{"guid":"fa93c905-e1de-4dca-bad7-71297c55e8c8","title":"Risky Business - using risk-based analysis to detect bad things","subtitle":null,"slug":"trans-tech-tent-55002-risky-business-usi","link":"https://c3voc.de","description":"\n\nRisk-Based Analysis / Alerting is a growing approach for defensive teams and SOCs to help cut down on noise and detect bad things happening from existing data and search volumes.  As vendor-neutrally as possible, this talk will walk through the concept, why it's good, what the organisational and technical weaknesses of implementations are, and how it's going to grow in 2023/24.","original_language":"eng","persons":["Jaime McCallion"],"tags":["import","55002","2023","Cybersec"],"view_count":87,"promoted":false,"date":"2023-02-11T12:00:00.000+01:00","release_date":"2023-02-15T00:00:00.000+01:00","updated_at":"2026-03-19T23:00:06.257+01:00","length":1844,"duration":1844,"thumb_url":"https://static.media.ccc.de/media/contributors/trans-tech-tent/55002-fa93c905-e1de-4dca-bad7-71297c55e8c8.jpg","poster_url":"https://static.media.ccc.de/media/contributors/trans-tech-tent/55002-fa93c905-e1de-4dca-bad7-71297c55e8c8_preview.jpg","timeline_url":"https://static.media.ccc.de/media/contributors/trans-tech-tent/55002-fa93c905-e1de-4dca-bad7-71297c55e8c8.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/contributors/trans-tech-tent/55002-fa93c905-e1de-4dca-bad7-71297c55e8c8.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/trans-tech-tent-55002-risky-business-usi","url":"https://media.ccc.de/public/events/fa93c905-e1de-4dca-bad7-71297c55e8c8","conference_title":"Trans Tech Tent","conference_url":"https://media.ccc.de/public/conferences/trans-tech-tent","related":[],"recordings":[{"size":201,"length":1844,"mime_type":"video/webm","language":"eng","filename":"import-55002-eng-Risky_Business_-_using_risk-based_analysis_to_detect_bad_things_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2023-02-15T21:01:30.038+01:00","recording_url":"https://cdn.media.ccc.de/contributors/trans-tech-tent/webm-hd/import-55002-eng-Risky_Business_-_using_risk-based_analysis_to_detect_bad_things_webm-hd.webm","url":"https://media.ccc.de/public/recordings/64598","event_url":"https://media.ccc.de/public/events/fa93c905-e1de-4dca-bad7-71297c55e8c8","conference_url":"https://media.ccc.de/public/conferences/trans-tech-tent"},{"size":58,"length":1844,"mime_type":"video/webm","language":"eng","filename":"import-55002-eng-Risky_Business_-_using_risk-based_analysis_to_detect_bad_things_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2023-02-15T20:10:44.598+01:00","recording_url":"https://cdn.media.ccc.de/contributors/trans-tech-tent/webm-sd/import-55002-eng-Risky_Business_-_using_risk-based_analysis_to_detect_bad_things_webm-sd.webm","url":"https://media.ccc.de/public/recordings/64595","event_url":"https://media.ccc.de/public/events/fa93c905-e1de-4dca-bad7-71297c55e8c8","conference_url":"https://media.ccc.de/public/conferences/trans-tech-tent"},{"size":42,"length":1844,"mime_type":"video/mp4","language":"eng","filename":"import-55002-eng-Risky_Business_-_using_risk-based_analysis_to_detect_bad_things_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2023-02-15T19:17:56.850+01:00","recording_url":"https://cdn.media.ccc.de/contributors/trans-tech-tent/h264-sd/import-55002-eng-Risky_Business_-_using_risk-based_analysis_to_detect_bad_things_sd.mp4","url":"https://media.ccc.de/public/recordings/64589","event_url":"https://media.ccc.de/public/events/fa93c905-e1de-4dca-bad7-71297c55e8c8","conference_url":"https://media.ccc.de/public/conferences/trans-tech-tent"},{"size":28,"length":1844,"mime_type":"audio/mpeg","language":"eng","filename":"import-55002-eng-Risky_Business_-_using_risk-based_analysis_to_detect_bad_things_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2023-02-15T19:14:22.188+01:00","recording_url":"https://cdn.media.ccc.de/contributors/trans-tech-tent/mp3/import-55002-eng-Risky_Business_-_using_risk-based_analysis_to_detect_bad_things_mp3.mp3","url":"https://media.ccc.de/public/recordings/64587","event_url":"https://media.ccc.de/public/events/fa93c905-e1de-4dca-bad7-71297c55e8c8","conference_url":"https://media.ccc.de/public/conferences/trans-tech-tent"},{"size":0,"length":1844,"mime_type":"audio/opus","language":"eng","filename":"import-55002-eng-Risky_Business_-_using_risk-based_analysis_to_detect_bad_things_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2023-02-15T19:13:38.360+01:00","recording_url":"https://cdn.media.ccc.de/contributors/trans-tech-tent/opus/import-55002-eng-Risky_Business_-_using_risk-based_analysis_to_detect_bad_things_opus.opus","url":"https://media.ccc.de/public/recordings/64586","event_url":"https://media.ccc.de/public/events/fa93c905-e1de-4dca-bad7-71297c55e8c8","conference_url":"https://media.ccc.de/public/conferences/trans-tech-tent"},{"size":156,"length":1844,"mime_type":"video/mp4","language":"eng","filename":"import-55002-eng-Risky_Business_-_using_risk-based_analysis_to_detect_bad_things_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2023-02-15T19:12:13.011+01:00","recording_url":"https://cdn.media.ccc.de/contributors/trans-tech-tent/h264-hd/import-55002-eng-Risky_Business_-_using_risk-based_analysis_to_detect_bad_things_hd.mp4","url":"https://media.ccc.de/public/recordings/64585","event_url":"https://media.ccc.de/public/events/fa93c905-e1de-4dca-bad7-71297c55e8c8","conference_url":"https://media.ccc.de/public/conferences/trans-tech-tent"}]}