Google Workspace Forensics - Insights from Real-World Hunts and Incident Response
Insights on threat hunting and incident response in Google Workspace, focusing on data exfiltration from Google Drive. Learn forensic investigation techniques for GWS logs from real-world cases.
Authentication Proxy Attacks: Detection, Response and Hunting
Explore tactics for detecting and responding to MFA-enabled account takeover attacks using authentication proxies. Learn to hunt, mitigate, and block these emerging threats effectively.
Kunai - A New Threat Hunting Tool for Linux
Discover Kunai, an innovative threat hunting tool for Linux systems. Learn its features, capabilities, and how it enhances cybersecurity through advanced detection techniques.
Security Onion Essentials 2.4 - Threat Hunting
Explore threat hunting techniques in Security Onion 2.4, covering workflow essentials and practical strategies for proactive cybersecurity defense and network monitoring.
Cyber Threat Intelligence Demystified - Leveraging Intelligence for Effective Cybersecurity
Explore cyber threat intelligence essentials, best practices, and automation tools to enhance your organization's cybersecurity strategy and proactively combat advanced threats.
2022 ICS/OT Cybersecurity Year in Review - Lessons Learned from the Frontlines
Incident responders discuss industrial cybersecurity trends, mitigation strategies, and regulatory impacts, offering insights to protect ICS/OT environments based on real-world experiences.
Detection Engineering without Alert Fatigue - Correlating Minor Detections
Explore innovative approaches to balance detection coverage and alert fatigue in SOC operations, leveraging custom platforms and indicator correlation for effective threat hunting and investigation assistance.
Security Onion Essentials 2024 - Detection Engineering
Explore detection engineering in Security Onion 2.4.70, covering key techniques and best practices for enhancing network security and threat detection capabilities.
Ransomware and Backups: A Multi-Layered Defense Strategy
Explore multi-layered backup defense strategies against ransomware, including prevention, detection, analytics, and threat hunting techniques to protect critical data.
War Stories from the SOC - Cybersecurity Incident Response Lessons
Cybersecurity expert shares real-world experiences from Security Operations Center, offering insights into threat detection, incident response, and best practices for defending against cyber attacks.
Attacks to America's Gas Stations - Track 1, Session 7
Explore vulnerabilities in gas station infrastructure and learn effective detection strategies for critical infrastructure networks.
Dissecting an Iranian Nation State Interactive Intrusion - Watching Kittens at Play
Dissect an Iranian nation-state intrusion, gaining insights into adversarial tactics. Learn threat hunting techniques to uncover and counter sophisticated cyber attacks in your environment.
Detecting Known Unknowns in DevSecOps - A Tailored Defensive Approach
Explore TTP-based threat hunting with the Pandora Project. Learn about tailored defensive solutions, methodology workflows, and practical use cases for detecting known unknowns in cybersecurity.
Cloud Console Cartographer: Tapping Into Mapping - Slogging Through Logging
Explore an open-source framework for deciphering cloud console logs, enhancing threat detection and incident response in cloud environments. Learn to differentiate user actions from system-generated events.
Microsoft Defender: Stop Attacks and Reduce Security Operations Workload with XDR
Comprehensive XDR solution preventing attacks, detecting threats, and automating security operations. Integrates Microsoft 365 Defender and Azure Defender for proactive threat hunting and customized detection tools.
Threat Hunting at Scale - Auditing Thousands of Clusters With Falco and Fluent
Explore large-scale threat hunting using Falco and Fluent for auditing thousands of Kubernetes clusters, covering data pipelines, monitoring, log processing, and challenges.
Don't Boil the Ocean - Using MITRE ATT&CK to Guide Hunting Activity
Learn to use MITRE ATT&CK framework for focused threat hunting, avoiding overwhelming approaches. Discover how to build hypotheses, plan hunts, and operationalize findings for more effective cybersecurity practices.
Exploitation With Shell Reverse & Infection With PowerShell
Exploración de técnicas de shell reverso y infección con PowerShell, demostrando ataques dirigidos y analizando la eficacia de soluciones de seguridad de endpoints.
Detection and Efficiency Testing of Endpoint Security Sensors
Evaluación comparativa de soluciones de seguridad de endpoints, simulando ataques dirigidos para medir la eficacia en detección de amenazas mediante firmas, NGAV y aprendizaje automático.
Looking For the Perfect Signature - An Automatic YARA Rules Generation Algorithm in the AI-Era
Explore an innovative algorithm for automatic YARA rule generation, leveraging AI to enhance malware detection and threat intelligence in the evolving cybersecurity landscape.
The SOC Counter ATT&CK
Explore SOC counter-attack strategies using the MITRE ATT&CK framework. Learn threat detection, modeling, and hunting techniques to enhance your organization's security posture.