Cloud Security Podcast by Google

EP202 Beyond Tiered SOCs: Detection as Code and the Rise of Response Engineering


Listen Later

Guest:

  • Amine Besson, Tech Lead on Detection Engineering, Behemoth Cyberdefence

Topics:

  • What is your best advice on detection engineering to organizations who don't want to engineer anything in security?
  • What is the state of art when it comes to SOC ? Who is doing well? What on Earth is a fusion center?
  • Why classic "tiered SOCs" fall flat when dealing with modern threats?
  • Let's focus on a correct definition of detection as code. Can you provide yours?
  • Detection x response engineering - is there a thing called "response engineering"? Should there be?
  • What are your lessons learned to fuse intel, detections, and hunting ops?
  • What is this SIEMless yet SOARful detection architecture?
  • What's next with OpenTIDE 2.0?

Resources:

  • Guide your SOC Leaders to More Engineering Wisdom for Detection (Part 9) and other parts linked there
  • Hack.lu 2023: TIDeMEC : A Detection Engineering Platform Homegrown At The EC video
  • OpenTIDE · GitLab
  • OpenTIDE 1.0 Release blog
  • SpectreOps blog series 'on detection'
  • Does your SOC have NOC DNA? presentation
  • Kill SOC Toil, Do SOC Eng blog (tame version)
  • The original ASO paper (2021, still epic!)
  • Behind the Scenes with Red Canary's Detection Engineering Team
  • The DFIR Report – Real Intrusions by Real Attackers, The Truth Behind the Intrusion
  • Site Reliability Engineering (SRE) | Google Cloud

...more
View all episodesView all episodes
Download on the App Store

Cloud Security Podcast by GoogleBy Anton Chuvakin

  • 4.8
  • 4.8
  • 4.8
  • 4.8
  • 4.8

4.8

39 ratings


More shows like Cloud Security Podcast by Google

View all
WSJ Your Money Briefing by The Wall Street Journal

WSJ Your Money Briefing

1,722 Listeners

WSJ What’s News by The Wall Street Journal

WSJ What’s News

4,424 Listeners

Security Now (Audio) by TWiT

Security Now (Audio)

2,010 Listeners

Risky Business by Risky Business Media

Risky Business

373 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,025 Listeners

NVIDIA AI Podcast by NVIDIA

NVIDIA AI Podcast

347 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

8,079 Listeners

Cybersecurity Today by Jim Love

Cybersecurity Today

177 Listeners

Practical AI by Practical AI LLC

Practical AI

211 Listeners

Cloud Security Podcast by TechRiot.io

Cloud Security Podcast

58 Listeners

Cybersecurity Headlines by CISO Series

Cybersecurity Headlines

140 Listeners

Huberman Lab by Scicomm Media

Huberman Lab

29,300 Listeners

The AI Daily Brief: Artificial Intelligence News and Analysis by Nathaniel Whittemore

The AI Daily Brief: Artificial Intelligence News and Analysis

681 Listeners

HBR On Leadership by Harvard Business Review

HBR On Leadership

168 Listeners

AI Security Podcast by TechRiot.io

AI Security Podcast

9 Listeners