This discussion with Amanda Berlin, Lead Instant Detection Engineer at Blumira. The focus of the conversation is on utilizing Sysmon for threat hunting and testing detections in cybersecurity. Amanda, a seasoned cybersecurity professional, shares her expertise in detecting malicious behavior in the wild through practical examples. The discussion covers anomaly detection, the utilization of various tools (with links provided in the video description), and the importance of understanding threat detection in a real-world context.

[ Ссылка ]

Links mentioned in the video
- [ Ссылка ]
- [ Ссылка ]
- [ Ссылка ]
- [ Ссылка ]
- [ Ссылка ]
- [ Ссылка ]

Sending Windows Event Logs to Graylog With NXLOG
[ Ссылка ]

Connecting With Us
---------------------------------------------------
+ Hire Us For A Project: [ Ссылка ]
+ Tom Twitter 🐦 [ Ссылка ]
+ Our Web Site [ Ссылка ]
+ Our Forums [ Ссылка ]
+ Facebook [ Ссылка ]
+ GitHub [ Ссылка ]
+ Discord [ Ссылка ]

Lawrence Systems Shirts and Swag
---------------------------------------------------
►👕 [ Ссылка ]


AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store
🛒 [ Ссылка ]

UniFi Affiliate Link
🛒 [ Ссылка ]

All Of Our Affiliates that help us out and can get you discounts!
🛒 [ Ссылка ]

Gear we use on Kit
🛒 [ Ссылка ]

Use OfferCode LTSERVICES to get 10% off your order at
🛒 [ Ссылка ]

Digital Ocean Offer Code
🛒 [ Ссылка ]

HostiFi UniFi Cloud Hosting Service
🛒 [ Ссылка ]

Protect you privacy with a VPN from Private Internet Access
🛒 [ Ссылка ]

Patreon
💰 [ Ссылка ]


CHAPTERS:
0:00 - Introductions
5:19 - Cyber Threat Defense Strategies
7:38 - Understanding Sysmon Essentials
13:57 - Exploring Sysmon Advantages
15:29 - Standard Deviation Explained
18:41 - Adversary Emulation Techniques
24:00 - Sysmon Use Case: Scenario 1
30:47 - Sysmon Use Case: Scenario 2
36:43 - Sysmon Use Case: Scenario 3
44:06 - Exchange Server Compromise Case Study
52:53 - Enhancing Detection with Testing
55:30 - Insights from Incident Response
57:21 - Conclusion and Thanks

свернуть