Go with the Flow: Get Started with Flow Analysis Quickly and Cheaply

DerbyCon 6.0 - Recharge

Presented by: Jason Smith
Date: Friday September 23, 2016
Time: 12:00 - 12:25
Location: Pimlico
Track: Stable Talks

Some people love buzzwords. I hate them personally. This is especially true for zazzy terms that describe things people have been doing or dealing with for ages. This talk will focus on setting up a next generation platform that will allow you to take control of big data, and hone your hunting skills at the same time. I'm kidding. Whats old is new again, so we're diving into some network flow data. I'll show you how to set it up quickly (less than 10 minutes) and for free (hardware not included). I'll also be showing you how to get started with analysis using some common and not-so-common situations.

Jason Smith

Jason Smith has a background in physics and has built everything from particle accelerators to explosive neutralizing robots used by the military. He has worked in multiple US Department of Defense SOCs and was the lead security monitoring architect for the Commonwealth of Kentucky. Jason co-wrote Applied Network Security Monitoring and maintains the open source project FlowBAT, a graphical flow data analysis tool. Jason works remotely from his home in Bowling Green, KY and has been with FireEye since late 2013.


KhanFu - Mobile schedules for INFOSEC conferences.
Mobile interface | Alternate Formats