Alissa Torres is a blue team practitioner/educator turned consultant, laser-focused on the people element of the SecOps equation. With 3 dog-years of experience spanning roles in active and passive IT and security operations, she discovered her passion for adversary hunt while serving in the trenches as an incident analyst with a third-party remediation services company, and later, leading an incident response team for a global manufacturing company. As a seasoned presenter, Alissa shares insights from her real-world experiences but she certainly hopes your mileage varies (dramatically, in some cases) from her own.
On-Demand Courses Available from this Instructor
Coming Up: Live Online and In-Person Courses by this Instructor
If no live trainings appear below, please visit our Live Training Calendar for other classes that may interest you.
For most security teams, high operational tempo (measured in dumpster fire lumens) incentivizes analysts to stick to well-tailored playbooks that prioritize remediation at the expense of proper incident scoping and root cause analysis. Though modern endpoint security products have significantly improved host visibility, most critical incidents will require the acquisition and analysis of additional endpoint data.