1057: To escalate or not to escalate…that is the question.

Document created by tinacostilla on Sep 14, 2012Last modified by tliu on Jul 8, 2014
Version 2Show Document
  • View in full screen mode

1057

To escalate or not to escalate…that is the question.

Speaker: John Bradshaw, Mandiant

Now what? That’s the question most often asked by security operations center (SOC) teams when HP ArcSight's correlation engine determines that something is amiss. Then it’s up to the SOC analyst to investigate and quickly separate critical threats from noise. Attend this session and learn when it’s time to escalate and when it isn’t.

 

 

Outcomes