A Retrospective on DevSecOps and Cloud IR
summary
Chronicles a real Chaos DB/Juniper notebook compromise path against Cosmos DB discovered via Wiz, explains containment choices and why key rotation waits were defensible, and reports 45 minutes saved during triage and regained four hours overall by using Co-pilot for KQL hunting. Shows a built Grafana dashboard fronting a SaaS tool, describes adoption steps that moved DevSecOps into engineering goals, and concludes Co-pilot suggested KQL queries and Grafana dashboard tied to SaaS tool while noting automation helped but didn’t fully replace human judgment.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 1:48Talk agenda
- 2:53AI promise for cybersecurity
- 3:55Chaos DB in Azure Cosmos DB
- 8:51Incident response containment
- 9:58Copilot for IR analysis
- 13:06KQL queries for vulnerabilities
- 15:13Cloud asset inventory challenges
- 18:27DevSecOps enterprise goals
- 21:41ChatGPT for DevSecOps strategies
- 24:53Leadership buy-in philosophy
- 26:41App integration metrics
- 29:08DevSecOps dashboard
- 30:55AI noise reduction in SAS
- 32:19AI impact on DevSecOps maturity
- 33:24AI time savings
- 33:44Key resources
related talks
30mDevSecOps State of the Union
49mLessons from DevSecOps Trenches
39mSecurity in a DevOps World
30mIntegrating cloud native security into the SRE culture
24mWhy security fails, and how we can solve for it
34mIntegrating Cloud Native Security into the SRE culture
27mDevSecOps Stories
11mKeynote: Like a Magic Eye Illusion: Seeing the Bigger Picture for Cloud-Native S...