynter, vCISO, Kalahari Security

“Install a baseball launcher and then automate it to lob baseballs at vendors coming into the door.” – Sandor Slijderink, information security advisor and projects, BorderHawk, LLC

10 percent better

“Look at your business processes to determine what your goal is for automation. Only automate response for those things that provide the greatest business value.” – Craig Hurter, director security operations, Colorado Governor’s Office of Information Technology

“Set the automation to capture and preserve resolution activities, including things like chat transcripts, in a single system of record for analysis. It will help build a catalog of familiar incidents or issues. It will solidify best practices for each, and increase the speed of resolution in the future.” – Stephanie Kass, student, University of San Diego

“Apply filters to your monitoring alerts to empower your teams to more easily zero in on the hard to find routine noise.” – Stephanie Kass, student, University of San Diego

Quotes from the chat room

“The machines don’t make the decision. The designers and implementers of that machine make the decisions. The machine executes the decisions made prior.” – Peter Schawacker, member of the board of advisors, StrikeReady