ABSTRACT
This presentation will demonstrate how next-gen automated cyber detection and response technologies are critical in enabling defensive cyber operations in the emerging threat landscape.
Automation acts as a force multiplier allowing defensive cyber operators to rapidly employ defensive actions at scale. Effective automation mitigates task saturation and investigative bias that often threatens small specialised response teams, and supports timely sharing of actionable threat intelligence between geographically separate tactical teams.
Automated mitigations applied early in the cyber kill chain support teams to focus on understanding and mitigating an adversaries foothold in a network during an active intrusion. This can support early generation of actionable threat intelligence, minimisation of adversary dwell time and minimisation of the adversaries ability to create an operational/mission impact.
BIOGRAPHY
Mark Robson is a Senior Tactical Threat Analyst working alongside the FortiGuard Responder Managed Detection and Response (MDR) and Incident Response teams to support Fortinet's global customer base. In this role he performs incident response, threat hunting and characterizes and develops mitigations for emerging adversary TTPs. Prior to joining the Fortinet team, Mark spent 10+ years in the Royal Australian Air Force (RAAF) as a Cyber Warfare Officer where he supported Defensive Cyber Operations across various ADF, AGO and FVEYs systems.