AV will fail. Users will open malicious email attachments and click links. Systems will get pwnd. This talk is about endpoint remediation. The need for full system rebuilds is a thing of the past. SOC teams should be remediating infected systems with confidence. This concept is completely foreign to most SOC analysts and organizations. I fully outline how to overcome this irrational fear.