Name: Graylog GO 2022
Start: 13/09/2022 04:30 PM +00:00
End: 15/09/2022 01:00 AM +00:00

Pick up your conference badge and grab a light breakfast before we get the day started.&nbsp;

Check-In + Breakfast

The State of Graylog Andy Grolnick, Graylog CEO
 Andy Grolnick, Graylog CEO, will kick things off with some fun facts and useful tidbits about the Graylog Nation. In this short presentation we&rsquo;ll catch you up on all the happenings since we met last year and get the party started.
&nbsp;

Andy Grolnick

Welcome - The State of Graylog

On Ransomware: Government Strategy and Secret Service Tactics
Dr. Sameer Bhalotra, Co-founder &amp; CEO of ActZero
Mike Alvarez, Network Intrusion Forensics Analyst, US Secret Service &ndash; Houston Field Office
In this dynamic keynote, Dr. Sameer Bhalotra, Co-founder &amp; CEO of ActZero, and Mike Alvarez, Digital Forensics Examiner for the U.S. Secret Service Cyber Fraud Task Force Houston Field Office will depict how the U.S. government works to remain on the cutting edge of cybersecurity policy, including explaining the Government&rsquo;s past hits and misses leading to the rise of the global ransomware &lsquo;industry,&rsquo; drawing on first-hand experience developing U.S. cybersecurity strategy across the Administrations of President Bush, Obama, Trump, and Biden, and focusing on deep debates at the U.S. Senate, White House, and Secret Service.
Additionally, the two will dive into the Secret Service&rsquo;s new tactics to combat ransomware and arrest international cyber criminals, discuss novel AI defenses that will change the game, and what private-sector players must do to win. You don&rsquo;t want to miss this!
&nbsp;

Sameer Bhalotra

Mike Alvarez

Keynote - On Ransomware: Government Strategy and Secret Service Tactics

Stop Abusing Your SIEM! Jake Williams, AKA @MalwareJake
 Far too often, organizations use their SIEM like a spare room that everyone has, but no houseguests are allowed to ever see. "We don't want to throw it out, but we don't really know what to do with it, so we just put it here." Similarly, the SIEM is often used to store logs that organizations have little idea how they'll use. Join Jake Williams (AKA MalwareJake) as he leads a discussion on some high-level strategies for getting the most out of your SIEM, including
<ul>
<li>Prioritizing the logs you store</li>
<li>Being proactive about SIEM use cases, and</li>
<li>Simple approaches for tying retention strategies to specific use cases so you can maximize lookback for the data that matters most in your investigations.</li>
</ul>

Jake Williams

Keynote - Stop Abusing Your SIEM!

Grab some caffeine and meet a new friend before heading into our late morning programming.&nbsp;&nbsp;
&nbsp;

Networking + Coffee Break

5 Ways Graylog Makes Life in IT Ops Easier . . . You Won't Believe #3!
Lennart Koopmann, Founder &amp; CTO
Since its release, Graylog Operations has earned its reputation as an intuitive, yet powerful centralized log management solution worldwide. But what does Graylog Operations have to do with solving everyday IT operations problems? Well, we are glad you asked! Join Lennart Koopmann, Founder &amp; CTO of Graylog, as he reveals some surprising and impactful ways Graylog Operations can go above and beyond log management and become the foundational tool in your IT operations arsenal in this mad, mad world.&nbsp;
&nbsp;

Lennart Koopmann

5 Ways Graylog Makes Life in IT Ops Easier . . . You Won't Believe #3!

OpenSearch Migration: Best Practices for Success
Dan McDowell, Professional Services Engineer
Nate Boot, Developer Advocate at OpenSearch
Have you ever started what should have been an easy software migration, and ended up biting off more than you could chew? All migrations are not created equal, especially if the function of the tech stack being migrated is at the heart of one of your competitive advantages. Join Dan McDowell, Professional Services Engineer at Graylog, and AWS as they lead a discussion on how migrating from Elastic to &nbsp;the OpenSearch capabilities of today and tomorrow will help position Graylog to usher in a new era of possibilities, including
<ul>
<li>Migration best practices</li>
<li>TLS technical hurdles</li>
<li>Defaults to cluster</li>
</ul>
After this session, you will understand how simple and beneficial migration to OpenSearch can be.
&nbsp;

