Koen Vanhees holds a master in electronics, but soon in his career his passion moved to Linux, scripting and automation.  Later on, he worked as a Unix consultant in an IAM project for one of Belgium’s biggest banks, and steadily his passion for security grew massively.  He currently holds a number of certificates (OSCP, GWAPT, GCFE, GMON) and as a security engineer at Cegeka he became an expert in a wide range of fields: security monitoring digital forensics, incident management, penetration testing, vulnerability management… 

Nowadays he acts as the Security Operations Manager in Cegeka’s SOC, being responsible for the proper operation of the team in all its facets and to develop a long term technical security strategy for Cegeka and its customers.

Machine Learning and Advanced Analytics in Today’s Cyber Security

With the increased amount of data, complexity and expectations, standard SIEM technology is no longer sufficient for proper and efficient detection and response.  Nowadays the expectations of a SIEM go beyond reporting and alerting: an open API is just as important.  At Cegeka we use our Big Data SIEM as the primary collection tool for logs, evidence and enrichment data, but we use Python and open source tools for the more challenging and innovative tasks. 

In this presentation we will show how we glue python, jupyter, automation and machine learning together in an environment that’s ready for the future challenges for a SOC, where data and insight are key and go beyond the traditional mindsets.