Roland Cloutier - The Programmatic Evolution of Technology Defense

Overview: if the incident costs per your company so high, you said it was like 22, 225 thousand for an actual instance just on a malware infection, what kind of training would you put, put towards your texts and end-users to help move either get that down or decrease the number of occurrences? Yeah, we're going to microvirtualization. Because in testing it like brought it down by 99.999%. I mean the cost is going to be stupid, right? Because we're stopping it at the desktop. So, we're in the process of we

Key Topics: 're done testing, going to deployment. And so we found that microvirtualization, even if you're really dumb, you can't mess it up. Um, so that has been uh uh good implementation on our side. Um, also the automation, we increased our efficiency within our critical incident response center by 25% just by automating some malware uh response functions, going out doing joint collections. Uh, that just took us a little while, because of the the spike the amount of data we had to collect um on the stuff that we have to automate. Um, and now doing going through another tranche of that um, because you

Technical Details: know how runbooks work, right? You know, every incident's a little bit different and you get new information based on, oh crap, we never had that before, okay, now we gotta add that into our automation in our scripts and things like that. So that's improving. But we're heading for removing malware effectively at at as best as we can. Yeah.