Red Team Now or DFIR Later | Gunter Ollmann

August 9 | 3:00pm - 4:00pm

ABSTRACT:

We'll discuss some recent DFIR war stories, the attackers' MO, lessons learned, and costs from a few real-world cases. The insurance industry has an IR playbook - hear how it works in practice and some real-world costs. We'll go over some real numbers companies spend on defensive measures and make a case for Red Team ROI.

EDR, 24x7 MDR, Splunk and other line items add up quickly - Red Team exercises validate that these controls work as intended and challenge them through tailored targeted attacks.

Gunter Ollmann, CTO IOActive

As CTO for IOActive, Gunter Ollmann is focused on incubating and launching IOActive’s next-generation of strategic security services and technology.Gunter has spent his career building and leading global consulting and product solutions teams spanning the cybersecurity domain and providing expert security council to Fortune 100 companies. Prior to IOActive he led product innovation and strategy for Devo as their CTO, and previously served as CSO for Microsoft Cloud and AI Security division – incubating and driving multiple commercial products and services whilst protecting the world’s largest cloud applications and infrastructure. He has been at the forefront of applying machine-learning (ML) and AI technology to cybersecurity services for over a decade, holds multiple cyberthreat detection and mitigation patents, and has overseen and guided the invention and patent process of hundreds of core technology patents. Gunter is a widely respected authority on security issues and technologies and has researched, written and published hundreds of technical papers and bylined articles.