Conf42 Incident Management 2023

Schedule, Lineup & RSVP ➤ https://www.conf42.com/im2023 Join Discord ➤ https://discord.gg/DnyHgrC7jC Upcoming CFPs ➤ https://www.papercall.io/events?cfps-scope=&keywords=conf42 0:00 Sponsors and Partners security 2:33 Christopher Haller ai 3:05 Christine Yen 3:52 Joshua Arvin Lat & Sophie Soliven 4:22 Anurag Gupta 4:56 Mahdi Jelodari lessons learned 5:33 Paige Cruz 6:09 Andre Carvalho culture 6:43 Einat Mahat 7:15 Tanya Janca 7:52 Dor Amram 8:48 thank you, join Discord ➤ https://discord.gg/DnyHgrC7jC

Read the abstract ➤ https://www.conf42.com/Incident_Management_2023_Christopher_Haller_atomic_red_team_threat_actors Other sessions at this event ➤ https://www.conf42.com/im2023 Join Discord ➤ https://discord.gg/DnyHgrC7jC Reach out to Chris ➤ chris.haller@strongcrypto.com Chapters 0:00 intro 2:08 preamble 2:41 agenda 3:00 who is chris 5:18 the problem 8:05 knowns matrix 9:41 a solution 12:09 mitre att&ck 13:32 procedures 14:40 atomic red team 18:02 breach attack simulation (on a budget) 19:52 atomic test #22 - winpwn - powersharppack - seatbelt 21:30 atomic test #3 - dump active directory database with ntdsutil 23:18 conclusion 24:36 questions?

Read the abstract ➤ https://www.conf42.com/Incident_Management_2023_Christine_Yen_sre_observability_building_llms Other sessions at this event ➤ https://www.conf42.com/im2023 Join Discord ➤ https://discord.gg/DnyHgrC7jC Honeycomb Blogpost about LLMs ➤ https://www.honeycomb.io/blog/hard-stuff-nobody-talks-about-llm Chapters 0:00 intro 2:08 preamble 2:34 magic of llms llms 3:39 - like apis we know and love 7:43 - even more unpredicability 9:03 - how do we define "correct"? observability 10:36 about 11:48 - what's in the box 14:20 - endless feedback loops 16:01 why believe me? query assistant 16:18 - timeline 16:31 - goals 19:14 laws of building on llms 20:06 how do we go forward? instrumentation 21:24 instrumentation for llms 25:01 emerging behaviors 28:06 a truth for llms 28:34 service level objectives 29:00 slos: a quick definition 30:06 slos for developing with llms 32:07 from others in the wild 32:20 duolingo 33:34 intercom 35:01 so in the end: 35:38 thanks!

Read the abstract ➤ https://www.conf42.com/Incident_Management_2023_Joshua_Arvin_Lat_Sophie_Soliven_automation_strategies Other sessions at this event ➤ https://www.conf42.com/im2023 Join Discord ➤ https://discord.gg/DnyHgrC7jC Chapters 0:00 intro 2:08 preamble 2:30 about sophie and joshua 3:27 opening case 3:50 let's define incident 4:26 managing incidents 6:13 automation strategies 7:16 chatbots 8:02 pragmatic automation 9:34 leverege existing tools 10:52 enhance incident management with ai 11:40 ai-powered root cause analysis 13:07 automated remediation 14:13 automated tagging 14:51 ai-powered monitoring and alerting 15:37 accelerate documentation 16:26 that's it, thank you!

Read the abstract ➤ https://www.conf42.com/Incident_Management_2023_Anurag_Gupta_generative_ai_fix_runbooks Other sessions at this event ➤ https://www.conf42.com/im2023 Join Discord ➤ https://discord.gg/DnyHgrC7jC Reach out to Anurag ➤ anurag@shoreline.io Chapters 0:00 intro 2:08 preamble 3:19 shoreline demo 10:15 reach out, thanks!

