Lane Roush's guest appearances

Lane Roush

7 Minute Security

eXcellerate

Secure Ventures with Kyle McNulty

Tanya Janca

Chris Farley

Billy Madison

Peter Kim

Steve Jobs Movie

John Strand

Amanda Berlin

Steve Drew

Wolfgang Goerlich

Marcello Salvati

Justin McCarthy

Paul Oliver

Josh Haley

Kevin Keane

Nathan Hunstad

OwlTail

Welcome back to the Always On podcast series which connects the dots between security and technology. On this episode of Always On, Lane Roush from Arctic Wolf joins me to discuss the differences between MDR and EDR and how they can be used to help organizations reduce security risk. If you are looking for the best ways to reduce risk, you might be surprised to hear that the answer is not in changing platforms. Listen in to discover what organizations can do to effectively reduce security risks. You will want to hear this episode if you are interested in...  Fleshing out the differences between the acronyms [1:22] Who is moving to an MDR provider and what is driving that need [7:57] The distinction between the network and the edge [19:49] Machine learning supporting the analyst [26:52] Using MDR as one component in a greater security framework [38:04]  What are the differences between EDR and XDR? At this point in time, almost everything has a detection and response component to almost every technology. In the cybersecurity space, you’ll hear so many different acronyms for these components. What do they all mean and what are the subtle differences between them? EDR is an endpoint technology response that allows for policy building around detection methods. XDR is similar to EDR in that it has the end-point technology but it has the added effect of taking a wider view and integrating security across endpoints.  What is the difference between MSSP and MDR? MSSPs have focused on commodity device management such as firewall management. MDR is a purpose-built technology and can identify advanced and commodity threats within the environment. The difference between the two is that MDR is focused and purpose-built whereas MSSP is more of a one-stop-shop.  Why are many organizations moving to an MDR provider? In the past, many organizations were able to DIY their own security especially if they were already in the IT space. However, in the last few years, these organizations have come to realize that building a security operations center is completely different from building an app. Organizations now prefer to focus on their core business and would rather invest in a platform and resources, so recently there has been a shift in market trends from self-management to using an MDR. Many have come up with a hybrid solution that helps them find the right balance.  The best way to reduce risk overall  An excellent security operation is integral to running any organization in this day and age. As security professionals, it’s our job to show organizations how to handle the strategic side or be the engine.  Arctic Wolf helps companies outsource their security so that they can take standard security incidents and identify them early so that they can create automated IT processes to take action quickly. Arctic Wolf does much more than threat detection and security response. They have discovered that they can tie these security management devices together with a human response. This hybrid approach will drive down risk in a cost-effective way by reducing the likelihood of an attack. Using an MDR will give the organization a level of maturity but security training within the organization is just as important.  Connect with Lane Roush  https://arcticwolf.com/ Lane Roush on LinkedIn:  https://www.linkedin.com/in/laneroush  Connect With Carousel Industries  https://www.carouselindustries.com/ On LinkedIn On Facebook On Twitter: @Carousel_Ind On YouTube On Instagram  Subscribe to ALWAYS ON Audio Production and Show notes by PODCAST FAST TRACK https://www.podcastfasttrack.com

