12:00 – 12:20
12 October 2022 | 20 Minutes
Free
Demystifying NDR - Evidence not Alerts - Demystifying NDR – Don’t trust, Verify with Evidence
What matters most in a criminal trial? Evidence. Everything depends on the quality and depth of facts deployed to build a case for innocence or guilt. Without compelling evidence, no jury can draw accurate conclusions. Here at Corelight, we are in a position to see that the most sophisticated cyber defense teams in the world have shifted their strategies towards the collection and analysis of high-quality evidence to both disrupt advanced attacks and accelerate SOC operations: quite literally, treating evidence as a first-class part of their strategy. During our session, we will introduce the power of Enterprise Zeek in combination with advanced analytics built on top of layers of detection including machine learning, statistical analysis, heuristics, threat intelligence, and much more.