Cristian Miron is a Security Engineer currently working for UiPath. His career in IT started 12 years ago and for the past 8 he focused his attention to Security. He is passionate about automation ever since he realised that he can work more efficiently if his tasks are scripted: from handling data sets in phishing campaigns to closing alerts which don’t need human interaction, everything should be done with a robot.

Using RPA for a fast, reliable and repeatable Incident Response process

Incident Response at its core has always been a combination of Management and Technical activities, both with equal importance and urgency. But which are you going to tackle first as an incident occurs? If you’re like us, every nerve in your body will scream for you to get hands on, investigate and mitigate the threat. But your manager might have a different opinion, because if it’s not written down, then it didn’t happen, it is not accounted for and, therefore, it cannot be escalated to upper management. 

So this is where the RPA comes in. We have successfully used it to automate the boring, or the mundane tasks. But why stop there when you can also automate the critical, time essentials activities? 

Our RPA PoC will highlight how you can automate the full incipient management tasks in just under one minute. Immediately after this, it can start a full forensics process, acquisition and investigation in just minutes after an incident has been declared, while also creating a detailed dynamic timeline of all the activities around the incident. Should we also say that all of this is done with just a couple of clicks?

This presentation is co-presented with Andrei Cotaie, Technical Lead, Security Operations at UiPath.