人人都想主宰（数据）世界.pdf

1、Everyone Wants to Rule the World(of data)John Stoner(Civ)+John E.Stoner(Army)Global Principal Security StrategistJohn Stoner(Civ)Focuses on improving analyst capabilities in Security Operations,Threat Hunting,Incident Response,Detection Engineering and Threat Intelligence Blogs on threat hunting and

2、 security operations and has built multiple APT threat emulations for blue team capture the flag eventsPresented and led workshops at various industry symposia including FIRST,BSides,SANS Summits,WiCyS,Way West Hacking Fest,AISA,NSECand DefCon Packet Hacking VillageEnjoys listening to what former te

3、ammates referred to as 80s sad-timey musicSenior Security ConsultantJohn E Stoner(Army)John Stoner has over 25 years of experience in the national security,SLED and defense sectors,with 15 focused in cybersecurity.He has worked as a CTI analyst,Technical PM,chief of analytics and as a cyber instruct

4、or.He holds A+,Net+,CISD,CASP,FITSP-M-NG,PMP and CISSP certifications.As a Google Senior Security Consultant,he helps clients across verticals with a variety of cybersecurity issues.He is as a DEFCON G00N.John also co-instructs a Cyber Threat Intelligence workshop at BSides NoVa,and volunteers at ca

5、reer villages and is active in VetSec,The Diana Initiative,and WiCyS.Johns musical tastes are heavier,akin to“screamo metal.”TOCWho is everyone?What does“All the data”mean?TIPs and SIEMsPriority Intelligence RequirementsNormalization and data processing Balance of the dataCyber Intelligence Engineer

6、ingPutting concepts to action-Volt TyphoonSummaryWorld Where We LiveMission/Business ReqsThreatHuntingVulnerabilityManagementIncidentResponseCTISecurityOperationsWhat do we mean all the data?StrategicPerformance metricsGRCAssessmentsCertificationsIntelligence ReportingTacticalRaw Logs(syslog,json,xm