Collection Is Not Detection and Other Rules for Modernising Sec Ops

In this talk, Sarah Young will discuss how security operations change from on-prem to the cloud and how to optimize your security operations in a hybrid environment to make use of modern tooling such as automation and AI/ML.

Security operations has always been hard. How many logs should you collect? Which logs should you collect? How do you respond and remediate things quickly? Then, just when you thought you've got it right for your on-premises, you decide to move the cloud and have to start all over again... or do you? In this talk, Sarah will discuss how security operations change from on-prem to the cloud and how to optimize your security operations in a hybrid environment to make use of modern tooling such as automation, AI/ML, etc.