The Sunburst Attack Case Study and How Cyber Sensors Can Improve Detection of Advanced Threats

Sponsored by: TeleStrategies' ISS World

Online webinar:
Tuesday April 20, 2021
9:00-10:00 AM - New York, EDT
15:00-16:00 - Paris Time

Presented by:
Dr. Matthew Lucas - TeleStrategies / ISS World
Sebastien Synold, Product Manager, Qosmos Technologies, ENEA

  Click Here To Register

The Sunburst Attack Case Study and How Cyber Sensors Can Improve Detection of Advanced Threats

Effective prevention, detection and timely response to cyber-attacks is vital to protect critical infrastructure and information systems. However, the growing volume and sophistication of malicious attacks is making it a highly technical and complex task that even the most advanced organizations are struggling with. Recently, the Sunburst attack penetrated thousands of organizations in the USA, leading to a series of spectacular data breaches. The sensitivity of the information, the high profile of the targets and the duration (many months) during which the attack went undetected, has made it one of the worst ever cyber-espionage incidents. 

Detailed, accurate traffic visibility is key to the detection of such threats and malicious activity. This webcast will use the recent Sunburst attack as an example to illustrate how traffic visibility delivered by cyber sensors can significantly improve defenses when faced with such threats, contribute to faster detection of intrusion and to the prevention of data breaches. 

The presentation will cover:  

• Network traffic analysis using a cyber sensor to collect, identify and categorize flows at high throughput
• Examples of different attack techniques and how they are detected 
• Network data analysis based on the MITRE ATT&CK® framework
• Demonstration of threat hunting and detection using a cyber sensor to boost IDS functions (faster, more accurate traffic identification, contextual insight, fewer false positives)
• Identification of Command & Control and exfiltration using application layer protocol techniques 

The webcast will conclude with an overview of what to look for in a cyber sensor and the key functionalities for successful detection of advanced threats.

Presented by:
Dr. Matthew Lucas - TeleStrategies / ISS World
Sebastien Synold, Product Manager, Qosmos Technologies, ENEA

  Click Here To Register