Gaining Endpoint Log Visibility in ICS Environments - SANS ICS Security Summit 2019

preview_player
Показать описание
Presenter: Michael Hoffman, Principal ICS Security Engineer, Shell

This presentation will discuss the reasons why it is important to gain visibility of logs on industrial control system endpoint devices, and examine different methods to achieve that visibility. We’ll review different architectures and technology constraints involved in moving those logs to centralized IT/OT Security Information and Event Management from an oil and gas perspective.

The annual ICS Security Summit brings together practitioners and leading experts to share ideas, methods, and techniques for defending control system environments. In-depth presentations and interactive panel discussions deliver real-world approaches that work and make a difference for the individuals fighting this fight every day.
  1. SANS Institute
  2. sans institute
  3. information security
  4. cyber security
  5. cybersecurity
  6. information security training
Рекомендации по теме
Gaining Endpoint Log 0:36:55

Gaining Endpoint Log Visibility in ICS Environments - SANS ICS Security Summit 2019

Gaining Endpoint Log 0:36:55

Gaining Endpoint Log Visibility in ICS Environments

Getting Deeper Endpoint 0:26:00

Getting Deeper Endpoint Visibility for Rapid Troubleshooting and Compliance

Collecting Endpoint Logs 0:13:42

Collecting Endpoint Logs with Elastic Agent

How to use 0:01:04

How to use wireshark to monitor websites visited

Threat Centric NAC 0:05:41

Threat Centric NAC - ISE 2.1 and Advanced Malware Protection (AMP)

Hunting for Post-Exploitation 0:32:38

Hunting for Post-Exploitation Stage Attacks with Elastic Stack and the MITRE ATT&CK Framework

Gain Accurate Path 0:01:39

Gain Accurate Path Analysis Visibility with SolarWinds Traceroute NG

Prima Virani: Improving 0:31:18

Prima Virani: Improving endpoint monitoring and visibility with osquery

Cosplay by b.tech 0:00:15

Cosplay by b.tech final year at IIT Kharagpur

Unify endpoint and 0:36:14

Unify endpoint and network telemetry for any SIEM

Using osquery & 0:59:33

Using osquery & MITRE ATT&CK to Provide Analytics for Incident Response and Threat Hunting

Turn Any Endpoint 0:21:03

Turn Any Endpoint Into a Security Sensor with Nozomi Arc

Endpoint Visibility and 0:24:03

Endpoint Visibility and Collection Using Velociraptor

IoT Visibility and 1:02:04

IoT Visibility and Endpoint Analytics Webinar

RDP Forensics without 0:26:06

RDP Forensics without endpoint visibility

7 Hour Endpoint 6:50:07

7 Hour Endpoint Security Course / Watch This To Get GREAT At Endpoint Security/ SOC Level 1 Training

Secrets of SIEM 0:51:04

Secrets of SIEM and Endpoint

Accessing a Localhost 0:02:32

Accessing a Localhost Server on Another Device

End-to-End Security Visibility 1:00:33

End-to-End Security Visibility into Your Environments with Splunk and AWS

How to create 0:04:55

How to create data views and gain insights on Elastic

Extending Network Visibility: 0:39:11

Extending Network Visibility: Down to the Endpoint

endpoint Clinical 0:01:14

endpoint Clinical

hacking every device 0:07:06

hacking every device on local networks - bettercap tutorial (Linux)