October 29, 202600:32:35

Alerts aren't enough anymore #09

Why alerts alone aren't enough, and why understanding behaviour and context matters.
We're looking at why alerts alone aren't enough, and why understanding behaviour and context matters.

First part of my conversation with James HAMILTON, Cyber & Infrastructure Director.

CHAPTERS
00:00 - In this episode & intro
01:48 - Introduction
02:57 - The game is changing in security operations: we need to look at it differently
08:27 - How do you define normal behaviour in a company?
12:49 - Changes in attack behaviour and vulnerability management
16:26 - “We need to bring more analytics into play and start looking at behaviour”
22:01 - The rise of identity-based attacks
25:00 - Organisations don't share much information with each other
29:45 - How much of detecting abnormal behaviour comes down to gut feeling and experience?

GUEST
James HAMILTON, Cyber & Infrastructure Director
LinkedIn: https://www.linkedin.com/in/james-h-a472ba77/

HOST
Michael VIRGONE
LinkedIn: https://www.linkedin.com/in/michaelvirgone/

GET IN TOUCH
If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you.

LinkedIn: above
Email: hello@cyberallday.io
Website: https://cyberallday.io/

ALSO WATCH AND LISTEN ON
On the website
Spotify: https://open.spotify.com/show/0346wxUpF1ozpG91m18Lnl
Apple Podcasts: https://podcasts.apple.com/gb/podcast/cyber-all-day/id6801209187
Deezer: https://www.deezer.com/ro/show/1003472212
Feed RSS: https://feeds.captivate.fm/cyber-all-day/

ENJOYING THE PODCAST?
If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.