Dan McDowell

Nate Boot

OpenSearch Migration: Best Practices for Success

The Cow and the Car Accident: Liability and Cybersecurity
Karen Walsh, Lawyer and former internal auditor turned cybersecurity and privacy regulatory compliance subject matter expert
 Everyone talks about legal and compliance risk, but does anyone really understand what their responsibility is? Legalese is a language all on its own, and it&rsquo;s hard to put those words into everyday person language. This talk cuts through all the murky legalese, explaining what regulatory, contract, and liability really mean in the context of cybersecurity.&nbsp;
Attendees will gain a basic understanding of:
<ul>
<li>Learning the &ldquo;alphabet&rdquo;: Overview of key regulatory compliance mandates</li>
<li>Milking the right cow: Fundamentals of vendor and customer contracts</li>
<li>Texting and driving: Fundamentals of tort law and negligence</li>
<li>Building and keeping trust: Fundamentals of management&rsquo;s fiduciary duty</li>
<li>Compliance is not security, but it is documentation: Why compliance can limit legal risk</li>
<li>Using Graylog for Compliance and Documentation:&nbsp;</li>
</ul>
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;-Documenting Compliance to Meet SLAs
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;-Continuous Monitoring with Graylog
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;-Creating Reports for Leadership

Karen Walsh

The Cow and the Car Accident: Liability and Cybersecurity

Achieving Success With Graylog Moderated by Mark Brooks, VP Customer Success
Coming to GO to up your Graylog game and see the &lsquo;art of the possible&rsquo;? Then why not learn from the best! In this session, hosted by CEO Andy Grolnick, 3-5 Graylog customers will share their successes and their keys to winning. Together they&rsquo;ll explore:
<ul>
<li>New ways to solve problems with Graylog</li>
<li>Key metrics you should be measuring and sharing, and</li>
<li>Challenges to be on the lookout for and how to prevent or overcome them.</li>
</ul>
You&rsquo;ll come away with a clear understanding of how to get more from Graylog.
Hear from:
Michael Sharpe, Senior Software Architect at PROS
Chris Barton, Lead Platform Architect at Recurly
Daniel Lelewski, Head of IT Systems and Automation at MarketAxess

Chris Barton

Michael Sharpe

Daniel Lelewski

Mark Brooks

Customer Panel - Achieving Success With Graylog

99 Problems, But Your SIEM Ain&rsquo;t One Jason Miller, CEO, BitLyft
There&rsquo;s no question whether you need SIEM capabilities or some type of centralized log management capabilities. You need to make sure that all is working well, and that you are reviewing your log data. But are event logs enough to get a clear picture of your security posture? Do you have enough data to make decisions from logs alone? In addition to your SIEM, you should start to ask questions centered around what can be automated, and how to learn from the past to enhance the future. Join Jason Miller, CEO of BitLyft, as he discusses how to make your environment more self-aware without relying on just the results from your SIEM.

Jason Miller

99 Problems, But Your SIEM Ain't One

Search Turned up to 11
Chris Black, Sr. Solutions Engineer, Graylog
When it comes to IT observability and cybersecurity, data is king. But data alone isn&rsquo;t enough. It is critical that the underlying platform you are using can take that data and present it in an intuitive way. Join Chris Black, Sr. Solutions Engineer at Graylog, as he leads a discussion on how using Graylog's advanced search capabilities can help you intuitively filter out irrelevant or unwanted results while getting your intended results faster, including
<ul>
<li>Fine-tuning your search parameters (using search operators independently or in combination with one another),</li>
<li>Using attributes to their fullest potential via search, and</li>
<li>Additional tips and tricks that can help you get the most out of your data.</li>
</ul>
After this session, you will understand how powerful, responsive, and straightforward Graylog search capabilities are.

Search Turned Up to 11

Call the Plumber: Your Documents are Leaking
Nicholas Ascoli, Founder / CEO - Foretrace
For most organizations, posting brochures, contract templates, whitepapers, and various forms of marketing collateral online is standard practice. And for most threat actors, this can surreptitiously provide a wealth of information about the organization they are targeting. Join Nick Ascoli as he leads a discussion on being wiser about the kind of information your digital assets are leaking, including
<ul>
<li>Examining why cybercriminals benefit from the public sharing of organizational documents,</li>
<li>How they make use of the metadata contained in the documents,</li>
<li>How misconfigurations and lack of user awareness can lead to data leaks, and</li>
<li>Practical/open-source methodologies organizations can employ to protect themselves.</li>
</ul>
After this session, you will have a clearer understanding of how to publicly share content in a safer, more secure manner.
&nbsp;

Nick Ascoli

Call the Plumber: Your Documents are Leaking

Hidden Treasure: 5 Little Known Graylog Features with Awesome Powers
Jeff Darrington, Senior Technical Marketing Manager
Ever start down a trail thinking you know where you're going only to find out that there is something new behind a corner? Even better is when something new turns into something that gives you back time in your day.&nbsp;
Come on a journey with Ethan Keaton, Technical Marketing Manager, and discover 5 little-known Graylog features that will supercharge your log management and cybersecurity activities with awesome power. Remember, Neo (The Matrix) and Alice (Alice in Wonderland) followed the white rabbit, and it changed their lives forever.&nbsp;
&nbsp;

