Attackers are increasingly using AI to accelerate reconnaissance, discover vulnerabilities, abuse trusted identities and automate attack activity. As attacks become more autonomous, they can move across identities, networks, cloud, and SaaS faster than security teams can manually connect the signals.
For defenders, the challenge is no longer simply seeing more. It is understanding attacker behaviour across the hybrid environment, knowing what matters now, and acting before an attack creates impact.
What you’ll learn
Explore how security teams can:
- Defend against increasingly autonomous, agentic AI-driven attacks
- Detect attacker behaviour across AWS and hybrid environments
- Connect activity across network, identity, cloud and SaaS
- Identify attack progression as adversaries move between domains
- Prioritise the signals that require attention
- Investigate and respond with greater speed and confidence
Put it into practice
The second half of the session moves from discussion to investigation.
In a hands-on, blue-team exercise using the Vectra AI Platform, you’ll follow an attacker across a hybrid environment, connect activity across multiple domains and build the attack story as it unfolds.
The goal: Connect the signals. Understand how the attack is progressing. Determine what matters and where to act.
Agenda
2:00 PM | Welcome and AWS introduction
2:10 PM | Defending against agentic AI-driven attacks with AWS and Vectra AI
Explore the changing threat landscape and what it means for hybrid defence:
- How agentic AI is changing attacker speed and operations
- Defending against increasingly autonomous attacks
- Detecting attacker behaviour in AWS with Vectra NDR
- AWS integrations and operationalization
- Extending detection, investigation and threat-hunting across the hybrid environment
2:50 PM | Break
3:00 PM | Blue-team workshop: Follow the attacker across the hybrid environment
Put the approach into practice through a hands-on investigation:
- Investigate attacker movement across on-premises networks, Entra ID, AWS and Microsoft 365
- Connect behavior across network, identity, cloud and SaaS
- Follow attack progression across domains
- Prioritize what matters and determine how to respond
4:50 PM | Wrap-up and Q&A
Explore how AI is changing attacker speed and behavior, and how security teams can detect activity across AWS and hybrid environments, connect signals across domains, and accelerate
Who should attend
This workshop is designed for Singapore Defence security leaders and practitioners responsible for:
- Security operations
- Threat detection and investigation
- Cloud and hybrid security
- Incident response
- Cyber resilience
What to bring
Please bring your own Windows, Mac or Linux device with Chrome or Firefox installed, capable of accessing the public internet.
Places are limited to keep the session hands-on and interactive.
Location
Address: Amazon Web Services Singapore Private Limited. Level 2, East Tower, 2 Central Boulevard, IOI Central Boulevard Towers, Singapore 018916
Room: SIN18 05.103 Shiretoko Casual AV/VC Restricted
