Building, Maturing & Rocking a Security Operations Center - SANS ...

ePAPER READ

DOWNLOAD ePAPER

computer.forensics.sans.org

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

START NOW

To be or

Not to be…

• Building a SOC is a business decision

• Organization size

• Compliance factors

• Reduce the impact of an incident

• ROI

• Proactive reaction

Sniper Forensics “One Shot, One Kill” - SANS Computer Forensics

examples of recent apt persistence mechanisms - SANS Computer ...

Ovie Carroll - SANS Forensic Trends and Futures.pdf

Analysis & Correlation of Mac Logs - SANS

“ANN'S AURORA” - SANS Computer Forensics

Encryption v20.10 - SANS Computer Forensics

Tales from the Crypt - TrueCrypt Analysis - SANS

Digital Forensics for IaaS Cloud Computing - SANS Computer ...

All the Gear..and No Idea.. - Scalable, fast - SANS

Protecting Privileged Domain Accounts during Live Response

Taking Registry Analysis to the Next Level - SANS Computer ...

Mark McKinnon RedWolf Computer Forensics Mark ... - SANS

Brendan Dolan-Gavitt Georgia Institute of Technology - SANS

Agenda • To be or Not to be… • What is a SOC? • Use Case Creation • People • Process & Procedure • Documentation • Workflow • Metrics • I don’t want to grow up • Rocking a SOC • Questions 2

To be or Not to be… • Building a SOC is a business decision • Organization size • Compliance factors • Reduce the impact of an incident • ROI • Proactive reaction 3

Page 1: Building, Maturing & Rocking a Secu
Page 5 and 6: ArcSight Correlation 5
Page 7 and 8: People 7
Page 9 and 10: Training Information security basi
Page 11: Documentation Repository Choices Pr
Page 14 and 15: Metrics • How many events are com
Page 16 and 17: According to the book Pragmatic Sec
Page 18 and 19: Questions

Building, Maturing & Rocking a Security Operations Center - SANS ...

Create successful ePaper yourself

Delete template?

Save as template?