Strategy 8: Leverage Tools and Support Analyst Workflow

Strategy 8: Leverage Tools and Support Analyst Workflow

Author: SANS Institute June 26, 2023 Duration: 1:25:38
Tool choice can be a make-or-break decision for security analysts, driving whether getting work done is a struggle, or an efficient, stress-free experience. How can we select the right tools for the job? Which tools are most important? Answers to these questions and more are in this week's episode of Blueprint! This special season of the Blueprint Podcast is taking a deep dive into MITRE’s 11 Strategies of a World-Class Cyber Security Operations Center. Each episode John will break down a ch...

For security professionals tasked with defending networks, the daily challenge isn't just about responding to alerts-it's about building a resilient, intelligent defense from the ground up. Blueprint: Build the Best in Cyber Defense, from the SANS Institute, serves as an ongoing conversation for that exact purpose. This isn't a news recap; it's a deep, practical resource. Each episode connects you directly with the architects of modern security operations-those blue team leaders and seasoned experts who are actively protecting critical infrastructure and global enterprises. You'll hear candid discussions dissecting real-world defensive strategies, unpacking the nuances of emerging protocols, and evaluating new tools before they hit the mainstream. The focus is relentlessly on applied knowledge: how concepts translate into action at the console. Whether it's an interview breaking down a complex incident response or a technical deep dive explaining the mechanics of a novel attack vector, this podcast provides the substantive content needed to refine your craft. Think of it as a continuous learning feed, offering the detailed explanations and practitioner insights that help you construct a more effective security posture, one informed decision at a time. Tune in to Blueprint for the kind of forward-looking, foundational knowledge that defines a career in cyber defense.
Author: Language: en-us Episodes: 50

Blueprint: Build the Best in Cyber Defense
Podcast Episodes
How GenAI is Changing Your SOC for the Better with Seth Misenar [not-audio_url] [/not-audio_url]

Duration: 1:35:04
In this mega-discussion with Seth Misenar on GenAI and LLM usage for security operations we cover some very interesting questions such as: - The importance of natural language processing in Sec Ops - How AI is helping us…
Bonus Episode: What does it take to author a cybersecurity book? [not-audio_url] [/not-audio_url]

Duration: 1:31:06
Have you ever wondered what it takes to write and publish an information security book? In this special bonus episode following season 4, John discusses with Kathryn, Ingrid, and Carson the challenges and rewards of self…
Strategy 11: Turn up the Volume by Expanding SOC Functionality [not-audio_url] [/not-audio_url]

Duration: 1:26:38
"This final chapter of the book is no simple closer! "Turn Up the Volume by Expanding SOC Functionality" covers testing that your SOC is functioning as intended through activities such as Threat Hunting, Red and Purple T…
Strategy 10: Measure Performance to Improve Performance [not-audio_url] [/not-audio_url]

Duration: 52:46
"Metrics, is there any more confusing and contentious topic in cybersecurity? In this episode the authors cover their advice and approach to measuring your team so that issues can be quickly identified and performance ca…
Strategy 9: Communicate Clearly, Collaborate Often, Share Generously [not-audio_url] [/not-audio_url]

Duration: 1:03:36
"Research has shown that communication is one of the most important factors for success in security incident response teams. In this chapter, the authors discuss the critical types of information that must be shared with…
Blueprint Live at the SANS Blue Team Summit 2023 [not-audio_url] [/not-audio_url]

Duration: 1:04:43
In this special live recording from the SANS Blue Team Summit 2023, Kathryn Knerler, Ingrid Parker, and Carson Zimmerman joined John Hubbard they share their insights and expertise with attendees by answering their press…
Strategy 7: Select and Collect the Right Data [not-audio_url] [/not-audio_url]

Duration: 1:03:16
There's no denying that the average security team is completely overwhelmed with options for data to collect. With a deluge of endpoint, network, and cloud data sources to collect, how to do we identify and collect the m…
Strategy 6: Illuminate Adversaries with Cyber Threat Intelligence [not-audio_url] [/not-audio_url]

Duration: 57:45
Every security team has limited budget and time, how do you know where to focus? Cyber Threat Intelligence provides those answers! In this episode, Ingrid, Carson and Kathryn describe how we can use CTI to focus our defe…