SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
SEC595Cyber Defense
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
Hunting for Active Directory Persistence
Hunting for Active Directory Persistence (PDF, 3.41MB)Last updated: 16 Aug, 2022
Presenters
Thomas Diot
Thomas is the lead IR analyst at CERT-W. He's conducted IR engagements on medium and large perimeters, sometimes in coordination with others internal / institutional / commercial CSIRTs. He also works on security audits on a wide range of subjects, with a specialty in Active Directory pentests and Red Team.
- Slide 1 of 19
AIS247: AI Security Essentials for Business Leaders
Essentials AIS247Cybersecurity Leadership
- 2 CPEs / 2 Hours (Self-Paced)
- Slide 2 of 19
SEC535: Offensive AI - Attack Tools and Techniques
newIntermediate SEC535Offensive Operations
- 3 Days (Instructor-Led)
- 18 CPEs / 18 Hours (Self-Paced)
- Labs: 14 Hands-On Labs
- Slide 3 of 19
SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
Advanced SEC595Cyber Defense- GIAC Machine Learning Engineer (GMLE)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 30 Hands-On Labs
- Slide 4 of 19
SEC402: Cybersecurity Writing: Hack the Reader
Essentials SEC402Digital Forensics and Incident Response
- 12 CPEs / 12 Hours (Self-Paced)
- Slide 5 of 19
FOR589: Cybercrime Investigations
Major UpdatesIntermediate FOR589Digital Forensics and Incident Response
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 6 of 19
FOR585: Smartphone Forensic Analysis In-Depth
Major UpdatesEssentials FOR585Digital Forensics and Incident Response
- GIAC Advanced Smartphone Forensics (GASF)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hands-On Labs
- Slide 7 of 19
FOR608: Enterprise-Class Incident Response & Threat Hunting
Intermediate FOR608Digital Forensics and Incident Response
- GIAC Enterprise Incident Responder (GEIR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 8 of 19
FOR518: Mac and iOS Forensic Analysis and Incident Response
Intermediate FOR518Digital Forensics and Incident Response
- GIAC iOS and macOS Examiner (GIME)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- Slide 9 of 19
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
Intermediate FOR508Digital Forensics and Incident Response
- GIAC Certified Forensic Analyst (GCFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 35 Hands-On Labs
- Slide 10 of 19
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Advanced FOR610Digital Forensics and Incident Response
- GIAC Reverse Engineering Malware (GREM)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 48 Hands-On Labs
- Slide 11 of 19
FOR578: Cyber Threat Intelligence
Intermediate FOR578Digital Forensics and Incident Response
- GIAC Cyber Threat Intelligence (GCTI)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 12 of 19
FOR509: Enterprise Cloud Forensics and Incident Response
Intermediate FOR509Digital Forensics and Incident Response
- GIAC Cloud Forensics Responder (GCFR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 13 of 19
FOR528: Ransomware and Cyber Extortion
Intermediate FOR528Digital Forensics and Incident Response- 4 Days (Instructor-Led)
- 24 CPEs / 24 Hours (Self-Paced)
- Labs: 13 Hands-On Labs
- Slide 14 of 19
FOR577: LINUX Incident Response and Threat Hunting
newIntermediate FOR577Digital Forensics and Incident Response
- GIAC Linux Incident Responder (GLIR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- Slide 15 of 19
FOR710: Reverse-Engineering Malware: Advanced Code Analysis
Advanced FOR710Digital Forensics and Incident Response
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 12 Hands-On Labs
- Slide 16 of 19
FOR498: Digital Acquisition and Rapid Triage
Essentials FOR498Digital Forensics and Incident Response
- GIAC Battlefield Forensics and Acquisition (GBFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 17 of 19
SEC403: Secrets to Successful Cybersecurity Presentation
Essentials SEC403Digital Forensics and Incident Response
- 6 CPEs / 6 Hours (Self-Paced)
- Slide 18 of 19
FOR500: Windows Forensic Analysis
Essentials FOR500Digital Forensics and Incident Response- GIAC Certified Forensic Examiner (GCFE)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hands-On Labs
- Slide 19 of 19
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response
Advanced FOR572Digital Forensics and Incident Response
- GIAC Network Forensic Analyst (GNFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs