Presentation schedule:
Tuesday, August 25 – 1:00 pm – 2:00 pm
Kevin Mandia, President & CEO
The Evolution of Incident Response
Tuesday, August 25 – 3:45 pm – 5:00 pm
Rob Lee, Director
Live Incident Response: Memory Analysis
Wednesday, August 26 – 10:30 am – 11:30 am
Jay Smith, Principal Consultant, and Scott Roberts, Consultant
Root Cause Analysis: What You Find When You Look for It
Wednesday, August 26 – 10:30 am – 11:30 am
Wendi Rafferty, Director
The State of the Hack – Combating the Advanced Persistent Threat
Wednesday, August 26 – 1:00 pm – 2:00 pm
David Ross, Principal Consultant
Hammering Down the Nail
MANDIANT Corporation, a leading provider of incident response and computer forensics solutions and services, today announced their experts will spotlight the Advanced Persistent Threat (APT) and other computer security incidents seen at large organizations over the last year.
Presentations will be delivered at US-CERT’s Fifth Annual GFIRST National Conference, Aug. 25 and 26, at the Omni Hotel at CNN Center in Atlanta. US-CERT is the operational arm of the National Cyber Security Division (NCSD) at the Department of Homeland Security (DHS), and is a public-private partnership.
MANDIANT President and CEO, Kevin Mandia, will lead-off the five presentations with The Evolution of Incident Response, on Aug. 25.
“Over the last ten years, we have witnessed a shift in the motivation driving the perpetrators of computer security breaches,” Mandia said. “What was once a purely technical problem that served, at worst, as a nuisance to IT organizations, has become both a significant business concern and an issue of national security.”
The APT is a sophisticated and organized cyber attack focused on accessing and stealing information from compromised computers. Typical APT intruders target the defense industrial base, as well as the financial, manufacturing and research industries.
During his presentation Live Incident Response:Memory Analysis, Rob Lee, a director at MANDIANT, demonstrates how organizations can use live memory collection and analysis to combat sophisticated threats.
In State of the Hack - Combating the Advanced Persistent Threat, MANDIANT Director Wendi Rafferty will share information on specific threat vectors used by attackers and how attacks can escalate once incident response capabilities and remediation attempts have been observed.
Another MANDIANT presentation, Root Cause Analysis: What you find when you look for it, Principal Consultant Jay Smith and Consultant Scott Roberts will showcase a major federal agency’s cyber-security mission: the creation of a Security Operations Center designed for unified, coordinated network security monitoring and incident response.
In Hammering Down the Nail, MANDIANT Principal Consultant, David Ross, will pinpoint new ways to find the APT and scope the occupation of a victim network to allow for effective remediation.
For more information on US-CERT, please visit http://www.us-cert.gov
MANDIANT is an information security company providing products, professional services and education to Fortune 500 companies, financial institutions, government agencies, domestic and foreign police departments and several of the U.S.’s leading law firms. MANDIANT security consultants are acknowledged experts in incident response, computer forensics, network security and application security. MANDIANT is a VISA approved Qualified Incident Response Assessor. In addition to authoring seven books and numerous articles about computer forensics, incident response and rootkits, MANDIANT’s consultants have been featured on news programs including CBS’s 60 Minutes, CNN’s Talkback Live, NBC News and FOX News. MANDIANT operates offices in the Washington, DC area, New York City and Los Angeles. To learn more about MANDIANT, visit http://www.mandiant.com, or read the company blog, M-Unition, at http://blog.mandiant.com.