Cloud Security Podcast by Google

EP202 Beyond Tiered SOCs: Detection as Code and the Rise of Response Engineering


Listen Later

Guest:

  • Amine Besson, Tech Lead on Detection Engineering, Behemoth Cyberdefence

Topics:

  • What is your best advice on detection engineering to organizations who don't want to engineer anything in security?
  • What is the state of art when it comes to SOC ? Who is doing well? What on Earth is a fusion center?
  • Why classic "tiered SOCs" fall flat when dealing with modern threats?
  • Let's focus on a correct definition of detection as code. Can you provide yours?
  • Detection x response engineering - is there a thing called "response engineering"? Should there be?
  • What are your lessons learned to fuse intel, detections, and hunting ops?
  • What is this SIEMless yet SOARful detection architecture?
  • What's next with OpenTIDE 2.0?

Resources:

  • Guide your SOC Leaders to More Engineering Wisdom for Detection (Part 9) and other parts linked there
  • Hack.lu 2023: TIDeMEC : A Detection Engineering Platform Homegrown At The EC video
  • OpenTIDE · GitLab
  • OpenTIDE 1.0 Release blog
  • SpectreOps blog series 'on detection'
  • Does your SOC have NOC DNA? presentation
  • Kill SOC Toil, Do SOC Eng blog (tame version)
  • The original ASO paper (2021, still epic!)
  • Behind the Scenes with Red Canary's Detection Engineering Team
  • The DFIR Report – Real Intrusions by Real Attackers, The Truth Behind the Intrusion
  • Site Reliability Engineering (SRE) | Google Cloud

...more
View all episodesView all episodes
Download on the App Store

Cloud Security Podcast by GoogleBy Anton Chuvakin

  • 4.8
  • 4.8
  • 4.8
  • 4.8
  • 4.8

4.8

39 ratings


More shows like Cloud Security Podcast by Google

View all
WSJ Your Money Briefing by The Wall Street Journal

WSJ Your Money Briefing

1,724 Listeners

WSJ What’s News by The Wall Street Journal

WSJ What’s News

4,361 Listeners

Security Now (Audio) by TWiT

Security Now (Audio)

2,005 Listeners

Risky Business by Patrick Gray

Risky Business

371 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,027 Listeners

NVIDIA AI Podcast by NVIDIA

NVIDIA AI Podcast

344 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

8,088 Listeners

Cybersecurity Today by Jim Love

Cybersecurity Today

178 Listeners

Practical AI by Practical AI LLC

Practical AI

200 Listeners

Cloud Security Podcast by TechRiot.io

Cloud Security Podcast

58 Listeners

Cybersecurity Headlines by CISO Series

Cybersecurity Headlines

138 Listeners

Huberman Lab by Scicomm Media

Huberman Lab

29,297 Listeners

The AI Daily Brief: Artificial Intelligence News and Analysis by Nathaniel Whittemore

The AI Daily Brief: Artificial Intelligence News and Analysis

640 Listeners

HBR On Leadership by Harvard Business Review

HBR On Leadership

167 Listeners

AI Security Podcast by Kaizenteq Team

AI Security Podcast

9 Listeners