filmov
tv
Hunting Ransomware- Jupyter Notebook, Sysmon, Windows Security Log
Показать описание
Human Operated Ransomware (HORA) threat groups are growing in number and strength every day. Today is Day 10 of our Threat Hunting series and, we will will cover the evolution of, tactics inherent to, and threats associated with HORA. We will provide "quick wins" that you can implement now to protect yourself against this ugly threat. We will mainly focus on what to do if ransomware is running *right now*, along with what to do when ransomware has run and the outlook is bleak. We will show what are the best possible ways to hunt for the probable IOA of ransomware attack and how can you document and run your hunt against your network to identify if you are also under attack.
Encrypting all your files is a ransomware actors' final objective. But when the frantic helpdesk calls start coming in, can you quickly identify all impacted devices? Can you determine if data exfil and extortion are part of the attack? Can you tell if they destroyed your backups? This talk will cover common ransomware gang "hands on keyboard" techniques for stealing your data, disabling defenses, and making your data and devices resistant to recovery. Participants will take away hunt logic which can be employed right away for early detection and rapidly scoping a ransomware compromise.
So watch the full episode and leverage the notebook to strategies your hunt technique.
WATCH BELOW Playlists as well, if you want to make your career in DFIR and Security Operations!!
-------------------------------------------------------------------------------------------------------------------------
📞📲
FOLLOW ME EVERYWHERE-
-------------------------------------------------------------------------------------------------------------------------
✔ Twitter: @blackperl_dfir
Encrypting all your files is a ransomware actors' final objective. But when the frantic helpdesk calls start coming in, can you quickly identify all impacted devices? Can you determine if data exfil and extortion are part of the attack? Can you tell if they destroyed your backups? This talk will cover common ransomware gang "hands on keyboard" techniques for stealing your data, disabling defenses, and making your data and devices resistant to recovery. Participants will take away hunt logic which can be employed right away for early detection and rapidly scoping a ransomware compromise.
So watch the full episode and leverage the notebook to strategies your hunt technique.
WATCH BELOW Playlists as well, if you want to make your career in DFIR and Security Operations!!
-------------------------------------------------------------------------------------------------------------------------
📞📲
FOLLOW ME EVERYWHERE-
-------------------------------------------------------------------------------------------------------------------------
✔ Twitter: @blackperl_dfir
0:24:38
Hunting Ransomware- Jupyter Notebook, Sysmon, Windows Security Log
0:13:42
Threat Hunting using Sysmon | Identify malicious or anomalous activity
1:10:45
Hunting for Malware Network Traffic using Jupyter Notebooks
0:11:30
Hunting for ransomware activities with Advanced Hunting
0:05:35
Threat Hunting Course with Jupyter, Hunting for Defense Evasion- DLL Injection , Part 7
0:30:14
Hunting and Scoping A Ransomware Attack
0:00:52
This Ransomware Caused The Company to Exit the Market
![[21] Malware Lab](https://i.ytimg.com/vi/-7VvMOa1PHg/hqdefault.jpg)
0:04:00
[21] Malware Lab - Windows Sysmon Install
0:39:05
Advanced Incident Detection and Threat Hunting using Sysmon and Splunk Tom Ueltschi
0:08:25
Threat Hunting Course with Jupyter, Hunting for Persistence WMI Eventing , Part 5
0:10:19
Threat Hunting Course with Jupyter, Hunting PowerShell Remote Execution , Part 3
0:12:24
Threat Hunting Course with Jupyter, Hunting for Privilege Escalation , Part 6
0:07:35
Threat Hunting Course with Jupyter, Hunting for Credential Access-LSASS Access, Part 8
0:13:24
Learning Sysmon - Tracking and Blocking File Creation (Video 16)
0:49:46
How threat hunting can transform your security operations
0:17:24
DFIR - Ransomware Attack
0:59:35
Windows logging, Sysmon, and ELK
0:00:31
HELK – Open Source Threat Hunting Platform
1:59:35
Cyber Threat Workshop - 2-17-2022 -Threat Hunting - How to Find Malware Phishing Infrastructure
0:01:00
|| SOLVED || #ALPHV #BlackCat #bzeakde #ransomware #virus - #Remove and #decryption
0:14:48
Threat Hunting Tutorial- Day2
0:30:26
Stay ahead of the game: automate your threat hunting workflows
0:59:14
Faster, Better, AND Cheaper: Improving security operations using open source tools
0:23:00
Sysinternals: System Monitor deep dive (demo) | Sysmon, device, driver, Windows | Microsoft
Комментарии