Threat Hunting: Foothold - TryHackMe WalkThrough скачать в хорошем качестве

Threat Hunting: Foothold - TryHackMe WalkThrough

Introduction:- Using ELK stack by Elastic (which is core technology of many SIEM solutions), hunting suspicious activities indicating initial user or host compromise. #threathunting #malwareHunting #EnterpriseThreatHunting #sysmon #logHunting #cyberThreatHunting Chapters 0:00 - Threat Hunting with ELK - Intro 3:37 - Attacker's Initial Access Hunting 17:00 - Payload Execution - Log Hunt 29:40 - Defense Evasion Logs by Hacker 34:02 - Malware Persistence Logs 38:12 - Command & Control (C2) Log Hunting Topics Covered:- Attacker Initial Access Payload Execution Malware Defense Evasion Persistence of malware Command and Control of hacker Room Link:- https://tryhackme.com/room/threathunt... References:- https://learn.microsoft.com/en-us/sys... https://en.wikipedia.org/wiki/Cyber_t... https://github.com/olafhartong/sysmon... https://www.elastic.co/elastic-stack https://elastic.co/beats