Tales from the Network Threat Hunting Trenches & AI Hunter Demo

  Рет қаралды 17,977

Black Hills Information Security

Black Hills Information Security

Күн бұрын

Пікірлер
@temptemp961
@temptemp961 3 жыл бұрын
GCIH brought me here. Page 13 to be exact.
@runout74
@runout74 Жыл бұрын
For me it's book 4, page 12. Great course!
@lordperilous
@lordperilous 5 жыл бұрын
Nice presentation! 43 min into it on the compromised servers slide- port 2222 is also pretty popular for SBO (Security by Obscurity) for SSH. :)
@Zubi_zoobster
@Zubi_zoobster 6 жыл бұрын
Great talk. V informative for anyone in infosec
@ingjparias
@ingjparias Жыл бұрын
How does using RITA compare with having a firewall with all bells and whistles (Palo, Cisco and the like that claim to be able to pickp c2 beaconing) plus an EDR in the environment? What are the GAPs that RITA might be able to cover? John mentions in the cast to try and run dnscat or other tools, we might give these a try, but wouldn't our EDR pick these up?
@bhagyalakshmi1053
@bhagyalakshmi1053 Жыл бұрын
Ajint details explain Potcal
@jagszubair1256
@jagszubair1256 5 ай бұрын
GCIH book 504.4 public facing and drive by attack by joshua writ broght me here
BHIS | Looking for Needles in Needlestacks w/ Threat Hunting Toolkit | Derek Banks & Ethan Robish
1:48:55
BHIS | Looking for Needles in Needlestacks w/ Threat Hunting Toolkit | Derek Banks & Ethan Robish
Black Hills Information Security
Рет қаралды 4,5 М.
Attack Tactics 7: The logs you are looking for
54:55
Attack Tactics 7: The logs you are looking for
Black Hills Information Security
Рет қаралды 8 М.
UFC 310 : Рахмонов VS Мачадо Гэрри
05:00
UFC 310 : Рахмонов VS Мачадо Гэрри
Setanta Sports UFC
Рет қаралды 1,2 МЛН
When you have a very capricious child 😂😘👍
00:16
When you have a very capricious child 😂😘👍
Like Asiya
Рет қаралды 18 МЛН
СКАНДАЛЬНЫЙ бой Али, когда в ринге ему противостояли сразу ДВОЕ #shorts
01:12
СКАНДАЛЬНЫЙ бой Али, когда в ринге ему противостояли сразу ДВОЕ #shorts
BalcevMMA_BOXING
Рет қаралды 1,2 МЛН
Try this prank with your friends 😂 @karina-kola
00:18
Try this prank with your friends 😂 @karina-kola
Andrey Grechka
Рет қаралды 9 МЛН
Threat Hunting via Sysmon - SANS Blue Team Summit
51:01
Threat Hunting via Sysmon - SANS Blue Team Summit
SANS Institute
Рет қаралды 63 М.
Threat Hunting in Security Operation - SANS Threat Hunting Summit 2017
27:39
Threat Hunting in Security Operation - SANS Threat Hunting Summit 2017
SANS Digital Forensics and Incident Response
Рет қаралды 41 М.
ACM Webcast: Network Threat Hunting Runbook
56:03
ACM Webcast: Network Threat Hunting Runbook
Active Countermeasures
Рет қаралды 4,3 М.
Attack Tactics: Part 1
55:25
Attack Tactics: Part 1
Black Hills Information Security
Рет қаралды 16 М.
SANS Webcast: Effective (Threat) Hunting Techniques
54:01
SANS Webcast: Effective (Threat) Hunting Techniques
SANS EMEA
Рет қаралды 29 М.
RITA - Finding Bad Things on Your Network Using Free and Open Source Tools
1:08:13
RITA - Finding Bad Things on Your Network Using Free and Open Source Tools
Black Hills Information Security
Рет қаралды 28 М.
The Basics of the Threat Hunting Process with Security Weekly and LogRhythm
58:44
The Basics of the Threat Hunting Process with Security Weekly and LogRhythm
LogRhythm SIEM
Рет қаралды 10 М.
Incident Response: Malware Investigations | Virtual Ninja Training with Heike Ritter
33:56
Incident Response: Malware Investigations | Virtual Ninja Training with Heike Ritter
Microsoft Security Community
Рет қаралды 8 М.
Threat Hunting via DNS with Eric Conrad - SANS Blue Team Summit 2020
54:56
Threat Hunting via DNS with Eric Conrad - SANS Blue Team Summit 2020
SANS Cyber Defense
Рет қаралды 23 М.
Introduction to Zeek Log Analysis w/ Troy Wojewoda
59:50
Introduction to Zeek Log Analysis w/ Troy Wojewoda
Black Hills Information Security
Рет қаралды 1 М.
UFC 310 : Рахмонов VS Мачадо Гэрри
05:00
UFC 310 : Рахмонов VS Мачадо Гэрри
Setanta Sports UFC
Рет қаралды 1,2 МЛН