breach of trust and confidence Attack Tactics 7: The logs you are looking for

Download slides: https://www.activecountermeasures.com...
6:03 Introduction and background, JPCert, integration of pen testers, forensics, and defense, questions for business managers
12:37 How Attack Tactics is trying to bridge the three disciplines, proper settings for command line logging, enabling power shell logging
22:23 Generating events and finding them with Invoke-expression, Group Policy configurations, and answering questions about system configurations
30:17 Exchange logging, Sysmon installation, usage, and results, LSASS Dump, Deep Blue CLI, and Logon Tracer
43:26 Q&A and Closing Thoughts

So we went through an attack in the BHIS Webcast, "Attack Tactics 5! Zero to Hero Attack." Then we went through the defenses in a follow-up webcast, "Attack Tactics 6! Return of the Blue Team," and now we need to have a talk about logs.

Here is the deal, most of the default logging settings for IIS, Exchange, Active Directory and the workstations would have missed the entire attack.

So, let's fix that.

In this webcast we will be walking through some configuration changes required in order to detect attacks. We will also show you exactly what those logs will produce when configured properly.

Finally, we show you tools like LogonTracer, DeepBlueCLI and some cool basic PowerShell to pull out important information from these logs.

- John

breach of trust and confidence Attack Tactics 7: The logs you are looking for
58 Likes	58 Dislikes
2,389 views views	7.85K followers
Science & Technology	Upload TimePublished on 18 Jul 2019

