SANS AI Cybersecurity Summit - Las Vegas: From Narrow AI to Generative AI: Enhancing your DFIR Skills with AI
Event: SANS AI Cybersecurity Summit - Las Vegas
Date: September 8th | 4:15pm - 7:15pm (UTC) September 9th | 4:50 pm - 5:25 pm (UTC)
Speaker: Jess Garcia
September 8th | 4:15pm - 7:15pm (UTC)
Title: “From Narrow AI to Generative AI: Enhancing your DFIR Skills with AI”
Abstract:
This hands-on session will explore the integration of custom Machine Learning models and Generative AI technologies into DFIR workflows, offering practical insights and applications. The workshop is divided into two sessions, each focusing on cutting-edge AI technologies and their practical applications in the field of DFIR.
Part 1: Custom Machine Learning Models for DFIR (1 hour)
Overview: The initial part of the workshop will focus on utilizing lightweight Machine Learning models to address specific tasks related to threat detection and incident response. In many cases, smaller custom models can outperform larger models, including those with trillions of parameters like ChatGPT. They require less computational power, are faster to train and deploy, and can be fine-tuned to capture the nuances of particular problems more effectively than large, general-purpose models.
Part 2: Generative AI Technologies for DFIR (2 hours)
Overview: This part of the workshop will delve into the application of Generative AI models like Large Language Models (LLMs) to solve many of the most challenging tasks that we face in our investigations today. After covering the most important concepts, tools & resources you need to know related to Generative AI for DFIR, we will apply this promising technology to analyze artifacts with a DFIR-Copilot, correlate CTI sources, automate Threat Hunting tasks, and guide forensic investigations with AI-Agents.
September 9th | 4:50 pm - 5:25 pm (UTC)
Title: “Gen-AI for DFIR in the Real World: Practical Use Cases”
Abstract:
In this presentation, Jess Garcia will provide a deep analysis about the transformative potential of current Generative AI systems to enhance the capabilities of threat detection and response teams.
The discussion will cover a range of AI-based resources available for threat hunters and forensicators today, including customized GPTs for specific tasks, AI-Agents for workflow automation, DFIR prompt templates, and the latest features of ChatGPT for data analysis.
Through a series of real world Use Cases, which One eSecurity has been implementing in some of their customers, Jess Garcia will demonstrate how this new wave of AI technologies can be integrated into daily cybersecurity operations to streamline processes, improve accuracy, and reduce both work time and response times of forensicators and hunters.
More info: SANS AI Cybersecurity Summit - Las Vegas