Why start investigations from the network

Guest:

• Raja Mukerji, Co-Founder & Chief Scientist, Extrahop
• Rafal Los, VP of Client Relations and Strategic Initiatives, Extrahop

Topics:

• Is Network Detection and Response (NDR) coming back after being shoved to the side by EDR a bit? Is this for real?
• What's the value proposition of NDR in 2026, because some people still don't understand it? How does NDR apply to the world of WFH, cloud/SaaS, encryption, high bandwidth, etc?
• Is the value of NDR the same, or different, when it comes to public (or private) cloud?
• How does NDR fill visibility gaps that identity and agent-based solutions cannot?
• What does NDR offer that built-in cloud security tooling (as of right now) does not? Would you call NDR a key cloud security control?
• Does NDR help with shadow AI?
• NDR elephant in the room is sometimes cost. How does cost change the value prop when compared to on-premise or physical infrastructure?

Resources:

• Video version
• EP267 AI SOC or AI in a SOC? Cutting Through Hype, Pricing Models, and SIEM Detection Efficacy with Raffy Marty
• EP113 Love it or Hate it, Network Security is Coming to the Cloud
• EP154 Mike Schiffman: from Blueboxing to LLMs via Network Security at Google
• EP115 How to Approach Cloud in a Cloudy Way, not As Somebody Else's Computer?
• EP263 SOC Refurbishing: Why New Tools Won't Fix Broken Processes (Even With AI)
• "The GC+CISO Connection Book" book