SANS DFIR Webcast - Incident Response Event Log Analysis

Поділитися
Вставка
  • Опубліковано 26 лис 2024

КОМЕНТАРІ • 13

  • @lancemarchetti8673
    @lancemarchetti8673 2 роки тому +2

    With Velociraptor deployments on Debian clouds...DFIR tech has really stepped up the game in a huge way!

  • @ITinProduction
    @ITinProduction 3 роки тому +8

    Thank you so much for this video, this is so old but still a gold, i always have a confusion about reading any security log files to find the vulnerabilities and trojans or viruses. i wish if you can make another video a lot in detail.

  • @joshuablanchette878
    @joshuablanchette878 7 років тому +4

    excellent video, the speaker did a great job.

  • @esinyelk
    @esinyelk 5 років тому +2

    Very nice video to go through the basics. Thank you very much.

  • @laptoplifestylegeez
    @laptoplifestylegeez 2 роки тому

    Fantastic training but I can't find the recommended log alerts settings

  • @ruthawele2102
    @ruthawele2102 4 роки тому +3

    Love this, very informative

  • @cyberofthinx
    @cyberofthinx 2 роки тому

    Perfect points to make me get it, many thanks!

  • @Jpsalm91
    @Jpsalm91 5 років тому

    When systems become too complicated, thats when the most basic attack becomes effective and vice versa

  • @alfie0311
    @alfie0311 6 років тому +2

    Well done, thanks

  • @kepenge
    @kepenge 8 років тому

    was this investigation conducted using the compromised machine or did you use SIFT?

  • @kenjboyd6233
    @kenjboyd6233 5 років тому +3

    This video is a bit dated. But it wasn't long after this video was produced that Microsoft triggered the control algorithms that they had been working on for many years, and started changing computers two Windows 10 without permission from users. By this point, anyone who doesn't realize that Microsoft is patient zero, as it is called in this video, is either Clueless or scared of Microsoft. No, they will never plant files called malicious. Anything. but any file that starts with the name trusted is a dead giveaway as to being a major component in the first malware driven operating system in history.

  • @Eskimoz
    @Eskimoz 5 років тому

    On like :)

  • @Qantum802
    @Qantum802 2 роки тому

    So how do you install Fallout2.exe on a Windows 10 from just the files off the disk because you have a copy but don't know where your usb disk drive is or let alone the disk yet haven't tried finding either because well. Log(s)🧗‍♂️ hahahahaha.
    I'm serious though, I'm sure you've gotta have the answer I'm looking for.