Detection-as-Code: Build Threat Detections the Way You Build Software - by Cherlynn Cha скачать в хорошем качестве

Detection-as-Code: Build Threat Detections the Way You Build Software - by Cherlynn Cha

Speaker: Cherlynn Cha, Head of Security Operations, ExpressVPN This talk raises the challenges faced by corporations in managing their ever growing suite of tools and expanding detection libraries to keep up with evolving threats, and explores how we can use Detection-as-Code (DaC), which applies software engineering best practices to security operations, to automate analysis at scale and address these challenges. We will deep dive into how to implement DaC to help Security Operations Center teams better manage their tools and detections, and walk through a practical demo to illustrate an example implementation in a corporate environment. Participants will learn how to use DaC to build deployment pipelines for detections, create test-driven workflows, leverage version control, and streamline collaboration, enabling them to manage their detections across diverse environments more effectively. For more information about Infosec In the City, SINCON https://www.infosec-city.com/