Attacks and Suspicious Events Cause Analysis Workflow for Remote and Hybrid Environments

Learn how to build a comprehensive cause analysis workflow for security incidents in a conference session from JNUC 2023. Explore the challenges of securing hybrid work environments where employees split time between office and remote locations, creating multiple entry points for potential cyber attacks. Discover how to integrate Jamf Pro, Jamf Protect, Splunk, Slack, DepNotify, and the open-source incident response tool Aftermath to create an effective security incident response system. Master techniques for tracking down attack sources, analyzing security breaches, and implementing lasting solutions that prevent recurring vulnerabilities. Gain practical insights into developing a security framework that maps incident causes and enables targeted remediation strategies for modern workplace environments.