AtlSecCon 2022

How could you handle over 1.2 trillion events a quarter with no major breaches, a small staff under 20 people and still see the SolarWinds attack first? This talk shares the initial SolarWinds attack activities, the tepid response that responsible disclosure elicited and how a modern SOC can automate response to events of this magnitude, months ahead of public disclosure and response.