SOAR around the Hash Table.
SOAR is a cybersecurity first principle strategy.
If your security team is overwhelmed fighting fires, you may suffer from alert fatigue. In this session, Rick reveals how Security Orchestration Automation and Response (SOAR) tools will improve your security data flow, shift operations left towards prevention, and free personnel for more strategic pursuits. SOAR technologies also complement DevSecOps, enable intrusion kill chain prevention, and The Hash Table agrees! They explain how SOAR solves their fight against limited resources, the convergence between security event management and response orchestration, and where and how to start.
Three members of the CyberWire’s Hash Table of experts:
- Rick Doten
- Kevin Ford
- Kevin Magee
discuss SOAR tools.
Cybersecurity professional development and continued education.
You will learn about: SOAR enabling DevSecOps and Intrusion Kill Chains, managing limited resources, the SOAR-SIEM convergence, turning existing security tools into SOAR data feeds, retooling analysts into strategists
CyberWire is the world’s most trusted news source for cybersecurity information and situational awareness. Join the conversation with Rick Howard on LinkedIn and Twitter, and follow CyberWire on social media and join our community of security professionals: LinkedIn, Twitter, Youtube, Facebook, Instagram
Additional first principles resources for your cybersecurity program.
For more SOAR and cybersecurity first principles resources, check the topic essay.
Selected Reading:
- “A Brief History of SIEM,” by Stephen Gailey, CyberSecurity Magazine, 19 January 2020.
- “Cybersecurity First Principles: DevSecOps.” by Rick Howard, CSO Perspectives, The CyberWire, 8 June 2020.
- "Intelligence-Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains,” by Eric Hutchins, Michael Cloppert, Rohan Amin, Lockheed Martin Corporation, 2010, last visited 30 April 2020.
- “Site Reliability Engineering: How Google Runs Production Systems,” by Betsy Beyer, Chris Jones, Jennifer Petoff, and Niall Richard Murphy, Published by O'Reilly Media, 16 April 2016.
- “The Cybersecurity Canon: The Phoenix Project: A Novel About IT, DevOps, and Helping Your Business Win,” book review by Rick Howard, Palo Alto Networks, 21 October 2016.
- “The Evolution of SOAR Platforms,” by Stan Engelbrecht, SecurityWeek, 27 July 2018.
- “The Phoenix Project: A Novel About IT, DevOps, and Helping Your Business Win,” by Gene Kim, Kevin Behr, George Spafford, Published by IT Revolution Press, 10 January 2013.
