cyber security on nutanix at nutanix · on the insert tab, click the pictures button. navigate to...
TRANSCRIPT
TO CUSTOMIZE WITH A NEW PICTURE
Delete the current picture, if there is one.
On the Insert tab, click the Pictures button.
Navigate to the image you want to use and select Insert.
Resize the picture to fit the slide, as needed. Hold the Shift key and click and drag a corner.
On the Home tab, click the Arrange button, then Send to Back so the photo is behind the logos, text, and the transparent overlay.
Click the Reset button to reapply the Layout
MAY 2019 | CONFIDENTIAL
Cyber Security on Nutanix at [email protected]
2019
My Story| 2
• Brandon Gagliardi
• Sr. Security Engineer
My 1st Week at Nutanix| 3
• Drink our own champagne.
• Lean IT team.
• Major deliverables in a short time.
| 4”Here’s your home page where you can monitor resources” – Platform team
| 5“…Here’s The Template – This is your environment.”
Infrastructure Created in Minutes for Splunk| 6
• First workload on Nutanix for Corp Cyber Security
• 7 VM’s
• Unique allocations of vCPU & memory per server based on Splunk best practices
• Whole environment stood up in 30minutes.
• (BTW – Dedicated vCPU’s.)
Environment Unexpected Growth| 7
90GiB/day 4 Nodes August 2017
200GiB/day 4 Nodes December 2017*
500GiB/day 8 Nodes April 2018
1TiB/day 12 Nodes October 2018
Fun Stuff Happened Along The Way| 8
What happened to my node? Doh!
Problems Don’t Occur When It’s Convenient| 9
Onboarded 30 New Security AnalystsConcurrent Searches Went Up
| 10
Data Center MigrationsFluxes in Firewall Data (+50% Daily Ingest Spikes)
Time to Remediate and Validate ProblemStart to Finish w/ Distractions:Less than 15 Minutes
Shut VM Down and Give it More Power
Time to Give it More Storage to Handle the New Amounts of Data: No Reboot Required
Upgrade Complete
Workloads Hosted On Nutanix by CyberSec Team To Date
| 16
• Splunk• Rapid7 Console & Scanners• OpenVAS• Phantom• Web Server/IPAM• Skybox Firewall Assurance
• Intsights Threat Intel• Exabeam UBA• Burp Enterprise• Fyde Zero Trust• Kenna Security Connector• HA Proxies• Fos Wiki
TO CUSTOMIZE WITH A NEW PICTURE
Delete the current picture, if there is one.
On the Insert tab, click the Pictures button.
Navigate to the image you want to use and select Insert.
Resize the picture to fit the slide, as needed. Hold the Shift key and click and drag a corner.
On the Home tab, click the Arrange button, then Send to Back so the photo is behind the logos, text, and the transparent overlay.
Click the Reset button to reapply the Layout
Questions?
TO CUSTOMIZE WITH A NEW PICTURE
Delete the current picture, if there is one.
On the Insert tab, click the Pictures button.
Navigate to the image you want to use and select Insert.
Resize the picture to fit the slide, as needed. Hold the Shift key and click and drag a corner.
On the Home tab, click the Arrange button, then Send to Back so the photo is behind the logos, text, and the transparent overlay.
Click the Reset button to reapply the Layout
Automating Containment on Nutanix with Phantom
My Story
• Nick Pierini
• Manager, Security Engineering
• Splunk Phantom user for 3+ years
Nutanix Phantom App Intro| 20
Demo| 21
Questions| 22