Скачать с ютуб Blue Team-Apalooza в хорошем качестве

Blue Team-Apalooza

Join us in the Black Hills InfoSec Discord server here:   / discord   to keep the security conversation going! Over the past few months, we have discovered a couple trends that organizations seem to be missing. Just some general vulnerability issues we are seeing again and again. In this webcast, we wanted to give a few pointers and some new tools to help the blue team stay on top of these issues. Below are a few topics we cover: 1. Using Nmap to find the web services on your network. This is huge. Many people miss some basic portals that have default creds or realllly basic exploit vectors. 2. Inventory. We will be sharing a cool tool that Bill Stearns created that detects software by monitoring outbound traffic using Scapy. The output is a cool .csv file. Because all .csv files are awesome. 3. Patching and why this matters so much. I know this is an over addressed topic. But, we will be bringing up a few issues we have seen in some recent tests. 4. Hardening telnet and HTTP to SSH and TLS. And... more Nmap goodness. 5. Password policy, LLMNR and more belt-tightening you can do with group policy. Slides available here: https://blackhillsinformationsecurity... Find out when our next LIVE webcast is by signing up for our email notifications: https://blackhillsinfosec.us15.list-m... Black Hills Infosec Socials Twitter:   / bhinfosecurity   Mastodon: https://infosec.exchange/@blackhillsi... LinkedIn:   / antisyphon-training   Discord:   / discord   Black Hills Infosec Shirts & Hoodies https://spearphish-general-store.mysh... Black Hills Infosec Services Active SOC: https://www.blackhillsinfosec.com/ser... Penetration Testing: https://www.blackhillsinfosec.com/ser... Incident Response: https://www.blackhillsinfosec.com/ser... Backdoors & Breaches - Incident Response Card Game Backdoors & Breaches: https://www.backdoorsandbreaches.com/ Play B&B Online: https://play.backdoorsandbreaches.com/ Antisyphon Training Pay What You Can: https://www.antisyphontraining.com/pa... Live Training: https://www.antisyphontraining.com/co... On Demand Training: https://www.antisyphontraining.com/on... Educational Infosec Content Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/ Wild West Hackin' Fest YouTube:    / wildwesthackinfest   Active Countermeasures YouTube:    / activecountermeasures   Antisyphon Training YouTube:    / antisyphontraining