Positive Technologies approach to protect against criminal APT groups is based on security research
Anti-APT solution: early detection of advanced threats Delivered at "MENA Cyber Security Virtual Conference" on March 1, 2023 Подход Positive Technologies к защите от криминальных APT группировок основан на ежедневной работе экспертов крупнейшего центра кибербезопасности в Европе Timeline: 00:00:00 Denis Batrankov welcome 00:00:52 Common security approaches is based on security researchers efforts 00:02:42 The problem: hackers detected after 200+ days after penetration 00:04:04 Are there any hackers in your networks? 00:04:20 Credential hacking is the most often way to get in 00:04:40 Shadow IT is everywhere 00:05:11 Lateral movement is invisible 00:05:44 Early detection is a must 00:06:17 PT Network Attack Discovery audits your traffic and can save raw packets 00:06:50 Expert detection and fast investigation by the product 00:07:20 Traffic capture stores all zero day attacks 00:07:45 Deep Packet Inspection and Parsers for many applications with TI and Sandbox integration 00:08:08 Real experts brings rules to the products from real breaches and cases 00:08:42 How to find and kick off hackers from the networks 00:08:50 https://mitre.ptsecurity.com/ru-RU shows all 117 TTPs the product can detect 00:09:20 We have also other 20 products and services for you: XDR, Sandbox, SIEM and so on 00:09:57 The review of all 50+ engines inside the product PT NAD including Artificial Intelligence 00:10:27 The example of what product found at PoC (DCSync is the example) 00:11:13 Main engines detects lateral movement, hacker tools, malware and so on 00:11:34 NAD discovers the presence of attacker in real time recostructing the full picture of attack 00:11:49 References 00:12:34 You can avoid attacks and educate people with Positive Technologies 00:13:36 Thanks
Anti-APT solution: early detection of advanced threats Delivered at "MENA Cyber Security Virtual Conference" on March 1, 2023 Подход Positive Technologies к защите от криминальных APT группировок основан на ежедневной работе экспертов крупнейшего центра кибербезопасности в Европе Timeline: 00:00:00 Denis Batrankov welcome 00:00:52 Common security approaches is based on security researchers efforts 00:02:42 The problem: hackers detected after 200+ days after penetration 00:04:04 Are there any hackers in your networks? 00:04:20 Credential hacking is the most often way to get in 00:04:40 Shadow IT is everywhere 00:05:11 Lateral movement is invisible 00:05:44 Early detection is a must 00:06:17 PT Network Attack Discovery audits your traffic and can save raw packets 00:06:50 Expert detection and fast investigation by the product 00:07:20 Traffic capture stores all zero day attacks 00:07:45 Deep Packet Inspection and Parsers for many applications with TI and Sandbox integration 00:08:08 Real experts brings rules to the products from real breaches and cases 00:08:42 How to find and kick off hackers from the networks 00:08:50 https://mitre.ptsecurity.com/ru-RU shows all 117 TTPs the product can detect 00:09:20 We have also other 20 products and services for you: XDR, Sandbox, SIEM and so on 00:09:57 The review of all 50+ engines inside the product PT NAD including Artificial Intelligence 00:10:27 The example of what product found at PoC (DCSync is the example) 00:11:13 Main engines detects lateral movement, hacker tools, malware and so on 00:11:34 NAD discovers the presence of attacker in real time recostructing the full picture of attack 00:11:49 References 00:12:34 You can avoid attacks and educate people with Positive Technologies 00:13:36 Thanks