Solving Threat Detection

Explore the challenges and solutions in threat detection in this Security BSides London conference talk. Delve into why organizations struggle with effective threat detection despite significant investments. Examine key issues like reinventing the wheel, information sharing, traditional SOC models, and detection priorities. Learn about building and retaining skilled employees and get an honest assessment of detection tooling and deployment hurdles. Discover simple solutions to these complex problems, illustrated with technical examples from the Countercept hunt team's real-world experiences. Gain insights into improving threat detection capabilities, from collaboration and automation to metrics and making detection work more appealing. Understand how to shift focus from traditional SOCs to other valuable sources for more effective threat detection.