Threat Hunting in Active Directory Environments

preview_player
Показать описание
In financial institutions, complex environments and the constant threat of attack by sophisticated actors is typical. Such environments demand insights both in real-time and historical all at scale.

In this video, we’ll show a brief example of threat hunting using Reveal(x) and test the hypothesis: “We will see remote service creation in the PC subnet over the last 7 days.” We’ll explore the Microsoft Remote Procedure Call (MSRPC) protocol and the CreateServiceW function to hunt for indicators of lateral movement or other advanced attack stages like persistence.

#Cybersecurity #FinancialServices #ThreatHunting
  1. ExtraHop
  2. ExtraHop
  3. Cybersecurity
  4. NDR
  5. Network Detection and Response
  6. Cyberattack
Рекомендации по теме
Threat Hunting in 0:37:15

Threat Hunting in Active Directory Environment

Threat Hunting in 0:05:17

Threat Hunting in Active Directory Environments

Active Directory Advanced 0:10:07

Active Directory Advanced Threat Hunting - Folge 6 - Finden des AD in einem unbekannten Netzwerk

BSidesCharm 2017 T208 0:45:05

BSidesCharm 2017 T208 Detecting the Elusive Active Directory Threat Hunting Sean Metcalf

Active Directory Advanced 0:09:17

Active Directory Advanced Threat Hunting - Folge 5 - Active Directory mit BloodHound visualisieren

Active Directory Advanced 0:07:40

Active Directory Advanced Threat Hunting - Folge 1 - Vorbereitung für Kali Linux auf Windows 11

Threat Hunting in 0:37:15

Threat Hunting in Active Directory Environment Black Hat - Asia - Singapore - 2021

ADTimeline - Threathunting 0:27:33

ADTimeline - Threathunting with Active Directory Data

Think You're Too 0:56:48

Think You're Too Small To Get Hacked? Think Again!

Hunting backdoors in 0:31:28

Hunting backdoors in Active Directory Environment

Threat Hunting in 0:28:05

Threat Hunting in the Microsoft Cloud: Times They Are a-Changin' | John Stoner

Getting Started With 0:58:44

Getting Started With Threat Hunting Basics

BSidesCharm 2017 T208 0:45:05

BSidesCharm 2017 T208 Detecting the Elusive Active Directory Threat Hunting Sean Metcalf.mp4

Framing Threat Hunting 0:22:29

Framing Threat Hunting in the Enterprise - SANS Threat Hunting Summit 2017

Active Directory Threat 0:51:02

Active Directory Threat Hunting: Keep Your Organization in Business

BSidesCharm 2017 T208 0:45:05

BSidesCharm 2017 T208 Detecting the Elusive Active Directory Threat Hunting Sean Metcalf

Active Directory Advanced 0:07:13

Active Directory Advanced Threat Hunting - Folge 7 - Erweiterte Überwachungsrichtlinienkonfiguration...

Threat Hunting via 0:51:01

Threat Hunting via Sysmon - SANS Blue Team Summit

Threat Hunting Explained 0:38:06

Threat Hunting Explained By Microsoft's Elite Hunter

Threat hunting with 0:04:32

Threat hunting with Microsoft 365 Defender

Knocking on Clouds 0:38:43

Knocking on Clouds Door: Threat Hunting Powered by Azure AD Reports and Azula

Weaponizing Active Directory 0:58:28

Weaponizing Active Directory

ReConnect - (h)Active 0:32:30

ReConnect - (h)Active Directory & Automation Engine

Active Directory Advanced 0:08:12

Active Directory Advanced Threat Hunting - Folge 4 - Kali Linux mit BloodHound erweitern

join shbcf.ru