Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Endpoint Detection Super Powers on the Cheap with Sysmon

via YouTube

Overview

Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore advanced endpoint detection techniques using Sysmon in this 26-minute conference talk from Derbycon 2019. Gain insights into cost-effective methods for enhancing your cybersecurity capabilities as Olaf Hartong delves into topics such as attack support, data source references, and the evolution of Sysmon features. Learn about directory structures, name annotation, and data voyager tools to improve your investigative workflow. Discover how to overcome challenges in app structure, reporting, and filtering, while also understanding network connections. Conclude with a roadmap for future developments in endpoint detection and response.

Syllabus

Introduction
Todays topic
Why am I here
Disclaimer
Attack
Support
Data Source Reference
History of Statements
New Features
Directory Structure
Name Annotation
Data Voyager
Investigative Workflow
Challenges
App Structure
Reporting
Filtering
Network Connections
Roadmap

Reviews

Start your review of Endpoint Detection Super Powers on the Cheap with Sysmon

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.