2020 Threat Detection Report sneak peek: watch it live!

The report is particularly useful for security leaders who are seeking to build, improve, or measure the effectiveness of their security program. In the webinar, we will touch on how security leaders can take the information from this report and use it to set priorities for security investments, measure the effectiveness of the investments they make, and improve their security programs.

Analysts can use this report to better understand why adversaries leverage certain techniques and tools, providing deeper context for the activity in the environments they monitor. However, the report is highly detailed and lengthy, and, frankly, it can be a lot to digest. The webinar will make the report even more approachable, as we dive into common technique combinations and explain how analysts can use this context while investigating threats.

On the whole, engineers might get the most out of the report. In the webinar, we will show engineers where to look for important log sources that will help them observe prevalent techniques. We will also describe what specific criteria they can use to build out a detection regime that will help them alert on malicious activity while limiting noise and false positives.

The Threat Detection Report tells a lot of stories. The webinar will hone in on the main takeaways that reflect the global landscape: the dominance of worm-like malware and laterally moving threats; the evolution of Emotet, TrickBot, and Ryuk; and the widespread adoption of the ETERNALBLUE server message block (SMB) exploit.