Collection is not Detection - Sec Ops in a Cloud Native Environment

Explore security operations in cloud-native environments through this insightful conference talk. Discover how SecOps evolves from on-premises to cloud, and learn strategies for optimizing security operations using modern tools. Delve into key topics including the importance of security operations, common challenges, attacker perspectives, and the shift from traditional approaches. Gain valuable insights on what to collect, which tools to use, and when to implement SecOps. Understand crucial use cases and leave with a comprehensive understanding of effective security operations in cloud-native settings.

Introduction
About me
Todays topic
Why security operations are important
Information security memes
Why spend money on security operations
Attack services are cheap
Typical security operations issues
Single pane of glass
Silos
Attacker Perspective
Security Operations on Premise
Traditional Security Approach
Collection is not Detection
Crazy Cat Lady
How
Three choices
What should you collect
Who are the tools
When to do Sec Ops
Use Cases
Understand Your Use Cases
Conclusion
Thank you
QA