Good To The Last Drop: Squeezing More Juice Out of Your Oranges

Are you getting the most from your security tools?

“We estimate that 90% of users misconfigure our solution.” – major security provider

“When I took over the security program, I found we had 3 different EDR solutions, and were in the process of buying another.” – Fortune 100 CISO

Both end-users and the vendors that secure them are frustrated about the gap in tool utilization – what is advertised vs what is possible vs what is implemented. Distrust abounds; the issue often comes down to a lack of understanding around what is possible within solutions and what are appropriate expectations of those capabilities. In this talk, Tidal's CINO Frank Duff will explore how to effectively explore vendor claims as they relate to MITRE ATT&CK®, identify shortcomings, and prioritize your activities to continually evolve and improve.

This presentation was originally given as part of the SANS Blue Team Summit in October 2022.