Detecting Unauthorized Behavior From Legitimate Accounts

Incident Responders face an almost insurmountable amount of log events, and the move to the Cloud has only intensified this dependency on log data for intrusion analysis.Attackers are shifting techniques to utilize compromised accounts to hide their activity among the volume of legitimate business...

By

Rodney Caudle

June 22, 2022

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Cyber Defense, Cybersecurity and IT Essentials

Month of PowerShell - Embracing the Pipeline

In this article we will take a look at the PowerShell pipeline, and walk you through several examples of putting the pipeline to work for you!

Month of PowerShell: 5 Tips for Getting Started with PowerShell

In this article I'll talk about the 5 tips that helped me get started with PowerShell. I encourage you to follow along!

Blog_teaser_images_(15).png

Digital Forensics and Incident Response, Open-Source Intelligence (OSINT)

FOR589: Dark Web Threat Hunting & Blockchain Forensics - NEW SANS DFIR Course

Learn to hunt for Dark Web Intelligence, Social Engineer cybercriminals, investigate illicit Blockchain activity, and analyze Cryptocurrency evidence