Jeff Darrington

Hidden Treasure: 5 Little Known Graylog Features with Awesome Powers

The Who, What, Where, When, and Why: Building Advanced Dashboards
Abe Abernethy, Director of Professional Services, Graylog
A dashboard is a visual display of the most important information needed to achieve one or more objectives, consolidated and arranged on a single screen, so the information can be monitored and understood at a glance. In short, a dashboard turns disparate data into information, and information into knowledge in a manner designed to optimize decision making. When properly designed, dashboards can help manage your operations more effectively and efficiently. Join Abe Abernethy, Director of Professional Services at Graylog, as he leads a discussion on how to easily build advanced dashboards with Graylog, and how they can benefit your organization, including&nbsp;
<ul>
<li>Enhanced visibility</li>
<li>Real-time analytics and insight into key performance indicators, and</li>
<li>Improved forecasting and decision-making.</li>
</ul>

Adam Abernethy 

The Who, What, Where, When, and Why: Building Advanced Dashboards

Cross Platform Playbook Automation : A Theoretical Discussion
Jim Nitterauer, Director of Information Security
Bob Swanson, Sr. Product Manager
How many times have you heard the adage &ldquo;you can manage everything through a single pane of glass&rdquo;? We&rsquo;ve been hearing this from a variety of vendors for years with claims that their solution is the only thing needed to solve all your cybersecurity problems. And yet here we are. Environments are more complex than ever, and cybersecurity and compliance concerns are growing exponentially. And now? Vendors are promoting SOAR (Security Orchestration, Automation, and Response) as the answer to all problems. The concepts behind SOAR are designed to speed up an incident response while reducing the workload on the SOC. Today&rsquo;s solutions are not delivering on these promises. Join Graylog experts Jim Nitterauer, Director of Information Security, and Bob Swanson, Senior Product Manager, Graylog as they lead a discussion on how an ecosystem of highly focused products and services that offer open communication with other like-minded products and services can give you the ability to build a solution right for your business, including how better cross-platform communications combined with automated responses can help in both incident response strategies and continuous compliance monitoring.
&nbsp;

Bob Swanson

Cross Platform Playbook Automation : A Theoretical Discussion

Become a Graylog Open Power User through Community Peer Support
Tad Sherrill, Infrastructure Architect
Greg Smith, Datacenter Administrator
 Iron sharpens iron, and oftentimes, it takes an entire village to truly &ldquo;raise&rdquo; an open-source project. The creator can lay the foundation, but it is up to the users to manifest its maximum potential. Join Graylog Community Advisory Board (CAB) members Greg Smith and Tad Sherrill, as they lead a discussion to help other Graylog Community members solve their Graylog Open technical issues, including&nbsp;
<ul>
<li>A description of their technical strengths and challenges,&nbsp;</li>
<li>Graylog Open Community free peer support, and</li>
<li>How to turn your Graylog Community participation and willingness to help others become Graylog Open power users.</li>
</ul>

Greg Smith

Tad Sherrill

Become a Graylog Open Power User through Community Peer Support

NEW TIME SLOT!!
Look Up Tables: The Best Feature You Aren't Using
Alec Short, Senior Security Engineer, Ideal Integrations
Jacob Rabinovitz, Senior Security Engineer, Ideal Integrations
Do you know an extremely powerful tool that is underutilized in most Graylog deployments? The title of this abstract instantly gives it away. But why is this the case? The ability to reference external data for data enrichment alone is more than enough reason to start using them more in Graylog. Ideal Integrations has developed advanced lookup tables that utilize automation through Python to return data to their Graylog instance and further enrich log data, and they want to tell you all about it! Join Alec Short and Jacob Rabinovitz, Senior Security Engineers at Ideal Integrations, as they demonstrate the power of lookup tables and, hopefully, inspire some other ideas that could help reduce KPIs like mean time to detection (MTTD), including:
<ul>
<li>How to configure/set up lookup tables</li>
<li>How Ideal Ideal Integrations integrated Python into custom lookup tables, and</li>
<li>How to create dynamic lookup tables, alerts, dashboards, and associated use cases.</li>
</ul>

