Guy Kramer
Guy Kramer is a strategic technologist and founder of Cyber Intelligence & Advisory Ltd. With over 17 years of experience in the field, his expertise encompasses the design, development and implementation of security solutions. His in-depth knowledge of cybersecurity, combined with his hands-on approach, allows him to deliver effective guidance to executives and technical teams alike.
He has worked for high-profile clients in government as well as for globally recognised companies such as Rolls-Royce and Hewlett-Packard. A well-travelled individual who has advised on security best practices in 125 cities, Guy has led projects that have changed the shape of cyber security. Notably, he pioneered a ground-breaking technology (Global Adversary Signals Analytics) that has strengthened the defences of governments worldwide against sophisticated cyber threats.
With a fascination for cybersecurity innovation, Guy is dedicated to learning new attack and defensive techniques, mentoring talent and actively contributing to the information security community. His aim at Cyber Intelligence & Advisory Ltd is to build a globally respected firm that sets new standards of security in the industry.
Session
Log collection is the foundation of Security Operations. It is critical to have the correct host/application and a collection mechanism for events to facilitate correlation into SIEM/SOAR/XDR. Ineffective security events not only waste platform resources but also increase false-positive detections within a SOC; which then impacts moral and how long it take to triage an alert.
Led by SIEM engineering specialists who boast a combined +20yrs experience with clients across government and industry, learn and try some of the best practices and tips that help some of the UKs most critical SOCs run smoothly.
If you are playing with Security Onion, or building content and correlation rules, improve your effectiveness by only collecting the events you need…this is for you, take the trash out!