Living Off the Land 2 - A Minimalist's Guide to Windows Defense

YouTube·Conference Talks

Explore a comprehensive conference talk on minimalist Windows defense strategies and "Living off the Land" techniques. Delve into PowerShell Remoting, WMI-based data collection, and intrusion detection using WMI events. Learn about ETW (Event Tracing for Windows) for incident response, and discover PowerForensics for digital investigations. Examine Device Guard, comparing it to AppLocker, and understand potential bypass strategies and mitigations. Gain insights from both defensive and offensive perspectives to enhance your Windows security knowledge.