WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • May 10, 2024

Cyber Sleuth: Finding Hidden Connections in Cyber Data

Jennifer Reif

Defenders think in lists, but attackers think in graphs. Map your IT environment with Neo4j to expose hidden exploit pathways before bad actors strike.

Pause
Mute Enter Fullscreen
#1 about 2 min

Introduction to technology advocacy and connected data systems

Background details on technology advocacy, blogging, and continuous learning interests.

#2 about 2 min

Understanding the complexity of cybersecurity domains

How varied categories like threat intelligence and security operations overlap in the industry.

#3 about 1 min

Analyzing attack chains and multi-step exploits

How attackers use incremental steps from phishing emails to backend payloads to compromise systems.

#4 about 3 min

Identifying threat actors and prioritizing defense strategies

Strategies for distinguishing regular users from bad actors and securing external access pathways.

#5 about 1 min

Summarizing data integration challenges in security operations

The necessity of combining multiple data sources to effectively identify security gaps and model scenarios.

#6 about 2 min

Modeling connected data using graph structures

How representing entities and relationships in a graph format provides a holistic view of networks.

#7 about 4 min

Contrasting logic formats between attackers and defenders

Why traditional list-based defense strategies fail against attackers navigating interconnected systems continuously.

#8 about 2 min

Tracing exploitation paths through connected network assets

Visualizing indirect routes malicious actors take to access high-value targets via vulnerable entry points.

#9 about 3 min

Unifying security views with graph data logic

Using indirect relationships to detect anomalies, recommend actions, and create distinct security segments.

#10 about 4 min

Building nodes, properties, and relationships in graph databases

Defining entities, labels, and directional connections with flexible metadata to represent complex domains.

#11 about 2 min

Methods for importing data into graph formats

Utilizing extraction tools, database dumps, and utility libraries to migrate relational data structures.

#12 about 3 min

Creating and retrieving relationships using Cypher queries

Syntax commands for inserting exact graph patterns and retrieving indirect node connections.

#13 about 2 min

Loading database dumps and cleaning raw files

Instructions for importing structures directly into cloud instances or manipulating flat files with utility libraries.

#14 about 7 min

Running security access queries in the database browser

Executing exploratory queries to discover user permissions, group memberships, and multi-hop network paths.

#15 about 3 min

Visualizing network access paths using natural language tools

Transforming technical statements into accessible visual searches for analyzing user access paths.

#16 about 2 min

Applying conditional styling to highlight critical machine assets

Using page rank algorithms to dynamically color visualization nodes based on their network influence score.

#17 about 2 min

Expanding query scope to identify application execution permissions

Identifying remote abilities like executing commands or delegating credentials across accessible devices.

#18 about 3 min

Detecting potential impact and grouping vulnerable communities

Assessing horizontal access scope and applying algorithms to detect structural communities among affected users.

#19 about 3 min

Calculating shortest attack paths to sensitive domain admin groups

Locating single-hop vulnerabilities connecting compromised accounts directly to high-privilege administrative assets.

#20 about 4 min

Exploring graph resources and technical developer events

Promotional call for papers and links to hands-on sandboxes and academy training lessons.

#21 about 3 min

Prerequisite skills for building graph environments

Understanding data models and basic query syntax for querying connected data platforms securely.

#22 about 2 min

Tracking malware spread and infrastructure with relationships

Applying graph pathways to represent malicious domain dependencies and fraudulent infrastructure.

#23 about 3 min

Integrating artificial intelligence and network feature engineering

Utilizing network connectivity features directly in algorithm models to enhance predictive threat analytics.

#24 about 3 min

Overcoming data latency in defensive intelligence platforms

The ongoing necessity of acquiring accurate and timely information to prevent attackers from bypassing systems.

#25 about 2 min

Enforcing integrity constraints during automated data imports

Balancing the inherent flexibility of graph models with specific property validations and restrictions.

#26 about 3 min

Securing analysis platforms via network access controls

Applying role-based limitations and private cloud infrastructures to protect sensitive graph information.

