Le Tour Du Hack 2019: Windows Detection Engineering With ELK - Dan Nash
Channel: ENUSEC
Date: 2019-04-28

At #LTDH19, Dan Nash speaks about using ELK to detect Windows events.

You can find more awesome talks which took place at #LTDH19 here: https://www.youtube.com/playlist?list=PLI5UsEUOX2mULh9qefOktf7m8ysA2iWXF

About Dan:
Dan is currently a Security Engineer with Sophos. He lives
to learn and loves everything Splunk, C# and CTF related.
Previously, he’s spoken about getting into the industry,
the dangers of affordable mobile malware and learning to
adult.

About this presentation:
How do you know when your detection fails? Like every
tool used by a mature enterprise security team, it must be finely tuned to the environment. To ensure we properly understand the threats we face and the indicators of compromise they leave behind, we must thoroughly test our detections in an environment which mirrors reality
while also enabling analysis. In this talk, I will walk you through a how-to for building your own test environment for Windows and discuss the benefits of thorough testing for security – for yourself as a professional and the organisation.

___________________________

Keep up to date with ENUSEC

👉 Web: enusec.org
👉 Twitter: https://twitter.com/_enusec_
👉 Discord: https://discord.enusec.org