Podcasts Technology Security Weekly Podcast Network (Video) Reverse Analyzing Attacks for Detection, Justin Henderson - Paul's Security Weekly #519

Reverse Analyzing Attacks for Detection, Justin Henderson - Paul's Security Weekly #519

Published: June 26, 2017, 9 a.m.

b'

Learn how to use Windows Event Logs to catch attackers in your network, including domain admin group enumeration and mimikatz attacks! Justin Henderson (@SecurityMapper) categorizes these techniques as "reverse attack analysis for detection" and shows us how to do it in this technical segment! References to Mark Baggett\'s work on freq.py are made as well (https://isc.sans.edu/forums/diary/Detecting+Random+Finding+Algorithmically+chosen+DNS+names+DGA/19893/)

Full Show Notes: https://wiki.securityweekly.com/Episode519

Subscribe to YouTube Channel: https://www.youtube.com/channel/UCg--XBjJ50a9tUhTKXVPiqg

Security Weekly Website: http://securityweekly.com

Follow us on Twitter: @securityweekly

'