Incident Response - No Pain No Gain

Learn about effective incident response strategies in this 44-minute conference talk from the Central Ohio InfoSec Summit 2016. Explore the balance of power in cybersecurity, understand the role of a SOC analyst, and discover the importance of continuous hunting. Delve into security basics, goals, and capabilities while examining the Pyramid of Pain concept. Gain insights into various threat indicators including hash values, IP addresses, domain names, and network artifacts. Understand tactics, techniques, and procedures (TTPs) for operationalization. Conclude with a deep dive into analysis and hunting data stack analytics to enhance your organization's incident response capabilities.

Intro
Balance of Power
Typical Sock Analyst
Continuous Hunting
Security Basics
Goals
Capabilities
Pyramid of Pain
Hash Values
IP Addresses
Domain Names
Network Artifacts
Tactics Techniques Procedures
Operationalization
Deep Dive Analysis
Hunting Data Stack Analytics