Gemini for Security Engineers

Key Takeaways

[Music] [Applause] this is a security engineer let's learn how security Engineers can identify and mitigate security threats with Gemini they need to understand the newest vulnerabilities and find out if they have any mitigations to do based on their Cloud infrastructure and logging they need to know what their threat exposure is and are hoping to use Gemini for Google Cloud to help them take corrective action if needed let's observe this security engineer and their natural habitat as they use Gemini to simplify the task at hand first our security engineer wonders what are the latest threats they should be aware of let's start with a view of the latest thread intelligence from mandiant helpfully gathered all in one place for consumption whoa thousands and thousands of results just for one threat actor our engineer doesn't have time to read all that luckily they can get a quick summary thanks to the AI helper picking one prominent threat the engineer wants to dig deeper but this is just showing a big mess of metadata which is confusing and overwhelming they start with the Gemini generated summary on the sidebar to give them a faster way to understand what this threat actor is trying to do and where the security engineer needs to know if they're vulnerable to any of these attack patterns luckily they can do a plain language search and Chronicle to find out if any of these attacks are hitting their infrastructure well this is both good and bad the good part is that they've got some results without having to navigate the Arcane udm syntax the bad part is that it appears that they had some hits so some crypto mining attacks are going on let's explore this further once again we see our security engineer overwhelmed with information lots of cases lots of Windows lots of Statistics help us Gemini summary you're our only hope hooray it's right here and it shows them exactly what they needed it's time to act now they go directly to the security Command Center for actions to respond to the detected threats oh no they found more Mountains of metadata luckily they've got Gemini here to summarize and give them a quick guide towards mitigation actions summary read and digested it's time for the engineer to unwind with watering their plants what will you [Applause] build