Alec Short

Jacob Rabinovitz

Look Up Tables: The Best Feature You Aren't Using

Light Up Your SOC with Graylog
Jeff Darrington, Senior Technical Marketing Manager
Did you see that Alert? Was it lit?&nbsp;
Even the most capable security staff standing ready and waiting to defend against breaches can&rsquo;t always defend against the unavoidable human factor. But some outside-of-the-box thinking and creativity paired with critical awareness and practical steps can go a long way in making sure you can respond fast when it matters the most.&nbsp;
Join Jeff Darrington, Senior Technical Marketing Manager at Graylog, for a walk-through of best practices to ensure you don&rsquo;t miss those critical alerts. The session will cover:
<ul>
<li>Quick review of critical alerts and notifications in a SOC</li>
<li>When to use custom alerts</li>
<li>How to create custom alerts that get attention</li>
<li>And more</li>
</ul>
You&rsquo;ll come away with practical, real-world examples of ensuring you don&rsquo;t miss the critical alerts while you&rsquo;re looking away.&nbsp;
&nbsp;

Light Up Your SOC with Graylog

Accurate Data for Reliable Context - Getting Enriched Log Data
Ben Dowling, Founder &amp; CTO, IPinfo
Did you know that 3% of all IP addresses are VPNs and not true IP addresses? Most people surfing the web use VPNs to hide their identities, but you&rsquo;d never know if you just take an IP address at face value. This level of detail is priceless when trying to get the clearest picture of what&rsquo;s going on in your environment. But, traditional event log data doesn&rsquo;t give you this level of detail - you need to go deeper. This is just one of the deeper insights that enriching standard log data can provide. Join Ben Dowling, Founder &amp; CTO of IPinfo, as he discusses different types of IP address data and how they can be used to enrich log data, including
<ul>
<li>IP to geolocation, and</li>
<li>IP to ASN</li>
</ul>

Accurate Data for Reliable Context - Getting Enriched Log Data

Applying Poker Theory to Cybersecurity Spend
Karen Walsh, Lawyer and former internal auditor turned cybersecurity and privacy regulatory compliance subject matter expert
 Although a lot of high-level comparisons are found between poker and cybersecurity, few actually delve into how organizations can use poker theory to understand their cybersecurity risk. This talk compares corporate cybersecurity decision-making to poker player Dan Harrington&rsquo;s &ldquo;Harrington on Modern Tournament Poker.&rdquo;
Security professionals can use poker theory to explain cybersecurity risk to their c-suites with a framework for understanding how they make decisions, including:
<ul>
<li>Understand "style of play": Determining risk tolerance</li>
<li>Read the table: Knowing the landscape</li>
<li>Align your power to your position: Investing and pivoting</li>
<li>Control the pot: Using your budget wisely</li>
<li>Never Slow Play a Strong Hand: Continuously strengthening your posture</li>
<li>Medium Hands Might Not Win: Reviewing risk</li>
<li>Drawing Hands Mean Smaller Odds: Filling security gaps</li>
<li>Cybersecurity Texture: Using threat intelligence intelligently</li>
</ul>

Applying Poker Theory to Cybersecurity Spend

OpenSearch Observability - Application Analytics &amp; Schemas
Eugene Lee - Software Development Engineer at Amazon Web Services working on OpenSearch focusing on Observability
Peter Fitzgibbons - Senior Developer at OpenSearch
This session will use application analytics to create custom observability applications that will allow you to view the availability status of your systems and combine log events with trace and metric data into a single view of overall system health.
&nbsp;

Peter Fitzgibbons

Eugene Lee

OpenSearch Observability - Application Analytics & Schemas

NEW TIME SLOT!!
We Install a LOT of Graylog - Here is How We Fix Most Performance Issues
Abe Abernethy, Director of Professional Services, Graylog
Sivapriyan Srikandarajah, Professional Services Engineer, Graylog
 Even the world&rsquo;s fastest sportscars need a tune-up every once in a while to maintain and potentially increase performance and enjoyability. Applications can be viewed through the same lens. With continuous improvement efforts, an application can evolve to meet the present and future needs of any organization and continue to be the centerpiece of any toolset. Join Abe Abernethy, Director of Professional Services at Graylog, and Sivapriyan Srikandarajah, Professional Services Engineer at Graylog, in an interview-style session where they discuss the biggest performance fixes the Graylog team routinely does to gain huge improvements from our products, including:
<ul>
<li>Sharding and Scalability</li>
<li>Best Practices</li>
<li>Basic Troubleshooting, and</li>
<li>Top 3 defaults for the Graylog platform.</li>
</ul>

