Completed
Investigation with PowerShell & Excel
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Supercharge Your SOC with Sysmon
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 What's happening on our endpoints?
- 3 Sysmon Visibility
- 4 Getting Started with Sysmon
- 5 Swift vs. SIG Sysmon Config
- 6 Transporting Logs with WEC
- 7 SIEM Integration
- 8 What kinds of badness can we detect?
- 9 Malicious Microsoft Word Macro Payload
- 10 Malicious PowerShell Execution
- 11 Rubber Ducky and Mouse Jacking Attacks
- 12 Sticky Keys Attack
- 13 Lateral Movement with WMI
- 14 Lateral Movement with PsExec
- 15 Lateral Movement with Sneaky PsExec
- 16 Dumping Credentials from Memory
- 17 Investigation with PowerShell & Excel
- 18 Malspam with Word Macro
- 19 Malspam SIEM Alert
- 20 Getting Sysmon Events via PowerShell
- 21 Adding Sysmon Fields to Events Properties
- 22 Interacting with Excel via PowerShell
- 23 Advanced Analytics with Spoor
- 24 How can you get started with Sysmon?
