IR114 Incident Response Triage: Instrumenting the Environment to Detect Suspicious and Malicious Activity

#1715189: IR114 Incident Response Triage: Instrumenting the Environment to Detect Suspicious and Malicious Activity - Jan 6, 2026

Description:	The Cybersecurity and Infrastructure Security Agency (CISA) is offering a one-hour Incident Response Triage webinar, Instrumenting the Environment to Detect Suspicious and Malicious Activity (IR114). This training is designed for newcomers to Incident Response and explains how instrumentation and telemetry support early detection. Using APT29 (often referred to as “Cozy Bear”) as a case study, the webinar highlights how adversaries operate and how organizations can strengthen visibility. This webinar is open to government employees and contractors across federal, state, local, tribal, and territorial governments, as well as educational and  critical infrastructure partners. Please use your organization email address when registering. Participants will learn how to: -Describe how instrumentation and logging support early detection. -Identify misconfigurations that reduce visibility. -Recognize behavioral indicators of suspicious activity. -Use baselines to distinguish normal from abnormal system behavior.
More info:	https://cisa.webex.com/webappng/sites/cisa/webinar/webinarSeries/register/8baa53e60efd4816b0d98daac4e1ccf1

Description:

The Cybersecurity and Infrastructure Security Agency (CISA) is offering a one-hour Incident Response Triage webinar, Instrumenting the Environment to Detect Suspicious and Malicious Activity (IR114). This training is designed for newcomers to Incident Response and explains how instrumentation and telemetry support early detection. Using APT29 (often referred to as “Cozy Bear”) as a case study, the webinar highlights how adversaries operate and how organizations can strengthen visibility.

This webinar is open to government employees and contractors across federal, state, local, tribal, and territorial governments, as well as educational and  critical infrastructure partners. Please use your organization email address when registering.

Participants will learn how to:

-Describe how instrumentation and logging support early detection.
-Identify misconfigurations that reduce visibility.
-Recognize behavioral indicators of suspicious activity.
-Use baselines to distinguish normal from abnormal system behavior.

More info:

https://cisa.webex.com/webappng/sites/cisa/webinar/webinarSeries/register/8baa53e60efd4816b0d98daac4e1ccf1

Date added	Dec. 8, 2025, 4:35 a.m.
Source	Webex
Subjects	Incident Response / Incident Handling PodCasts / Webcast / Webinar / eSummit / Virtual Event etc.
Venue	Jan. 6, 2026, midnight - Jan. 6, 2026, midnight