Insider Threat Kill Chain - Human Indicators of Compromise

Explore the concept of insider threats in cybersecurity through a comprehensive conference talk that delves into the Insider Threat Kill Chain and human indicators of compromise. Learn about admin privileges abuse, insider threat intentions, and prevention strategies. Discover the importance of log intelligence and analytics, including what to log and how to create effective correlation rules. Examine real-world logging problems and a case study involving a power company. Gain insights into integrating physical and digital security measures, addressing lazy logging practices, and preparing for future threats in the evolving landscape of insider threat detection and prevention.