O'Reilly Security Conference 2016
summary
Claim that defending networks requires persistent defense not hit and run tactics and shows how to build it using concrete controls: deploy low-interaction honeypots for early warning, roll out EDR agents with automated containment playbooks, feed both into a SIEM with simple anomaly detection rules. Demonstrates a blue team workflow that replaces ad hoc incident hunts with detect contain respond pipelines and a smash-and-grab threat model reversed into sustained advantage.
AI-written summary · about
related talks
29mDetection Engineering: Defending Networks with Purpose
45mDefenders Struggle as the Adversary Continues to Break Away
35mThe Best Defense is a Great Offense: Leveraging Automated...
11mIT Security Conference 2025 | Olivier Bailiez | Rapid7
51mNot Go Quietly Adaptive Strategies and Unlikely Teammates
46mApplied Deception Beyond the Honeypot: Moving Past 101
14mThreat Modeling for O11y: From Blind Spots to Actionable Insight
33mInterview with