Welcome back to the Always On podcast series which connects the dots between security and technology. On this episode of Always On, Lane Roush from Arctic Wolf joins me to discuss the differences between MDR and EDR and how they can be used to help organizations reduce security risk. If you are looking for the best ways to reduce risk, you might be surprised to hear that the answer is not in changing platforms. Listen in to discover what organizations can do to effectively reduce security risks. You will want to hear this episode if you are interested in... <ul> <li>Fleshing out the differences between the acronyms [1:22]</li> <li>Who is moving to an MDR provider and what is driving that need [7:57]</li> <li>The distinction between the network and the edge [19:49]</li> <li>Machine learning supporting the analyst [26:52]</li> <li>Using MDR as one component in a greater security framework [38:04]</li> </ul> What are the differences between EDR and XDR? At this point in time, almost everything has a detection and response component to almost every technology. In the cybersecurity space, you’ll hear so many different acronyms for these components. What do they all mean and what are the subtle differences between them? EDR is an endpoint technology response that allows for policy building around detection methods. XDR is similar to EDR in that it has the end-point technology but it has the added effect of taking a wider view and integrating security across endpoints.  What is the difference between MSSP and MDR? MSSPs have focused on commodity device management such as firewall management. MDR is a purpose-built technology and can identify advanced and commodity threats within the environment. The difference between the two is that MDR is focused and purpose-built whereas MSSP is more of a one-stop-shop.  Why are many organizations moving to an MDR provider? In the past, many organizations were able to DIY their own security especially if they were already in the IT space. However, in the last few years, these organizations have come to realize that building a security operations center is completely different from building an app. Organizations now prefer to focus on their core business and would rather invest in a platform and resources, so recently there has been a shift in market trends from self-management to using an MDR. Many have come up with a hybrid solution that helps them find the right balance.  The best way to reduce risk overall  An excellent security operation is integral to running any organization in this day and age. As security professionals, it’s our job to show organizations how to handle the strategic side or be the engine.  Arctic Wolf helps companies outsource their security so that they can take standard security incidents and identify them early so that they can create automated IT processes to take action quickly. Arctic Wolf does much more than threat detection and security response. They have discovered that they can tie these security management devices together with a human response. This hybrid approach will drive down risk in a cost-effective way by reducing the likelihood of an attack. Using an MDR will give the organization a level of maturity but security training within the organization is just as important.  Connect with Lane Roush <ul> <li><a href="https://arcticwolf.com/" rel="noopener nofollow" target="_blank">https://arcticwolf.com/</a></li> <li>Lane Roush on LinkedIn:  <a href="https://www.linkedin.com/in/laneroush" rel="noopener nofollow" target="_blank">https://www.linkedin.com/in/laneroush</a></li> </ul> Connect With Carousel Industries <ul> <li><a href="https://www.carouselindustries.com/" rel="nofollow" target="_blank">https://www.carouselindustries.com/</a></li> <li>On <a href="https://www.linkedin.com/company/carousel-industries/" rel="nofollow" target="_blank">LinkedIn</a></li> <li>On <a href="https://www.facebook.com/CarouselIndustries" rel="nofollow" target="_blank">Facebook</a></li> <li>On Twitter: <a href="https://twitter.com/carousel_ind" rel="nofollow" target="_blank">@Carousel_Ind</a></li> <li>On <a href="https://www.youtube.com/user/carouselindustries" rel="nofollow" target="_blank">YouTube</a></li> <li>On <a href="https://www.instagram.com/Carousel_Ind/" rel="nofollow" target="_blank">Instagram</a></li> </ul> Subscribe to <a href="http://hyperurl.co/Carousel-Always-On" rel="nofollow" target="_blank">ALWAYS ON</a> Audio Production and Show notes by PODCAST FAST TRACK <a href="https://www.podcastfasttrack.com/" rel="nofollow" target="_blank">https://www.podcastfasttrack.com</a>

How to Reduce Security Risk with Lane Roush, Ep # 11 

Arctic Wolf

Today's episode is brought to you by ITProTV. Visit itpro.tv/7ms and use code 7MS to get a FREE 7-day trial and 30% off a monthly membership for the lifetime of your active subscription. This week I sat down with Lane Roush of Arctic Wolf to discuss the big hairy beast that is...(insert dramatic music here) logging and alerting! I work with a lot of clients (and you probably do too) who want answers to these questions:  What in the world is going on in my network? How will I know if bad stuff is happening? If I do identify the bad stuff and attempt to eradicate it, how will I know if I've exorcised all the demons?  So Lane and I sat down to discuss this conundrum, and explore answers to other burning questions like:  Why is it so hard to separate the signal from noise when trying to figure out what's happening in the bowels of your network? Should logging/alerting be a full-time job for one or more people? When does it make sense to outsource these responsibilities?  Check out today's interview to learn more, and also reach out to Arctic Wolf on their Twitter or LinkedIn for more information.

Today's episode is brought to you by ITProTV. Visit <a href="https://itpro.tv/7ms" rel="nofollow noreferrer noopener" target="_blank">itpro.tv/7ms</a> and use code 7MS to get a FREE 7-day trial and 30% off a monthly membership for the lifetime of your active subscription. This week I sat down with Lane Roush of <a href="https://arcticwolf.com/" rel="nofollow noreferrer noopener" target="_blank">Arctic Wolf</a> to discuss the big hairy beast that is...(insert dramatic music here) logging and alerting! I work with a lot of clients (and you probably do too) who want answers to these questions: <ul> <li>What in the world is going on in my network?</li> <li>How will I know if bad stuff is happening?</li> <li>If I do identify the bad stuff and attempt to eradicate it, how will I know if I've exorcised all the demons?</li> </ul> So Lane and I sat down to discuss this conundrum, and explore answers to other burning questions like: <ul> <li>Why is it so hard to separate the signal from noise when trying to figure out what's happening in the bowels of your network?</li> <li>Should logging/alerting be a full-time job for one or more people?</li> <li>When does it make sense to outsource these responsibilities?</li> </ul> Check out today's interview to learn more, and also reach out to Arctic Wolf on their <a href="https://twitter.com/awnetworks?lang=en" rel="nofollow noreferrer noopener" target="_blank">Twitter</a> or <a href="https://www.linkedin.com/company/arctic-wolf-networks/" rel="nofollow noreferrer noopener" target="_blank">LinkedIn</a> for more information.

7MS #320: Interview with Lane Roush of Arctic Wolf