Security teams have spent years improving detection speed, but the steps that follow an alert are often still fragmented across people, systems, and manual processes. Analysts validate the event, identify endpoints, initiate collection, wait for evidence, process it, search it, and then move findings back into the incident-response workflow.
In this webinar, we examine how FTK Central, FTK Connect, APIs, SOAR integrations, endpoint agents, and ARMOUR can work together to move from security alert to defensible evidence with dramatically less manual intervention. We walk through the automation architecture, examine different workflow triggers, demonstrate an alert-driven investigation, and show where human oversight remains essential.
Learning Objectives:
Agentic AI and forensic automation create an opportunity to collapse that gap.
In this webinar, we examine how FTK Central, FTK Connect, APIs, SOAR integrations, endpoint agents, and ARMOUR can work together to move from security alert to defensible evidence with dramatically less manual intervention. We walk through the automation architecture, examine different workflow triggers, demonstrate an alert-driven investigation, and show where human oversight remains essential.
Learning Objectives:
- Describe how detection systems integrate with forensic collection and investigation workflows to streamline incident response.
- Identify how FTK Connect triggers, APIs, schedules, and watch folders can be used to automate evidence collection and processing workflows.
- Distinguish agentic AI decision-making through ARMOUR from traditional rule-based forensic automation.
- Determine the appropriate sequence of steps in an automated incident-response workflow, from security alert to forensic evidence and investigative findings, while maintaining human oversight.
LIVE ATTENDEES: Earn 0.1 CEU*
As an IACET Accredited Provider, BNP Media offers IACET CEUs for its learning events that comply with the ANSI/IACET Continuing Education and Training Standard. Participants completing this course may be eligible to receive Continuing Professional Education (CPE) credits toward ASIS recertification. To be eligible for CE credit and a certificate of completion, live attendees must attend the webinar for a minimum of 45 minutes and successfully complete a required 4-question post-event assessment associated with the webinar. Credit and certificates will be issued automatically upon successful completion of these requirements. CEUs are not offered for on-demand viewing of this webinar.
Sponsored by: