Take Down Cyberthreat Dwell Time With Kaspersky Optimum Security
summary
Kaspersky Optimum Security combines 24/7 threat hunting, EDR Optimum and endpoint protection to cut adversary dwell time; a real IR case shows responders starting on day 150 and tracing the intrusion back to brute force and mining on day 1. Attackers use legitimate tools (PowerShell, PsExec, Sysinternals, Mimikatz, Metasploit, Nmap, Wireshark) and weak passwords; the system produces incident cards, IOC scans, prevention rules, host isolation and quarantines to stop lateral movement. The vendor claims early detection lowers costs (IBM cited breaches rising from $1.4M to $3.8M; breaches detected after a week cost ~32% more).
AI-written summary · about
chapters (8)
- 0:00Introduction and agenda
- 1:04Understanding dwell time impact
- 6:22Kaspersky Optimum Security overview
- 8:26Real attack scenario walkthrough
- 13:42Kaspersky Threat Hunting demo
- 20:31Endpoint Detection and Response demo
- 35:27Incident recovery and lessons learned
- 36:51Summary and Q&A
related talks
24mNo More Time: Closing the Gap with Attackers
55m52 mins from initial access to ransomware - is your defensive team ready?
49mHow Threat Intelligence Sharing and Automation Wins the War against Attackers
47mThe Blurred Lines between Cybercrime and Statecraft
56mOutpacing Attackers: How Data-Driven Insights Speed Up Vulnerability Remediation
50mUsing An Expanded Cyber Kill Chain Model to Increase Attack Resiliency
48mCrucial Cyber Hygiene Defenses for 2023
54mHacked in hours: Red team assessments unveiling vulnerabilities