Threat Hunting: Network Data

سرفصل های دوره

Despite investing resources in cybersecurity, organizations can still fall prey to cyberattacks. While properly configured technology can prevent most attacks, cybercriminals have developed techniques to evade detection. In this course, Michael Wylie, an information security expert, provides his insights, lessons learned, and advice on threat hunting using network telemetry. He discusses topics such as data sources, advantages and disadvantages of different data types, and methods for detecting malicious activity on your network.

01 - Introduction

01 - Network threat hunting essentials Staying proactive

02 - The importance of network threat hunting

02 - 1. Thinking like the Adversary Threat Actors

01 - Threat actor types and motivations

02 - Crown jewel identification

03 - 2. Network Data Sources

01 - Network threat hunting data sources

02 - Threat hunting in packets

03 - Threat hunting using network flow

04 - Threat hunting in infrastructure logs

04 - 3. Network Threat Hunting Tools

01 - Use an SIEM (Security Information and Event Management) for threat-hunting

02 - Use Wireshark for threat-hunting

03 - Use IDS or IPS for threat-hunting

04 - Use Bro or Zeek for threat-hunting

05 - Security Onion

05 - 4. Hunting the Undetected

01 - Leverage IOCs in threat hunting

02 - Baseline to identify anomalies

03 - Least frequency analysis to identify outliers

04 - Hypothesis threat hunting

06 - 5. How Hackers Abuse Protocols

01 - HTTP protocol attack methods

02 - HTTPS protocol attack methods

03 - SMB protocol attack methods

04 - DNS protocol attack methods

07 - 6. Network Threat Hunts

01 - Hunt command and control (C2)

02 - Hunt lateral movement

03 - Hunt remote desktop software

08 - Conclusion

01 - Continue with network threat hunting

139,000 تومان

خرید اشتراک افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

تولید کننده: LinkedIn Learning (Lynda)