#27 about 3 min

Transitioning from music backgrounds into software engineering

How initial programming classes revealed logic similarities between musical composition and enterprise technology ecosystems.

Matching moments

1:35 min

Overcoming the difficulty of modeling cybersecurity attack graphs

Prof Smoke Prof Smoke · WWC 2025

6:00 min

Generating lateral movement security graphs from raw datasets

Prof Smoke Prof Smoke · WWC 2025

5:08 min

Introduction to graph databases and Cypher

William Lyon · LIVE

2:44 min

Utilizing graph analytics and Neo4j for structural dependencies

Markus Harrer Markus Harrer · WWC 2021

4:05 min

Demonstrating automated defense strategies at prominent cybersecurity conferences

Ben Hopkins +1 · Coffee With Developers

1:51 min

Exploring inference, extraction, and the adversarial threat landscape

Nura Kawa · WWC 2023

More from WeAreDevelopers LIVE

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz thumbnail
5:43
5 days ago

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Node and Package Security thumbnail
1:08:30
5 days ago

WeAreDevelopers LIVE - Node and Package Security

Chris Heilmann, Daniel Cranney, Zbyszek Tenerowicz

WeAreDevelopers LIVE - Streaming HTML thumbnail
1:10:26
12 days ago

WeAreDevelopers LIVE - Streaming HTML

Chris Heilmann, Daniel Cranney, Jad Joubran

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe thumbnail
1:02:34
19 days ago

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe

Chris Heilmann, Daniel Cranney, Justin Halsall, Werner Jeschko, Nicole Jeschko, Mirco Tomić

WeAreDevelopers LIVE - Web Performance in an AI World thumbnail
1:07:59
26 days ago

WeAreDevelopers LIVE - Web Performance in an AI World

Chris Heilmann, Daniel Cranney

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko thumbnail
5:55
about 2 months ago

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko

Chris Heilmann, Daniel Cranney

Upcoming sessions on this topic

Open session

World Congress 2026 North America

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer @ Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

Know Your Enemies: Live Exploit of a PHP Engine Security Breach

Alexandre Daubois

CTO of Les-Tilleuls.coop / Symfony Core Team / PHP & FrankenPHP Core Maintainer

Alexandre Daubois
Open session

World Congress 2026 North America

Reinventing Incident Response with AI Agents and MCP

Jayant Tyagi

Lead Member of Technical Staff @ Salesforce

Jayant Tyagi
Open session

World Congress 2026 North America

GitHub’s Team X-Ray: Your Repository Knows More About Your Team Than Your Team Does

Andrea Griffiths

Senior Developer Advocate

Andrea Griffiths
Open session

World Congress 2026 North America

The Geometry of Incidents: What User-Impact Shapes Reveal About Platform Architecture

Bala Subrahmanyam Kambala

Staff Platform Engineer at Oracle Cloud Infrastructure

Bala Subrahmanyam Kambala

Related videos

From Tables to Graphs in Minutes: Supercharging Kusto Graph Analytics with AI-Powered Development thumbnail
27:31
WWC 2025 • 12 months ago

From Tables to Graphs in Minutes: Supercharging Kusto Graph Analytics with AI-Powered Development

Prof Smoke

Getting under the skin: The Social Engineering techniques thumbnail
43:56
LIVE • almost 6 years ago

Getting under the skin: The Social Engineering techniques

Mauro Verderosa

Checkmate: 5 Real Incidents That Can End a Software Company thumbnail
27:08
WWC Europe 2026 • about 1 month ago

Checkmate: 5 Real Incidents That Can End a Software Company

Jasmin Azemović

Graphs and RAGs Everywhere... But What Are They? - Andreas Kollegger - Neo4j thumbnail
46:51
over 1 year ago

Graphs and RAGs Everywhere... But What Are They? - Andreas Kollegger - Neo4j

Putting the Graph In GraphQL With The Neo4j GraphQL Library thumbnail
47:48
LIVE • almost 5 years ago

Putting the Graph In GraphQL With The Neo4j GraphQL Library

William Lyon

How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR thumbnail
40:38
LIVE • almost 6 years ago

How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR

Anna Bacher

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.