Video: Wirksamkeit der Cyberabwehr messen und optimieren mit automatisierter Angriffssimulation | Duration: 3215s | Summary: Wirksamkeit der Cyberabwehr messen und optimieren mit automatisierter Angriffssimulation | Chapters: Audio Setup Introduction (0s), Threat Validation Tools (207.649s), Security Infrastructure Overview (788.164s), Dashboards and Scenarios (1280.289s), Security Assessment Templates (1599.904s), Assessment and Reporting (2279.739s)
Transcript for "Wirksamkeit der Cyberabwehr messen und optimieren mit automatisierter Angriffssimulation": Good. Okay. Yeah. On. Okay. Use cases is threat validation. And this is in let's see. And we connect at this highest via the controls the tools and build their their their resilience we had detection engineering, tools, EDR tools, and Centimeters tools, business application, etcetera. Business detection engineering On the exposure management, c 10 continuous that exposure management is on management tool. Context. Test score. Of the context. Comment. The focus of threat validation. Vigisag threat validation and exposure validation, this common security tool and the threat validation. From Aplof here, research team. Yeah. To be become an initial access. Prevention rate the detection rate. The endpoint protection Windows on GitHub. Linux server. The assessments and the scenarios here at seven of these are fully in some batch bill yeah. Finance on the sense of for management common and from from risk manager industry Okay. Yeah. But in the management, there are FIN seven prevention rate for X and a detection rate from Epsilon. Scenario. From from manager. Credentials to to domain controller web application firewall application SQL injection. Test cloud instance with the the in the cloud. By AWS hosted on premise software on premise updates and field downloads for this. The setup services. And these are test from the cloud side. This has come in the scenario in here. Client Internet proxy, firewalls inbox were emails gateway, the email firewall. Konen dot links to in the email and type and sign. So all of this is scenario test client, Linux server, and then Windows server, and the cloud instance by and cloud instance by Google for and agents, with all kind of appliances, with all kind of baking collection. With kinds on premise You know, and with this setup, can we use use cases, uptaking. Email gateway, web gateway, web application, firewalls. We have we have testing the and the Centimeters. We come with alpha by on the system. On the performance there, Open. Done. Yeah. And dashboards in. But then in chat, the order Good. Yeah. Because as a vision English born in cloud dashboard. You see here, as well as on the other dashboards in the in the tech chain. Tags in in in the scenarios. Of the of the dashboards by the in the here. And he links in this scenario. Criteria. Criteria scenario and this criterion but yet the scenario IOC indicators of compromise as well whereas hashes, the tie down, etcetera. Security controls. Focus here. EDR test web application firewall. Industry filter country You you get the idea. We we in the practice templates template best practices up as a web application firewall, best practices create assessment. Templates and smart template. Complete data. Scope template against. Test configure. Test. Templates criteria thread feed. This has to be a of of zero days of and of supply chain and template scenario and help. And this is social security advisories. Yeah. Zero days, etcetera. As a and the feeds or the announcements from from PanTest and Okay. Zero day hours advisory and scenario Okay. See relevant scenarios template advisory and held. And best practice assessment to EDR Centimeters. This is also a field one and this is the risk score. Test point test. The scenario, the prevention rate, the detection rate was sent the the top tactic findings concrete here in in cloudstrike security tools command line and task list. CrowdStrike. Events context. Okay. Link and click in the chat. 30. The appliances. So the the security tools as leading wherever it gets here. Data leakage prevention. Offensive security team as a pentester, red teamer, etcetera. Whereas, text, etcetera. You have payload for for the WAF files, pretty much SQL commanders, etcetera. Can't hear this configure here. Scenarios Good. Assessment findings assessments reports. Document tab here reports, algemeine threat resilience report, thrift detection report. For under the scenario and and so get same machines to dashboards drift dashboards I'll report our scheme lesson reports templates reports, reporting review advisory board. The investor and reporting state of nations Yeah. Exposure management vendor individual in in in a against the session or the as follow-up Good. Screen sharing security operations hands on That's who are of red teams test testing when in red team assessments management exposure management leadership Yeah. Any case study of with the cyber security tools Uh-uh. Dana, we are nigger. Think it's bad. No. Who is this? Thank you for Scott, Murdo. Despite.