Read the abstract ➤ https://www.conf42.com/Incident_Management_2023_Mahdi_Jelodari_it_training_generative_ai Other sessions at this event ➤ https://www.conf42.com/im2023 Join Discord ➤ https://discord.gg/DnyHgrC7jC Book a Demo ➤ https://share-eu1.hsforms.com/1U_25FyFUQFacn3AjcUuDYAfng93 Chapters 0:00 intro 2:08 preamble 2:38 about incident management 3:30 about uptime labs 4:54 focus on people and processes 5:31 immersive solution 7:07 critical im skills 7:46 demo 16:45 generative ai 17:21 book a demo

Read the abstract ➤ https://www.conf42.com/Incident_Management_2023_Paige_Cruz_no_place_like_production Other sessions at this event ➤ https://www.conf42.com/im2023 Join Discord ➤ https://discord.gg/DnyHgrC7jC Chapters 0:00 intro 2:08 preamble 2:42 career start 4:47 unstructured logs 5:02 need for structured logs 5:21 about traefik 5:36 the stack - pre/post incident 6:14 #justsrethings the change 7:04 foolproof plan 9:26 the incident 12:49 #hugops 13:47 the next day 14:37 incident review 17:31 learnings 22:16 we all test in prod 22:28 thanks!

Read the abstract ➤ https://www.conf42.com/Incident_Management_2023_Andre_Carvalho_insights_through_reports Other sessions at this event ➤ https://www.conf42.com/im2023 Join Discord ➤ https://discord.gg/DnyHgrC7jC Chapters 0:00 intro 2:08 preamble 2:44 agenda incident management reports 3:25 - incident cycle 5:06 - role & key metrics 6:46 beyond summaries 7:53 analyzing incident data 9:36 identyfying patterns and trends 10:51 prioritizing development efforts 11:41 leveraging insights for improvement 12:27 customer experience impact 13:15 efficient resource allocation 14:52 resource allocation benefits 15:24 revolutionizing incident reaction 16:42 thank you

Read the abstract ➤ https://www.conf42.com/Incident_Management_2023_Einat_Mahat_oncall_heroes_effective_practices Other sessions at this event ➤ https://www.conf42.com/im2023 Join Discord ➤ https://discord.gg/DnyHgrC7jC Reach out to Einat ➤ einat.mahat@gmail.com Chapters 0:00 intro 2:08 ownership and power 2:25 with great power comes great responsibility 2:49 about einat 3:41 agenda on-call 4:27 - sidekicks 5:12 - routine 5:47 - expectations 6:12 - odyssey 7:20 proactive / try to prevent 7:49 show up! 8:21 triage tactics 8:58 mitigate or resolve 9:25 investigate 9:58 lessons learned per incident 10:35 prevention protocols 11:07 leadership roles 11:47 prevent burnout 12:44 supportive on-call culture 14:03 embrace the hero within 14:53 build your league 15:43 thanks!

Read the abstract ➤ https://www.conf42.com/Incident_Management_2023_Tanya_Janca_incident_response_developers Other sessions at this event ➤ https://www.conf42.com/im2023 Join Discord ➤ https://discord.gg/DnyHgrC7jC We Hack Purple Community ➤ https://community.wehackpurple.com/ Chapters 0:00 intro 2:08 preamble 4:17 about tanya janca 5:12 what is incident response? 5:46 security incident or event? 6:40 ⚠️ trigger warning 7:14 your org needs its apps secured 7:56 security incidents 8:11 your role during an incident 25:16 talk to the appsec team! 26:06 resources 26:48 #cybermentoringmonday 27:36 we hack purple community 28:04 join the semgrep community 28:37 resources: me!!!! 29:09 thank you!

Read the abstract ➤ https://www.conf42.com/Incident_Management_2023_Dor_Amram_rise_crisis_growth_improvement Other sessions at this event ➤ https://www.conf42.com/im2023 Join Discord ➤ https://discord.gg/DnyHgrC7jC Chapters 0:00 intro 2:08 preamble 4:38 about dor 5:04 how the 'storm' will affect your team? 5:30 how resilient your team is? 6:13 1. growth culture 15:03 supportive environment 17:17 space for experimentation 20:30 empower champions 25:23 recap of 1. 26:57 2. handle the incident 27:09 identify the incident 27:52 activate response team 28:41 containment 29:20 investigate root cause 30:09 restore and recover 30:39 communicate with stakeholders 31:44 recap of 2. 33:06 3. rise 33:45 post-mortem 36:18 pre-mortem 38:00 increase resiliency 42:22 share your knowledge 43:05 recap of 3. 44:22 conclusion 45:39 thank you