Bill Brenner sets the stage for the day ahead | In the early years of information security, there were some serious technical challenges when it came to detecting and responding to attacks. Gathering data was hard - we had to build parsers and normalize data. Any dropped syslog data was gone forever. Storage was slow and expensive. Database technologies were slow. Queries took forever. Security teams had to build all their detections and reporting from scratch. Today, many of the technical challenges are gone, leaving us more time than ever to focus on the core of the job: detection engineering, threat hunting, and incident response. However, some challenges remain, and many are related to the “people” part of the equation. That’s what we’ll be focusing on in this opening presentation.