BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//tecnowebinars.com - ECPv6.18.3.1//NONSGML v1.0//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:tecnowebinars.com
X-ORIGINAL-URL:https://tecnowebinars.com
X-WR-CALDESC:Eventos para tecnowebinars.com
REFRESH-INTERVAL;VALUE=DURATION:PT1H
X-Robots-Tag:noindex
X-PUBLISHED-TTL:PT1H
BEGIN:VTIMEZONE
TZID:Europe/Madrid
BEGIN:DAYLIGHT
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
TZNAME:CEST
DTSTART:20250330T010000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
TZNAME:CET
DTSTART:20251026T010000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
TZNAME:CEST
DTSTART:20260329T010000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
TZNAME:CET
DTSTART:20261025T010000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
TZNAME:CEST
DTSTART:20270328T010000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
TZNAME:CET
DTSTART:20271031T010000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;TZID=Europe/Madrid:20261124T190000
DTEND;TZID=Europe/Madrid:20261124T195627
DTSTAMP:20261114T110024Z
CREATED:20261114T110024Z
LAST-MODIFIED:20261114T110024Z
UID:2013-1795546800-1795550187@tecnowebinars.com
SUMMARY:Why Advanced Security Teams Are Shifting Beyond EDR at the Hypervisor
DESCRIPTION:Traditional security tools were built for a threat model that assumed compromise begins at the endpoint. EDR expects attackers to deploy malware\, trigger telemetry\, and give defenders time to respond.  \nToday’s most effective threat groups—including Scattered Spider\, UNC5221\, and Akira—increasingly leverage valid credentials\, pivot through management planes\, and target the virtualization layer where critical workloads converge. \nWhen attackers operate at or near the hypervisor\, endpoint visibility can be incomplete or misleading. Activity may occur outside the guest OS\, span multiple VMs at once\, or move through trusted administrative pathways. In these scenarios\, detect-and-respond comes too late.  \nAdvanced security teams are shifting left by implementing preemptive controls at the hypervisor and infrastructure layer to stop execution before impact. \nIn this live session\, we’ll cover:  \n– Why EDR struggles against identity-led intrusions in virtualized environments – How modern threat groups reach hypervisors through credential abuse and administrative tooling – What preemptive security at the hypervisor looks like in practice \nPonentes: Nathan Montierth | Solutions Engineer & Threat Intelligence Lead\, Vali Cyber \nVer y registrarse en BrightTALK
URL:https://tecnowebinars.com/evento/why-advanced-security-teams-are-shifting-beyond-edr-at-the-hypervisor/
CATEGORIES:Ciberseguridad
END:VEVENT
END:VCALENDAR