What is Robotic Decision Automation and Why Should I care?

No ratings

Presented at DataConnectorsNewYorkCity 2019 by

Tom Ryan

Writing SIEM Rules and monitoring detection consoles is out. Not only do we not like it, it hasn’t proved to be particularly effective. The Respond Analyst is a new kind of analyst that increases capacity and improves the capability of any security team, regardless of size – without adding to the burden of an already overworked team. Powered by Robotic Decision Automation (RDA), the Respond Analyst is ideal for organizations that are collecting meaningful security data, but struggle with having the manpower and resources to properly analyze and triage security incidents.Join us during this presentation to learn:Why traditional human-centric monitoring based on rules and queries has failed and leads to analyst fatigue.How the Respond Analyst uses RDA to eliminate concerns of ‘unattended alerts’ and missed clues by analyzing more security data – without filters or tuning.How the Respond Analyst integrates with your existing technologies and workflows to speed response, modernize, and automate security operations. Ransomware And How It Evades Your DefensesRene KolgaN/AN/ARansomware has long been a menace for organizations and consumers. Global damage cost estimates reach about 10 billion USD per year. After all these years, why does ransomware continue to be so good at being so bad?In this talk we will review security industry’s history of largely ineffective responses to ransomware, including common ransomware detection methods with their pros and cons. You will see how ransomware developers use simple techniques to bypass each of those methods. This session will also highlight some of the latest attacks including Norsk Hydro and ransomware pretending to donate your Bitcoins to children charity.After examining the bad, we will provide you with a no-nonsense defense strategy for hardening your defenses against ransomware.