filmov
tv
Threat Hunting via DNS with Eric Conrad - SANS Blue Team Summit 2020
Показать описание
DNS logs are one of the most powerful threat hunting resources, but encryption is rapidly changing that equation.
Key DNS threat hunting techniques include detecting DNS tunneling and Domain Generation Algorithms (DGAs). It used to be simple(r): log DNS requests and responses on DNS forwarders, or sniff and analyze via tools like Zeek.
DNS over TLS (DoT) and DNS over HTTPS (DoH) are disrupting the status quo: where does that leave network defenders? This talk will analyze the current state of DNS monitoring, and provide actionable steps for detecting malice on your network via DNS.
Eric Conrad @eric_conrad Fellow, SANS Institute
Key DNS threat hunting techniques include detecting DNS tunneling and Domain Generation Algorithms (DGAs). It used to be simple(r): log DNS requests and responses on DNS forwarders, or sniff and analyze via tools like Zeek.
DNS over TLS (DoT) and DNS over HTTPS (DoH) are disrupting the status quo: where does that leave network defenders? This talk will analyze the current state of DNS monitoring, and provide actionable steps for detecting malice on your network via DNS.
Eric Conrad @eric_conrad Fellow, SANS Institute
0:54:56
Threat Hunting via DNS with Eric Conrad - SANS Blue Team Summit 2020
0:56:04
Threat Hunting via DNS | SANS@MIC Talk
1:03:54
WORKSHOP: Threat Hunting using Active and Passive DNS | DomainTools | WWHF Deadwood 2022
0:29:33
DIY DNS DFIR: You’re Doing it WRONG: Threat Hunting Summit 2016
0:10:16
Threat Hunting Shorts - C2 over DNS | Chris Brenton
0:06:51
Cybersecurity Threat Hunting Explained
0:28:36
Uncovering and Visualizing Malicious Infrastructure - SANS Threat Hunting Summit 2018
0:18:30
Threat Hunting with Network Flow - SANS Threat Hunting Summit 2017
0:51:01
Threat Hunting via Sysmon - SANS Blue Team Summit
0:42:02
Threat Hunting Using DNSTwist CyberChef DeepBlueCLI Teler
0:11:38
Network Threat Hunting Made Easy (Finding Hackers)
0:23:19
Expanding The Hunt: A Case Study in Pivoting Using Passive DNS and Full PCAP - SANS DFIR Summit 2016
1:42:10
WORKSHOP: Advanced Passive DNS Search Techniques for Cyber Investigations | DomainTools | WWHF &apos...
0:33:41
My “Aha!” Moment - Methods, Tips, & Lessons Learned in Threat Hunting - SANS THIR Summit 2019...
0:32:06
How to threat hunt in your SIEM with the right network data
4:40:12
2024-04-12 Cyber Threat Hunting Level 1 - Chris Brenton
0:35:42
Eduard Kiiko and Danial Zhuravchak - Threat Hunting: DNS security
0:43:34
Keynote: Threat Hunting: Old Data, New Tricks!
0:57:52
Understanding Sysmon & Threat Hunting with A Cybersecurity Specialist & Incident Detection E...
0:48:00
Threat Hunting Beacon Analysis
0:00:54
DNS Tunneling Explained
0:26:38
Data matters: More effective threat hunting and defense with internet scan data
0:58:44
The Basics of the Threat Hunting Process with Security Weekly and LogRhythm
0:11:00
Advanced Threat Hunting: Checking IPs returned by DNS Queries with 'COVID and Corona'
Комментарии