The Need for Speed – Benefits of Speed Driven Incident Response

No ratings

Presented at grrcon 2017 by

Joe Petroske

Aaron Shanas

Threat actors, like your IR team, need time to complete their mission. By short-circuiting the IR process, we will show you how to recover from attacker footholds and prevent what you really care about — Attacker mission completion. We propose and demonstrate the benefits of a new approach, focusing on rapid identification and containment of threats using sniper forensics and live response techniques in place of classical investigative methods.