Related keywords

video phone beyonce mp3,videos for cats,john strandberg artist,penetration testing aws,video phone letra,black hills information security podcast,free ringtones,hackerearth,freedom mortgage,log analysis machine learning,video doorbell,incident handling policy,sharing amazon prime,bistro,sharingan eyes,black hills information security card game,defcon germiston,john strand black hills,security weekly paul,video phone é a continuação de telephone,video player,camera iphone x apk,cyber security degree,digital forensics pdf,dfir blog,pen testing terminology,penetration testing libro,security weekly pay,ethical hacking essentials,penetration testing with kali linux (pwk) download,incident handling checklist,cyber defense salary,white hat hacking reddit,sharing is caring,ethical hacking foundation exin,bsides technology,military attack tactics,irongeek mutillidae videos,educational materials companies,incident handling framework,ethical hacking salario,video editing app,camera iphone 7 vs iphone 8,derbycon tickets,black hills information security github,log analysis tools free,free music,infosecurity,incident handling ppt,security weekly sponsors,biskopsgården,black hills information security cylance,video phone ft lady gaga,infosec blog,irongeek thumbscrew,ethical hacking curso gratis,penetration testing framework 0.59,attack tactics,dfir summit,derbycon cancelled,penetration testing course,educational materials for patients,white hat hacking services,video phone call,incident handling sans,attack tactics in basketball,cyber defense matrix,defcon 27,infosec podcast,hackers keyboard,dfirm georgia,security weekly report template,educational materials for kindergarten,penetration testing methodology,upload resume to linkedin,john strand twitter,sharing wifi password,sharing wifi iphone,infosecurity europe 2020,attack tactics handball,ethical hacking certificação,breach of contract cases,infosec health,breach of contract,log analysis azure,penetration testing a hands-on introduction to hacking,defcon montana,irongeek derbycon 2017,irongeek derbycon 2018,security weekly wiki,upload music to spotify,white hat hacking course free,white hat hacking tools,cybersecurity framework,infosecurity magazine,dfir netwars,derbycon slack,dfir ctf,ethical hacking pdf portugues,defcon furniture,sharing network 5k,white hat hacking v10,irongeek youtube,upload soundcloud,digital forensics framework,irongeek mutillidae tutorial,infosec europe 2019,cybersecurity certificate,incident response policy,hackers and crackers,defconn,penetration testing georgia weidman,black hills information security rita,incident handling in cloud computing,breach synonym,security weekly tradecraft,hackers in pubg,free movies,camera phone x apk,digital forensics tools,bsidesco,sharingan contacts,educational materials for teachers,security weekly show notes,video games,upload to instagram from pc,cyber security analyst,cyber defense competition,hackers kitchen,security weekly webcast,incident handling training,irongeek twitter,breach of contract remedies,bsides latam,derbycon eventbrite,incident handling nist,ethical hacking course,camera phone x,bisnode,video phone tradução,bishop arms,pen test distro,bistro norrland,john strandh,derbycon 2019,video phone lady gaga,log analysis aws,digital forensics software,defcon tactical,attack tactics fire emblem heroes,kent ickler,bsides cordoba,irongeek punycode,biscotti,free credit score,camera iphone 8 plus apk,cyber defense jobs,cybersecurity definition,bistro boheme,derbycon twitter,best attack tactics for clash of clans,cybersecurity maturity model certification,dfir security,cyber defense group,dfirm,videoder,videographer,log analysis using python,bsides twitter,cybersecurity conferences 2019,sharing shelf,bsides handmade,upload speed,white hat hacking community,educational materials examples,attack tactics 3,camera iphone 7 plus,video camera,dfire,black hills information security password spray,cyber defense training cloud,jordan drysdale photographer,hackers wallpaper,dfirm flood zones,cyber defense institute,white hat hacking books,uploadvr,penetration testing a hands-on introduction to hacking epub,derbycon schedule,upload speed test,bsides chile,irongeek ettercap filter,cyber defense labs,bisamråtta,pen tester job,incident response team,black hills information security spearfish sd,video phone beyonce,john strand mini kitchen,cyber security internship,sharingan naruto,educational materials hs code,upload download speed,black hills information security reviews,cyber defense magazine,bisolvon,educational materials definition,bisjkek,upload youtube,upload to google drive,freeform,incident handling and response,camera iphone xr vs xs,videogamedunkey,sharing economy,security weekly newsletter,digital forensics course,sharing kindle books,firehouse subs,sharing community yonkers,free vpn,white hat hacking techniques,derbycon ticket price,breach of contract philippines,defcon cl,camera iphone x,video editing software free,free fonts,breaching,video phone screen,security weekly,upload pictures,incident response plan,dfircon,bsides utn,video phone wikipedia,black hills information security glassdoor,pen test partners location,bhishma,derbycon training,breach of duty,freecell,video phone gaga,video phone beyonce lyrics,digital forensics training,freebirds,incident response training,attack tactics feh,dfirm map,log analysis splunk,jordan drysdale instagram,john strand sans,digital forensics degree,pen test forum,video killed the radio star,b sides tees,incident handling team,ethical hacking roadmap,cybersecurity careers,penetration testing with kali linux,digital forensics ppt,upload pdf to kindle,bsides cordoba cronograma,video game stores,incident response life cycle,security weekly news,cyber defense alliance,directions,bismarck,upload studio,pen test tool free,freestyle libre,security weekly podcast,sharing network,black hills information security llc,camera iphone 8,upload image,pen test scanner,log analysis elasticsearch,ethical hacking book,pen test online,derbycon ctf,cyber defense media group,camera iphone 7,camera iphone 6,breach of promise to marry,hackers in india,attack helicopter tactics,rebecca drysdale jordan peele,incident response plan template nist,defcon home & self-defence store,penetration testing argentina,camera phone 2019,cyber defense summit 2019,biståndshandläggare,john strandberg,digital forensics with kali linux pdf,sharing google calendar,bsides peru,breach of privacy,hackers keylogger apk,cybersecurity companies,upload