CONFidence 2018: Practical intelligence-driven defense (Igor Ivanov, Daniil Yugoslavskiy)

Defending from advanced cyberattacks requires defenders to have a modern approach to the threats and more flexible platforms and toolsets. Classic vendor lock-in solutions, lack of APIs, scalability and extensibility push security teams to design new technology stacks. Using famous APT (Advanced Persistent Threat) attack as a case study, we'll show live simulated cyberattack, threat detection, hunting and incident response techniques. We'll show how everybody can improve your own security analytics capabilities using openly available tools and platforms.