Anti-Cast: Cover Your SaaS with Shane Hartman

When a security incident hits your SaaS environment, where do you even start?

There are no hard drives to image, no network packets to sniff, and no physical servers to seize. When the attacker never touched a single endpoint, where and what exactly are you investigating?

Join Shane Hartman, Principal IR Consultant at TrustedSec, as he takes you down the rabbit hole of token theft, OAuth abuse, and API exposure in SaaS incident response investigations.

You’ll leave with a clearer picture of how attackers move through SaaS environments, what evidence they leave behind, and where to look when traditional IR playbooks don’t apply.

In SaaS, attackers don’t break in. They register; they sign in. If your organization runs SaaS (and you know it does), an incident is coming. This is how you investigate it.

Join us for PreShow Banter™ at 11:30 AM ET

Chat with your fellow attendees in the BHIS Discord server:
https://discord.gg/bhis 
in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!