Actively Hostile: Creating An Environment Unfriendly to Attacker Actions

Human-operated attacks, including nation-state espionage and targeted ransomware, are on the rise against large enterprises in every industry. These are highly-targeted strains designed to evade security controls, reach critical assets and either steal information or surgically extort large sums of money. Despite significant investments, It’s still difficult for any given enterprise to be certain that attackers can’t bypass their security tools, move inside the environment and manipulate or encrypt data.

During this virtual roundtable event, we will examine how to stop sophisticated attackers by choking off their ability to move laterally and encrypt thousands of devices at scale.

We’ll discuss how to:

• Detect risky privileged identities and accounts–cached domain admin credentials, disconnected RDP sessions, local admin accounts using the same password, shadow admin, and more–that attackers may target to reach high value assets
• Reduce your organization’s attack surface by removing extraneous credentials and connections created in the course of normal business operations- Use a dense web of distributed deceptions on every endpoint to detect and disarm human-operated ransomware attacks at “Patient Zero” before damage is done.
• Map defense capabilities to MITRE ATT&CK and MITRE SHIELD frameworks- Collect comprehensive and context-focused source forensics to accelerate incident investigation and increase SOC efficiency