Rising Cyber Escalation: US, Iran, Russia ICS Threats and Response

Explore the escalating cyber tensions between the US, Iran, and Russia in this comprehensive webinar focused on industrial control systems and critical infrastructure security. Gain insights from Dragos Threat Intelligence and Threat Operations Center experts as they discuss current malicious activities, threat intelligence, and recommended defensive strategies. Delve into detailed presentations on various ICS attack-response options, asset owner and operator responses, and specific threat actor groups like XENOTIME, DYMALLOY, and MAGNALLIUM. Learn about five crucial threat behaviors to identify and develop effective threat hunting and response planning techniques. Acquire valuable knowledge on key questions for hunting and responding to threats in the industrial cybersecurity landscape.

Intro
Introductions
Escalation
Different ICS Attack-Response Options
Asset Owner & Operator Response
Intel on Iranian and Russian Attacks
XENOTIME Activity Group
DYMALLOY Activity Group
MAGNALLIUM Activity Group
5 Threat Behaviors to identify Now
Threat Hunting and Response Planning
Hunting & Response: Key Questions
Hunting and Responding to Threats