Changing Who Writes the Queries - High Leverage IR with Visual Playbooks

Explore advanced incident response techniques in this BSides Nashville 2018 conference talk. Learn about visual investigations, alert handling, and automation in cybersecurity. Discover how to leverage machine learning, GPU data processing, and visual playbooks to streamline incident response workflows. Gain insights into improving response times, bootstrapping investigations, and effectively utilizing Nvidia GPUs for data analysis. Examine real-world examples, graphs, and a live demo to enhance your understanding of high-leverage incident response strategies.

Introduction
Visual Investigations
Picking Up Alerts
What People Think
Automation
Machine Learning
Example
Graphs
Workflow
Response Time
Bootstrapping the Investigation
Demo
GPU Data
Nvidia GPUs
Summary
How do you automate