Anton Chuvakin: The Current State and Future of Security Operations

Anton Chuvakin: The Current State and Future of Security Operations

Author: SANS Institute April 20, 2021 Duration: 47:07
In today’s episode, John is joined by Anton Chuvakin to discuss current and future security operations technology, which tools are the most important and which are becoming less important over time, the rules of automation in the SOC and how Anton would setup a modern Security Operations Center for a Cloud native organization. Today's Guest: Anton Chuvakin Dr. Anton Chuvakin is a recognized security expert in the field of log management, SIEM and PCI DSS compliance. He is now involved with s...

For security professionals tasked with defending networks, the daily challenge isn't just about responding to alerts-it's about building a resilient, intelligent defense from the ground up. Blueprint: Build the Best in Cyber Defense, from the SANS Institute, serves as an ongoing conversation for that exact purpose. This isn't a news recap; it's a deep, practical resource. Each episode connects you directly with the architects of modern security operations-those blue team leaders and seasoned experts who are actively protecting critical infrastructure and global enterprises. You'll hear candid discussions dissecting real-world defensive strategies, unpacking the nuances of emerging protocols, and evaluating new tools before they hit the mainstream. The focus is relentlessly on applied knowledge: how concepts translate into action at the console. Whether it's an interview breaking down a complex incident response or a technical deep dive explaining the mechanics of a novel attack vector, this podcast provides the substantive content needed to refine your craft. Think of it as a continuous learning feed, offering the detailed explanations and practitioner insights that help you construct a more effective security posture, one informed decision at a time. Tune in to Blueprint for the kind of forward-looking, foundational knowledge that defines a career in cyber defense.
Author: Language: en-us Episodes: 50

Blueprint: Build the Best in Cyber Defense
Podcast Episodes
Rob Lee: Training and Reskilling in Cyber Security [not-audio_url] [/not-audio_url]

Duration: 50:43
Many of us are either looking to start a cyber security career, improve our knowledge and skills to further our career, or hire a team that has the most skilled and promising candidates. In this special episode with Rob…
Jaron Bradley: Securing Enterprise macOS [not-audio_url] [/not-audio_url]

Duration: 58:36
In this episode of the Blueprint Podcast, we cover monitoring and securing macOS in an enterprise environment at scale with Jaron Bradley, Threat Detection lead at Jamf. We discuss the ups and downs of Apple's approach t…
Alexia Crumpton: MITRE ATT&CK for Defenders [not-audio_url] [/not-audio_url]

Duration: 42:26
One of the best frameworks that showed up within the last 5 or so years is undoubtedly the MITRE ATT&CK® framework. Many of us may know about it in passing and even reference from time to time, but very few people seem t…
Cat Self: macOS and Linux Security [not-audio_url] [/not-audio_url]

Duration: 56:31
Ever wonder why there’s so little information regarding macOS and Linux-oriented attacks? In this episode, we get the answer from the multi-talented Cat Self - an Adversary Emulation Engineer at MITRE, Cyber Threat Intel…
Tony Turner: Securing the Cyber Supply Chain [not-audio_url] [/not-audio_url]

Duration: 47:03
John and Fortress Vice President of Research and Development Tony Turner share their wisdom on trends they are seeing in the cyber industry and offer advice as to how we should be looking at the Cyber Supply Chain in 202…
Mark Orlando: Building a Stronger Blue Team [not-audio_url] [/not-audio_url]

Duration: 49:19
There are many technical factors that contribute to the success of a security operations team, but you need more than just tech skills for mounting a solid defense. In this episode of Blueprint we bring back previous gue…
David Hoelzer: Threat Detection with Machine Learning and AI [not-audio_url] [/not-audio_url]

Duration: 49:42
Many of us with the typical IT and security backgrounds might not have the slightest idea what to expect when we hear the terms “this product uses advanced machine learning…”, but that claim certainly conjures up a lot o…
James Rowley: Creating and Running an Insider Threat Program [not-audio_url] [/not-audio_url]

Duration: 59:40
While malicious insiders are a threat that most of us would like to imagine we might never have to deal with, it’s still one of the cyber threats you must realistically consider and plan for. But how do you identify mali…