SANS - Next-Gen Insider Threat Visibility & Prevention with DTEX InTERCEPT
When it comes to security, digital enterprises share a common and unavoidable weak point: the user. And despite security teams' best efforts to limit user activity and increase visibility, attacks still occur. What is needed is a new approach to protecting users, one that recognizes that users need different types of protection so that security has a fighting chance to succeed.
In this webcast, SANS instructor Matt Bromiley reviews DTEX InTERCEPT, a platform that offers holistic visibility and provides unique insight into user behavior. He explores how InTERCEPT captures, analyzes and alerts on anomalous behavior to detect and prioritize threats early in the insider life cycle.
Specifically, Bromiley shares his experiences using the InTERCEPT platform to:
- Capture and present correlated, intricate data that is easy to both consume and act on,
- Address the technical needs of security analysts while providing the data security leaders need for decision making,
- Analyze past and future user behaviors through InTERCEPT's user investigation dashboard and reporting features, and
- Get to raw data and perform rapid investigations and threat hunting while contextualizing metadata into business risk and impact.