Abstract

Breakout time, the average one hour and 58 minutes that it takes an intruder to jump from an initial compromised host to move laterally through your network, is emerging as a critical window to stop a breach. However, it's not the only crucial metric you need to know. When an attack is in progress, you have on average of one minute to detect it, 10 minutes to understand it and one hour to contain it. Is your organization ready to meet the 1/10/60 minute challenge? This presentation delves into the incident response process and offers practical advice on overcoming the obstacles that stand in the way of a fast and effective response.

Presented by

Bio

Scott is a 20+ year veteran of the cyber security industry, with a strong focus on optimizing workflows in the security operations center. In his current role as Director of Product Marketing for CrowdStrike, Scott works with organizations all around the globe to understand the biggest barriers to productivity, and to drive thought leadership on optimizing incident response and threat hunting. Prior to CrowdStrike, Scott spent 14 years as a technical leader for McAfee, gaining deep expertise in SIEM, incident response, threat intelligence, and other building blocks to a successful SOC. Scott is based in Minneapolis, MN.