While offensive security often gets the spotlight, defensive operations form the crucial backbone that keeps enterprise environments, manufacturing facilities, and connected automotive networks safe from active exploitation.
In this episode, host Vasili Kutscherjavenko sits down with ETAS cybersecurity experts Wolfgang Neufeld and Rene Reuter for an in-depth look at Enterprise Blue Teaming. Wolfgang and Rene break down the fundamentals of defensive security engineering, including continuous monitoring, threat hunting, incident response strategies, and SIEM/SOC optimization. They also share practical advice on how security teams can build robust detection rules to identify zero-day threats and mitigate attacks across complex corporate and shop-floor infrastructures.
Whether you are an enterprise SOC analyst, incident responder, or infrastructure security lead, this episode offers a practical blueprint for hardening defensive security postures.
In this episode:
00:00 - Introduction to Enterprise Blue Teaming
03:40 - The Core Role of Defenders: Monitoring, Detection & Response
09:15 - Proactive Threat Hunting vs. Reactive Alerting in the Enterprise
15:30 - SIEM, SOC Workflows, and Optimizing Incident Detection Rules
22:10 - Safeguarding Shop-Floor Operations & Connected Infrastructure
28:45 - Building Resilient Incident Response Plans for Zero-Day Threats
34:20 - Key Takeaways for Strengthening Defensive Security Postures
If you enjoyed the Red Teaming episode, you’ll definitely want to check out this one as well!
Thanks for listening!
