"SOC Response Process/Actions" (LV)
May 29th
17:35
Security Incident Response is a complex Process involving many different actions - from moment of identifying Incident to Forensic report. Actions rely on existing Technology, Processes and People available. During this session we will propose methodology of classification different response actions based on risk and complexity. This approach can help organizations to improve their Incident Response Process and start a long road of Automation. And of course Demo.

Vladimirs Orehovs

IT expert, Latvia

IT security specialist with experience in both sides of IT security - both on the attacker side and on the defensive front. OSCP/OSCE Certificate in penetration testing. Incident response experience (technical and administrative level). Experience working with perimeter protection, SIEM systems, PAM solutions, vulnerability scanning tools, DLP, network load analysis tools and other IT security systems.