Is honesty the best policy in incident response?
mnemonic security podcast
08/09/21
•28m
About
Comments
Featured In
Luck favours the prepared.
For this non-technical episode, Robby welcomes someone with a lot of experience working with a particular consequence of security incidents: crisis communication expert Lasse Sandaker-Nielsen. Lasse is a Senior Advisor at First House, one of Norway's largest communications and public affairs agencies, and joins Robby for a discussion on crisis communication best practices from the cybersecurity space, and the most effective ways to respond when you're in crisis mode.
Lasse also shares some of his communication war stories, and his take on whether or not honesty is in fact the best policy.
Producer: Paul Jæger
Previous Episode
Threat hunting
July 12, 2021
•29m
Try to prevent what you can, detect what you can’t prevent and hunt for what you can’t detect.
For this episode about threat hunting, Robby is joined by Andreas Bråthen, Team Lead for threat hunting at mnemonic. Andreas has worked on mnemonic’s threat hunting program for the past three years and shares some of his insights into why the threat hunting domain is so difficult to navigate, and how he defines this somewhat abstract term.
He also goes into detail about the process behind the way mnemonic does threat hunting on a daily basis, what kind of technology you need to support this kind of program, and the difference between the structured and unstructured approach to threat hunting.
Producer: Paul Jæger
Next Episode
Can threat intelligence be automated?
August 30, 2021
•35m
Can threat intelligence be automated?
If so, what can be automated, and what should still be left in the hands of human analysts?
With us today, we have PhD. Martin Eian, Head of R&D in mnemonic. He sits down with Robby to speak about his team’s part in building a security platform to prevent cyber-threats together with nine other European organisations. The research project bringing these organisations together is called SOCCRATES, and is part of the European Union's Horizon 2020 Research and Innovation program (https://www.soccrates.eu/).
Martin describes how the research project aims to semi-automate threat intelligence in a platform for security operations centres (SOCs) and incident response teams, to help them better detect attacks and make the correct decisions on how to handle them.
He also shares some of his experience with how companies are actually working with threat intelligence today.
Technical level: 3/5
Producer: Paul Jæger
If you like this episode you’ll love
Promoted