Click Security

No ratings

Presented at InfoSecSouthWest 2014 by

Is there a Pony in that Pile of Shit? Our presentation discusses the importance of incorporating statistics, data analysis and graph algorithms into the incident response and forensics toolbox. Most datasets are opaque 'piles' and the challenge is often about quickly understanding what you have and how it can be leveraged for a particular set of use cases. We'll present a simple set of python modules that allow quick data analysis of log files and PE files with a set of statistical and machine learning techniques. The presentation will be focused on the practical usage of the analytic techniques and not the formal mathematical underpinnings. All code and datasets covered in the presentation will be provided through our public github 'data_hacking' repository (http://clicksecurity.github.io/data_hacking).