• Connect to Us

Pawan Kinger

Blue Teamer!, work at Trend Micro

Pawan Kinger is the Director of Threat Research at Trend Micro. He has been on defensive security for 15 years. He has spent most of these years on threat research, vulnerability protection, vulnerability assessment, endpoint and network security. He leads teams that deliver protection against the latest vulnerabilities and threats. Recently, he has been exploring threats in cloud and containers ecosystems and how to defend against those. His recent passion is MITRE ATT&CK framework exploring all the different ways it can be used especially by building it into security products.

While not at work he enjoys travelling, reading, biking, skiing and nature walks. He loves his camera.

All Sessions by Pawan Kinger

  • Day 2


  • 13:45  - 14:30
    In a SOC, triaging alerts generated by Deployed Security products is a tier 1 job for an analyst. The threat intel, analysis and defences (security products) use different severity, message for the same incident, which complicates the security Analyst’s job in Alerts Triage. MITRE has simplified the work of security Analyst and Security Managers with the new ATT&CK Framework. Industry-wide acceptance of the MITRE ATT&CK Framework has enabled security product vendors to integrate it into their product line. MITRE ATT&CK Framework also enables the security vendors to evaluate their products against various TTPs as used by an adversary in an attack chain. In this session, we would like to go through how MITRE ATT&CK Framework will enable security Analyst to act fast and correlate the different Alerts to single Attack Chain and let's see in doing so if we identify any campaign activity. Fun times threat hunting with a common language.
    ATT&CK
    Blue Team
    Kill Chain
    Threat Hunting
    Where
    Speakers Hall




Share

Pawan Kinger