Threat Hunting Course with Jupyter, Hunting PowerShell Remote Execution , Part 3

Показать описание

Threat hunting is the practice of proactively searching for cyber threats that are lurking undetected in a network. Cyber threat hunting digs deep to find malicious actors in your environment that have slipped past your initial endpoint security defenses. In this course we will discuss how Jupyter Notebook or Jupyter Lab can be useful for doing Threat Hunt.

This is Part-3 of this full series, where we have explained hunting against Remote PowerShell execution. Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. In addition, it can be used to execute code remotely via Windows Remote Management (WinRM) services. Therefore, it is important to understand the basic artifacts left when PowerShell is used to execute code remotely via a remote powershell session.

So watch the full Episode if you want to become Master in Threat Hunt and want to operationalize it using Jupyter Notebook.

WATCH BELOW episodes as well as a continuation of this series
-------------------------------------------------------------------------------------------------------------------------

📞📲
FOLLOW ME EVERYWHERE-
-------------------------------------------------------------------------------------------------------------------------
✔ Twitter: @blackperl_dfir

🙏Credits:
-------------------------------------------------------------------------------------------------------------------------
I would like to THANKS a bunch to Roberto Rodriguez and Jose Rodriguez for coming up with the Threat Hunter Playbook and awesome Mordor Dataset!!
👉Please follow them on twitter- @Cyb3rWard0g, @Cyb3rPandaH

BlackPerl

Рекомендации по теме

Комментарии

can you share the the url used to download the files from github?

olatunjiosunji

Threat Hunting Course with Jupyter, Hunting PowerShell Remote Execution , Part 3

Threat Hunting Course with Jupyter, All Prerequisites covered, Part 1

Threat Hunting Course- Day 8, Hunt with Jupyter Notebook

Threat Hunting Course with Jupyter, Hunting for Service Creation , Part 4

Threat Hunting Course with Jupyter, Hunting for Defense Evasion- DLL Injection , Part 7

Threat Hunting Course with Jupyter, Hunting PowerShell Remote Execution , Part 3

Threat Hunting Course with Jupyter, Hunting for Credential Access-LSASS Access, Part 8

Threat Hunting Course with Jupyter, Hunting for Privilege Escalation , Part 6

Threat Hunting Course with Jupyter, Hunting for Lateral Movement, Part 10

Enterprise Threat Hunting Using Jupyter Notebooks- Ross Burke - Hou.Sec.Con 2022

Threat Hunting Course with Jupyter, Hunting for Persistence WMI Eventing , Part 5

Threat Hunting Course with Jupyter, Hunting for Discovery- SAM Registry Hive, Part 9

Threat Hunting Course with Jupyter, Hunting PowerShell execution , Part 2

All About Jupyter Notebooks and Hunting in Microsoft Sentinel

Jupyter Notebooks for Cybersecurity Analysis

Threat hunting with Azure Sentinel & Jupyter Notebooks

Jupyter Notebooks and Pre-recorded Datasets for Threat Hunting - SANS THIR Summit 2019

Threat Hunting Course Free- Day 9, Hunt on Cloud, AWS

Threat Hunting Summit 2019: Jupyter Notebook Server Setup

Threat Hunting Training | April 2023

Day 9 of Learning Cyber Threat Hunting

Threat Hunting Tutorial- Day2

Building ML-based Threat Hunting System from Scratch

MSTICPy 2.0: What’s New in Microsoft’s Jupyter and Python Security Toolset

HELK – Open Source Threat Hunting Platform