05/11 (Thu.) 09:30 - 11:30 7F 702C
CyberLab for GCP SIEM and Threat Intelligence Platform for security incident investigation and threat hunting

1. Use GCP SIEM (Chronicle SIEM) and Threat Intelligence solutions (VirusTotal Enterprise) to identify attack source and conduct security event investigation to find out attack targets including devices and users

2. Use Threat Intelligence solution (VirusTotal Enterprise) to inspect the sandbox report of malware and collect the related IOC

Session Summary

1, Introduce SecOps process, architecture and tools

2. Use SIEM integrated with threat intelligence to analyse and investigate security events

3. Use Threat Intelligence platform to inspect IOC of malware and CVE information

Device Requirement You Should Prepared for

Notebook with internet accessibility and installed Chrome Browser

Skills Requirement You Should Have

Has working experience for Security Operation Center and Cyber-Security detection and monitoring

Limit on the Number of Attendee

20

  • THEME | CyberLAB
  • LOCATION | Taipei Nangang Exhibition Center, Hall 2 7F undefined
  • LANGUAGE | Chinese