David Hoelzer: Threat Detection with Machine Learning and AI

David Hoelzer: Threat Detection with Machine Learning and AI

Author: SANS Institute July 12, 2022 Duration: 49:42
Many of us with the typical IT and security backgrounds might not have the slightest idea what to expect when we hear the terms “this product uses advanced machine learning…”, but that claim certainly conjures up a lot of skepticism due to the opaque nature of the algorithms in many of these products. In this episode we discuss what AI and ML are best used for, and what they can, can’t, and shouldn’t be used for with guest Dave Hoelzer. Our Guest - Dave Hoelzer David Hoelzer, a SANS Fellow a...

For security professionals tasked with defending networks, the daily challenge isn't just about responding to alerts-it's about building a resilient, intelligent defense from the ground up. Blueprint: Build the Best in Cyber Defense, from the SANS Institute, serves as an ongoing conversation for that exact purpose. This isn't a news recap; it's a deep, practical resource. Each episode connects you directly with the architects of modern security operations-those blue team leaders and seasoned experts who are actively protecting critical infrastructure and global enterprises. You'll hear candid discussions dissecting real-world defensive strategies, unpacking the nuances of emerging protocols, and evaluating new tools before they hit the mainstream. The focus is relentlessly on applied knowledge: how concepts translate into action at the console. Whether it's an interview breaking down a complex incident response or a technical deep dive explaining the mechanics of a novel attack vector, this podcast provides the substantive content needed to refine your craft. Think of it as a continuous learning feed, offering the detailed explanations and practitioner insights that help you construct a more effective security posture, one informed decision at a time. Tune in to Blueprint for the kind of forward-looking, foundational knowledge that defines a career in cyber defense.
Author: Language: en-us Episodes: 50

Blueprint: Build the Best in Cyber Defense
Podcast Episodes
Strategy 6: Illuminate Adversaries with Cyber Threat Intelligence [not-audio_url] [/not-audio_url]

Duration: 57:45
Every security team has limited budget and time, how do you know where to focus? Cyber Threat Intelligence provides those answers! In this episode, Ingrid, Carson and Kathryn describe how we can use CTI to focus our defe…
Strategy 5: Prioritize Incident Response [not-audio_url] [/not-audio_url]

Duration: 1:25:21
No security team is perfect, so in this episode, authors Carson, Ingrid, and Kathryn discuss what it takes to prepare for fast, effective incident response capability. Covering preparation, planning and execution, Strate…
Strategy 4: Hire AND Grow Quality Staff [not-audio_url] [/not-audio_url]

Duration: 1:13:31
In this episode we dive deep on the "People" factor of the SOC. Who should you hire, what skills should you hire for, what backgrounds are most likely to lead to success for your team? We also get into what happens after…
Strategy 3: Build a SOC Structure to Match Your Organizational Needs [not-audio_url] [/not-audio_url]

Duration: 1:12:00
In this episode we discuss how to decide on the right org structure and capabilities of your SOC. This includes questions like tiered vs. tierless models, which capabilities the SOC should focus on, centralized vs. distr…
Strategy 2: Give the SOC the Authority to Do Its Job [not-audio_url] [/not-audio_url]

Duration: 36:51
Though a SOC is responsible for protecting your organization's assets, it is not the owner of those systems. If the SOC is not established with a clear charter and authority to act, it may quickly become difficult to be…
Strategy 1: Know What You Are Protecting and Why [not-audio_url] [/not-audio_url]

Duration: 1:02:10
As the saying goes, "If you don't know where you're going, any road will take you there!" - an approach that is disastrous to a SOC. In order to succeed, the SOC must have a clear understanding of where they are going, h…
Get Ready, A Very Special Season 4 Is On the Way! [not-audio_url] [/not-audio_url]

Duration: 2:42
Hello Blueprint listeners! We’re excited to announce that the release of season 4 of Blueprint is just around the corner, and we’ve got something very special cooked up for you. We’ve teamed up with the authors of MITRE’…
Brandon Evans: Cloud Security - Threats and Opportunities [not-audio_url] [/not-audio_url]

Duration: 49:35
Ever wonder how a cloud and application security expert views risks of cloud workloads? Well, wonder no more because on this episode we have Brandon Evans - SANS Certified Instructor and lead author of SEC510: Public Clo…
Joe Lykowski: Building a Transparent, Data-Driven SOC [not-audio_url] [/not-audio_url]

Duration: 55:06
In this episode we speak with Joe Lykowski - Cyber Defense Lead at a major manufacturing company on what it takes to build a mature, transparent, and effective SOC. Joe brings years of experience to the table in running…