Explore sessions and plan your time at RSAC™ 2026 Conference using the Full Agenda. Visit Create Your Schedule for details on favoriting vs. reserving a seat (when available), and how to secure your spot before the line closes 5 minutes prior to any session onsite.
 
See some amazing sessions you’d like to attend but need to upgrade your pass? Learn how.
Back to Session CatalogBack to Session Catalog
Flush Worthy or Fight Ready? Catching Attackers in SaaS Logs! - [ANI-W01]
  • Wednesday, Mar 258:30 AM - 9:20 AM PDT
    Moscone West 2020
    Reserved Seating
Ever felt SaaS logs are useless? This talk will expose 10 outrageous logging fails used by attackers to hide in plain sight: missing data, nonsense events, vanishing trails, and more. From M365 & Salesforce to Copilot & Gemini, each example will show the investigation roadblocks it creates, followed by enrichments, correlations and tricks to turn broken logs into detections and catch attackers.
Seminar Agenda:

This session was developed collaboratively with Ofer Maor, CTO, Mitiga

Additional Information: This presentation is being delivered on behalf of Ofer Maor. The speaker is representing their views and materials with permission.

Session Participant(s)

Type/Format: Track Session
Topic/Track: Analytics & Intelligence, Incident Management
Pass Requirement: All AccessCISO Boot CampCyber Leaders ForumeFG All AccessESAFMedia: Press/AnalystSpeaker
Session Classification: Advanced—Technical
Recording Status: Available On Demand