Bring the Fight to Them: Hunting down adversaries using OSQuery
Defeating Advanced Adversaries 'a webcast series. In the first webcast of the series, SEC599 Course Authors and Instructors Stephen Sims and Erik Van Buggenhout will walk through how OSQuery can be leveraged to obtain interesting information about your environment. \We will discuss the inner workings of OSQuery and how you can leverage it effectively to obtain critical information." A webcast wouldn't be complete unless we had a live demo 'view the new lab platform where we will demonstrate how to detect an actual infection using OSQuery.
Watch Part 2 and Part 3 in the Defeating Advanced Adversaries Series
- Part 2: Improving Your Defenses - CredentialGuard in Windows 10
https://www.sans.org/webcasts/improving-defenses-credentialguard-windows-10-106190 - Part 3: Improving Your Defenses - EMET & Window Defender Exploit Guard
https://www.sans.org/webcasts/improving-defenses-emet-window-defender-exploit-guard-106195
