Threat Hunting with Network Flow - SANS Threat Hunting Summit 2017
Рет қаралды 19,745
@shanecherniss 4 жыл бұрын
Nice presentation on beginning to understand the concept of Netflow. It failed to deliver on the content in the description: The focus of this presentation will be on how to incorporate network flow analysis into your threat hunting toolkit. We will cover topics such as anomaly discovery versus signature matching, IP expansion, longitudinal analysis of threat actors, how network flow relates to the Cyber Kill Chain, and where network flow analysis should sit in the threat hunting cycle. We will look at real world examples of the effects of these techniques in discovering malicious actors on networks.
@suknow2008 4 жыл бұрын
This is really well done in terms of explaining flow for hunting
@Ben_79 3 жыл бұрын
I hope I can watch/listen to it later but I'll have to deal with the echoing ring. This is not against the presenter but the audio could have been better.
@AlainaD2003 5 жыл бұрын
Great presentation.
@osmaster3327 4 жыл бұрын
Great.Thank you.
@ankury4762 2 жыл бұрын
Cool
@adamwarowny4836 4 жыл бұрын
Same shit as everywhere. Same diagams, same nothing-giving examples.
SANS Digital Forensics and Incident Response
Рет қаралды 9 М.
SANS Digital Forensics and Incident Response
Рет қаралды 15 М.
Daniel LaBelle
Рет қаралды 150 МЛН
Двое играют | Наташа и Вова
Рет қаралды 48 МЛН
Black Hills Information Security
Рет қаралды 18 М.
SANS Digital Forensics and Incident Response
Рет қаралды 120 М.
SANS Digital Forensics and Incident Response
Рет қаралды 4,9 М.
SANS Digital Forensics and Incident Response
Рет қаралды 20 М.
Active Countermeasures
Рет қаралды 1,7 М.