Security Incident Using Huntress & SentinelOne: What Was Found & What Was Missed 🚨
Channel: Lawrence Systems
Date: 2023-03-01

Huntress Demo & Review 2022
https://youtu.be/pBgd-lk-P94

SentinelOne Review and Malware Rollback Demo.
https://youtu.be/SSDITOd56Os

Threat reports
https://www.deepinstinct.com/blog/iranian-threat-actor-continues-to-develop-mass-exploitation-tools

https://www.withsecure.com/content/dam/with-secure/en/resources/gated/2022_05_31_WS_Threat_Highlight_report_FullHD_May_2022_public.pdf

The FRP on GitHub
https://github.com/fatedier/frp

The Virustotal Link
https://www.virustotal.com/gui/file/b455335d64e1633333899c32b49b867272b3d0b2e0653a484c2c8f22ceb3dbd6

S1 Behavioral page
https://www.sentinelone.com/blog/behavioral-ai-an-unbounded-approach-to-protecting-the-enterprise/

Huntress Blog regarding their product
https://www.huntress.com/blog/not-all-managed-is-created-equally


Connecting With Us
---------------------------------------------------  
+ Hire Us For A Project: https://lawrencesystems.com/hire-us/
+ Tom Twitter 🐦 https://twitter.com/TomLawrenceTech
+ Our Web Site https://www.lawrencesystems.com/
+ Our Forums https://forums.lawrencesystems.com/
+ Instagram https://www.instagram.com/lawrencesystems/
+ Facebook https://www.facebook.com/Lawrencesystems/
+ GitHub https://github.com/lawrencesystems/
+ Discord https://discord.gg/ZwTz3Mh

Lawrence Systems Shirts and Swag
---------------------------------------------------
►👕 https://lawrence.video/swag


AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store
🛒 https://www.amazon.com/shop/lawrencesystemspcpickup

All Of Our Affiliates that help us out and can get you discounts!
🛒 https://www.lawrencesystems.com/partners-and-affiliates/

Gear we use on Kit 
🛒 https://kit.co/lawrencesystems

Use OfferCode LTSERVICES to get 10% off your order at
🛒 https://lawrence.video/techsupplydirect

Digital Ocean Offer Code
🛒 https://m.do.co/c/85de8d181725

HostiFi UniFi Cloud Hosting Service
🛒 https://hostifi.net/?via=lawrencesystems

Protect you privacy with a VPN from Private Internet Access
🛒 https://www.privateinternetaccess.com/pages/buy-vpn/LRNSYS

Patreon
💰 https://www.patreon.com/lawrencesystems

⏱️ Time Stamps ⏱️
00:00 Security Incident Feb 2023
02:45 Huntress Incident Report 
03:29 Virustotal results
04:31 Fast Reverse Proxy
04:53 How It Was Found
06:41 Threat Research
08:35 Using SentinelOne Deep Visibility For Threat Hunting
09:52 Why SentinelOne Did not trigger?
11:45 SentinelOne False Positive
13:12 Closing Thoughts

#cybersecurity  #security #threathunting