Sivapriyan Srikandarajah

We Install a LOT of Graylog - Here is How We Fix Most Performance Issues

Graylog Security: SIEMplify Your Life
Joe Gross, Director Solution Engineering
A SIEM is a powerful cybersecurity tool that has been the foundation for cybersecurity strategies for organizations of all sizes and in all industries. As essential as they are, SIEMs are becoming synonymous with complexity and unwieldiness, making it harder for organizations with smaller security teams to manage them and quickly get to the value that was promised. &nbsp;Join Joe Gross, Director Solution Engineering at Graylog, as he explains how Graylog Security is disrupting the SIEM market and addressing the big issues mid-market organizations have with SIEM deployment, management, and time-to-value, including discussion on:
<ul>
<li>How Graylog Security is designed from the ground up to make SIEM as frictionless as possible</li>
<li>How capabilities like intelligent automation and Anomaly Detection (UEBA) can reduce key metrics like MTTD and MTTR</li>
<li>How integrated content empowers smaller security teams to be threat hunters</li>
</ul>
SIEM shouldn&rsquo;t be reserved for only organizations that have the excess human and financial resources to throw at overcoming their inherent challenges. Graylog has an app for that.
&nbsp;

Joe Gross

Graylog Security: SIEMplify Your Life

An Exciting Journey: Moving to Graylog Cloud
Andrii Andrieiev, Director - Cloud&nbsp;
In today&rsquo;s technologically advanced world, on-premises workloads can be considered a clear manifestation of control issues - &ldquo;my data has to be in my possession, behind my firewall, and on my server at all times&rdquo;. With the advent of the cloud, managing on-prem workloads inherently creates a list of challenges that no longer have to be part of day-to-day operations. &nbsp;Join Andrii Andrieiev, Director of Cloud Services at Graylog, as he leads a discussion on everything Graylog Cloud, including
<ul>
<li>An overview of Graylog Cloud</li>
<li>Benefits of Graylog Cloud, and</li>
<li>A look at how Graylog Cloud can make life easier for your organization.&nbsp;</li>
</ul>
After this session, you will have a clearer understanding of the efficiency of Graylog Cloud and the resiliency and peace of mind that comes with allowing Graylog to manage your cloud workloads.
&nbsp;

Andrii Andrieiev

An Exciting Journey: Moving To Graylog Cloud

Graylog for the Extremely Paranoid: Encryption, Certs, and OpenSearch - OH MY!
Stella Freyju, Professional Services Engineer
Cybersecurity professionals can be a paranoid group based on their knowledge of the threats and how easy it can be to gain illegal access to a company&rsquo;s environment and business-critical data. Put a cover on the webcam? Definitely. Connect to public wi-fi? Absolutely not. The lack of trust in cybersecurity by those who are in the business of keeping the rest of the organization safe can be quite alarming. Join Stella Freyju, Professional Services Engineer at Graylog, as she leads a discussion on the hows and whys of securing Graylog and the related components, including
<ul>
<li>TLS</li>
<li>Authentication</li>
<li>Encryption at rest</li>
<li>Security on the wire</li>
<li>Security on the OS</li>
</ul>
After this session, you will have a clearer understanding of how to ease your cybersecurity paranoia by fortifying your Graylog instance.

Stella Freyju

Graylog for the Extremely Paranoid: Encryption, Certs, and OpenSearch - OH MY!

The Graylog API: To Infinity and Beyond! Lennart Koopmann, Founder &amp; CTO
Master the Graylog API and there are seemingly infinite possibilities to how you can use the parsed, normalized, and enriched data you&rsquo;ve so carefully collected into Graylog. With the API you can extend Graylog and create all kinds of automations for Ops, Dev, and Security purposes.
In this session Lennart Koopmann, Graylog Founder &amp; CTO, will show you:
<ul>
<li>How to use the API Browser and set up authentication correctly</li>
<li>Configure Graylog through the API</li>
<li>&lsquo;Lightbulb moments&rsquo; - examples of fun, interesting, and wild things you can do with Graylog Live coding examples</li>
</ul>
Be inspired to achieve new things and get even more out of your Graylog installation!
&nbsp;

The Graylog API: To Infinity and Beyond!

The Future of Graylog: Roadmap22 Lennart Koopmann, Founder &amp; CTO
 Where do we go from there? We&rsquo;ve added so many great things to Graylog over the past year, but there&rsquo;s always room for more. Join Lennart Koopmann, Founder &amp; CTO for this session on:
<ul>
<li>Our overall vision for Graylog the company</li>
<li>Near-term plans for Graylog Open, Operations, Security, and Cloud</li>
</ul>
We know you rely on Graylog, this session will give you a clear understanding of where we&rsquo;re headed and what comes next so you can plan for the future.
&nbsp;

Graylog GO 2022

Agenda

Speakers28 Speakers