))
Providing Resilience: How Packetwatch and Expedient Transform Incident Response
Manage episode 447750435 series 3518022
Content provided by Expedient. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Expedient or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ppacc.player.fm/legal.
In Providing Resilience: How PacketWatch and Expedient Transform Incident Response, AJ Kuftic from Expedient hosts cybersecurity veteran Jeff Lennon of PacketWatch to tackle the complexities of modern incident response. With over 25 years in tech and deep experience in cybersecurity, Jeff brings valuable insights into how PacketWatch, an MDR provider partnered with CrowdStrike, elevates threat detection and response through advanced tools like full packet capture (FPC) and constant threat hunting.
They delve into the essential steps of incident response, beginning with rapid identification, classification, and containment of threats. Jeff explains common cyberattack types, including ransomware, business email compromise (BEC), and zero-day vulnerabilities, each demanding unique approaches. The duo emphasizes the necessity of proactive preparation, such as tabletop drills, to ensure companies can respond quickly and effectively when a breach happens. Jeff further illustrates the vital integration of disaster recovery with incident response, noting that simply restoring from backups can reintroduce threats if attack origins aren’t thoroughly isolated.
A key takeaway from the conversation is the need for resilient systems that enable businesses to "respond, recover, and rebuild." This episode is packed with insights for IT leaders seeking to enhance their incident response and disaster recovery strategies, empowering them to not just react but build resilience against evolving cyber threats.
15 episodes
Share
