NetWitness and Cisco released the third annual Findings Report from the RSA Conference? 2022 Security Operations Center (SOC).

The RSA Conference? SOC analyzes the Moscone Center wireless traffic, which is an open network during the week of the Conference.

The role of the SOC at RSA Conference is an educational exhibit sponsored by NetWitness and Cisco. It has elements of a SOC like you would create to protect an organization. The RSAC SOC coordinated with the Moscone Center Network Operation Center for a SPAN of the network traffic from the Moscone Center wireless network. In the SOC, NetWitness had real time visibility of the traffic traversing the wireless network. Cisco provided automated malware analysis, threat intelligence, DNS visibility and Intrusion Detection; brought together with SecureX.

The goal of the RSAC SOC is to use technology to educate conference attendees about what happens on a typical wireless network. The education comes in the form of daily SOC tours and an RSA Conference? session. You can watch the replay of the 'EXPOSURE: The 3rd Annual RSAC SOC Report' session here.

The findings report addresses several security topics, including:

• Encrypted vs. Unencrypted network traffic
• Cleartext Usernames and Passwords
• Voice over IP
• Threat Hunting
• Malware Analysis, through the NetWitness? integration
• Malicious Behavior
• Domain Name Server (DNS)
• Automate, Automate
• Intrusion Detection
• Firepower Encrypted Visibility Engine (EVE)
• Firepower and NetWitness? Integration

Look forward to seeing you in 2023!

Download the RSA Conference? 2022 Security Operations Center Findings Report here.

Acknowledgements: Our appreciation to those who made the RSAC SOC possible.

NetWitness Staff

Percy Tucker

Steve Fink

Bart Stump

Dave Glover

Cisco Staff

Jessica Bair Oppenheimer -Cisco SOC Manager

Ian Redden -Team Lead & Integrations

Aditya Sankar / Ben Greenbaum -SecureX & Malware Analytics

Alejo Calaoagan / Christian Clasen -Cisco Umbrella

Dinkar Sharma / Seyed Khadem-Djahaghi -Cisco Secure Firewall

Matt Vander Horst -SecureX Orchestration

Doug Hurd -Partnerships

Hardware Support

Eric Kostlan

Navin Sinha

Zohreh Khezri

Eric Goodwin

Gabe Gilligan and the amazing staff at XPO Digital!

We'd love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Secure on social!

Cisco Secure Social Channels

Instagram
Facebook
Twitter
LinkedIn