DEF CON 26 PACKET HACKING VILLAGE - Gita Ziabari = How to Tune Automation to Avoid False Positives
1,276 views · Published 15 November 2018 · 17:47 · Indexed 21 October 2026
Channel: DEFCONConference · 2018 · Science & Technology
Every SOC is deluged by massive amounts of logs, suspect files, alerts and data that make it impossible to respond to everything. It is essential to deploy automation to accelerate response time, consistency, scalability and efficiency. This talk will cover techniques to design a reliable automated tool in security. We will discuss about techniques of tunning the automation to avoid false positives and the many struggles we have had in creating appropriate whitelists. We will walk through steps of creating an automated tool and the essential factors to be considered to avoid any false positive.
More from this channel
-
1:25
DEF CON 20 Documentary Bonus Clips - We Make No Money From You
-
1:15
DEF CON 20 Documentary Bonus Clips - Alexis Park Home Improvement
-
7:53
DEF CON 20 Documentary Bonus Clips - CDC muxed
-
3:45
DEF CON 20 Documentary Bonus Clips - Not the Same Anymore
-
2:27
DEF CON 20 Documentary Bonus Clips - Being a Party Host
-
2:09
DEF CON 20 Documentary Bonus Clips - A Top Qualitty Production
-
1:36
DEF CON 20 Documentary Bonus Clips - Creme Brulee
-
2:39
DEF CON 20 Documentary Bonus Clips - Barkode and Bloodkode