Finding SolarWinds / SUNBURST backdoors with Zeek, Suricata, & Corelight
Watch this webcast and to discover how to:
-Query Zeek logs in a SIEM to hunt for Sunburst IOCs
-Run community Suricata and Sigma rules for detections
-Investigate DNS and HTTP traffic for evidence of SolarWinds Orion compromise
Link to presentation: https://www3.corelight.com/corelight-presentation-find-solarwinds-sunburst-backdoors-zeek-suricata
Link to IOC spreadsheet: https://solarigate.training.corelight.io/
Видео Finding SolarWinds / SUNBURST backdoors with Zeek, Suricata, & Corelight канала Corelight, Inc
-Query Zeek logs in a SIEM to hunt for Sunburst IOCs
-Run community Suricata and Sigma rules for detections
-Investigate DNS and HTTP traffic for evidence of SolarWinds Orion compromise
Link to presentation: https://www3.corelight.com/corelight-presentation-find-solarwinds-sunburst-backdoors-zeek-suricata
Link to IOC spreadsheet: https://solarigate.training.corelight.io/
Видео Finding SolarWinds / SUNBURST backdoors with Zeek, Suricata, & Corelight канала Corelight, Inc
Показать
Комментарии отсутствуют
Информация о видео
Другие видео канала
Raspberry Pi sensors for home networks
SUNBURST SolarWinds Malware - Tools, Tactics and Methods to get you started with Reverse Engineering
Everything You Need To Know About SolarWinds Attack
Secure your cloud projects with NSM
Make Everyone An Expert: Get SOAR running ASAP with the help from Splunk and Corelight
Forrester + Corelight webcast: Turn the lights back on for encrypted traffic
How the SolarWinds Hack Could Change Data Security Forever
How to Hunt for Insiders with Network Deception
SOLARWINDS – A SANS Lightning Summit
SolarWinds: What It Means & What’s Next
SolarWinds breach: Insights from the trenches | Live incident response demo | Cyber Work Podcast
Drive SOC efficiency with network data and ML
An Introduction to Threat Hunting With Zeek (Bro)
SANS Emergency Webcast: What you need to know about the SolarWinds Supply-Chain Attack
Black Hat 2013 - Exploiting Network Surveillance Cameras Like a Hollywood Hacker
SUNBURST SolarWinds RECON - Malware Reverse Engineering, OSINT and Identifying Victims
Expert Playbooks for Non-Expert Use
Updates on the SolarWinds Sunburst Supply Chain Attack | FireEye Hack
Using Zeek/Bro To Discover Network TTPs of MITRE ATT&CK™ Part 1
SUPERNOVA - Everything you need to know to Reverse Engineer an APT WebShell