Speakers: Mario Kalde and Phillip Hallmann

Artificial intelligence is changing cybersecurity on both sides. Attackers can analyze information faster, prepare more targeted social engineering attacks, modify scripts and tools, or automatically use the results of previous attack steps to support further actions and attack chains. At the same time, incident response and digital forensics teams have new opportunities to analyze and assess security incidents more quickly.

During an active incident in particular, a large amount of different information is generated within a short period of time. Logs from various systems, network connections, processes, user activity, files, and other forensic artifacts need to be analyzed and correlated. AI can support this process by structuring ...