video,defcon game,video phone beyonce lady gaga,incident handling certification,incident handling process phases,irongeek keylogger,hackers den,pen test certification,video phone commax,penetration testing methodologies,defcon 4 meaning,digital forensics framework download,educational materials pdf,infosec twitter,john strand,hackersploit,pen test tool,log analysis tools for windows,log analysis python,video phone number,hackers in pune,mitre att&ck tactics,bishara,black hills information security twitter,sharing community,breach of confidentiality,attack tactics techniques,breached,white hat hacking salary,breach of contract meaning,derbycon hotel,log analysis tools,defcon 1 meaning,security weekly twitter,educational materials catalog,incident response analyst,educational materials store,incident response steps,black hills information security webcasts,infosec rotkreuz,bsides malaga,educational materials ema,digital forensics salary,infosec ups system,upload video to youtube,incident response plan pdf,educational materials for toddlers,digital forensics process,cyber defense degree,penetration testing tools,hackerrank,dfir interview questions,security weekly rss,incident response phases,digital forensics definition,freep,john strand book,educational materials canada,ethical hacking python,video phone extended remix,defcon paintball,log analysis linux,sharingbox,cybersecurity stocks,video editor,hackersera,log analysis linux commands,breach meaning,incident response unit,camera iphone,camera phone comparison,irongeek derbycon 9,breach in tagalog,pen test web,sharing is caring meme,john strand mk,john strand model,defcon 2019 schedule,digital forensics with open source tools pdf,app video iphone,bsides las vegas,educational materials creator,camera iphone 8 plus,camera iphone xr,log analysis software,bison,attack tactics clash of clans,incident handling procedures,defcon cl lock,security weekly report,pen test report,free people,digital forensics corp,breach of trust,attack tactics fire emblem,penetration testing training with kali linux,hackers images,sharing outlook calendar,cybersecurity news,penetration testing with kali linux (pwk) official oscp certification course,john strand consulting,pen test adalah,cybersecurity courses,educational materials for autism,infosec 2019 london,video phone beyonce letra,white hat hacking groups,black hills information security linkedin,defcon 1,bsides barcelona,irongeek showmecon,cyber defense society,defcon 4,log analysis open source,cyber defense exercise,digital forensics certification,video phone lyrics,penetration testing execution standard,cyber security jobs,video star,john strand kitchens for small spaces,bsides agenda,incident handling process,free games,incident response playbook,incident response plan template,biskopsmössa,educational materials synonym,educational materials for visually impaired students,incident handling,irongeek mutillidae,john strand net worth,irongeek adc,infosekta,derbycon talks,video converter,video maker,defcon meaning,hackers24hrs,video phone feat lady gaga,log analysis tools linux,video editing software,defcon protec,pen test free,incident response methodology,incident handling plan,black hills information security mimikatz,free credit report,bisonoxe,incident response process,camera iphone x vs xr,video to gif,infosec news,biskvier,irongeek arpspoof,camera phone ranking,hackers news,dfir sans,free robux,incident response pocket guide,breach definition,upload to imgur,breach of contract penalty,educational materials meaning,ethical hacking e cybersecurity,security weekly report format,black hills information security jobs,john strand fargo,log analysis kibana,security weekly productions,camera phone x - os 12 camera apk,cybersecurity etf,derbycon cfp,jordan drysdale,derbycon drama,bisats,log analysis tool,white hat hacking companies,camera iphone apk,irongeek videos,dfir analyst,defqon 1 2019,cyber defense review,free dating sites,educational materials for 4 year olds,ethical hacking udemy,dfir training,john strand alley,free stock photos,ethical hacking foundation certificação,pen tester listrik,log analysis elk,433 attack tactics,ethical hacking certification,john strand playwright,upload photos to icloud,defcon 5 meaning,irongeek,infosecurity utrecht,counter attack tactics fm18,log analysis wow,incident response analyst salary,cybersecurity bootcamp,video downloader,upload photo,incident response jobs,chess attack tactics,john strand hideaway kitchen,incident handling course,white hat hacking software,white hat hacking certification,john strandell,penetration testing a hands-on introduction to hacking español,dfir certifications,white hat hacking websites,black hills information security adhd,cyber security certifications,derbycon sponsors,ethical hacking test,irongeek derbycon,pen test report template,bsides colombia,cyber defense analyst,security weekly youtube,penetration testing book,ethical hacking foundation,white hat hacking 101,cyber defense technologies,dfir jobs,infosec global,ethical hacking curso,security weekly pay jobs,white hat hacking tutorials,hackers community,infosec magazine,firefox,infosec 19,derbycon 2019 schedule,cyber defense center,white hat hacking degree,digital forensics sans,free online games,counter attack tactics fifa 19,free movies online,counter attack tactics fifa 18,pen tester electrical,cybersecurity insurance,breach and clear apk,irongeek ascii,security weekly jeffrey mann,hackers keyboard apk,incident handling phases,infosec institute,derbycon 2018 dates,john strand kitchenette,black hills information security game,irongeek thumbscrew not working,hackers quotes,digital forensics framework descargar,incident handling & response professional,white hat hacking jobs,incident handling lifecycle,ethical hacking tutorial,derbycon access code,black hills information security,pen testing,upload file,pen tester,derbycon 8,digital forensics jobs,cyber defense solutions,derbycon 9,log analysis tools open source,security weekly report sample,digital forensics magazine,cyber security salary,attack tactics coc,educational materials questions,incident response plan flow chart,oblique attack tactics,bisoprolol,bhis,black hills information security blog,penetration testing framework,bsides london,infosec conferences,attack tactics fifa 18,hackers mask,cybersecurity training,pen test standard,bsides 2019 las vegas,incident handling tools,breach and clear,john strand obituary,sharingan,white hat hacking training,sharingan tattoo,ethical hacking e cybersecurity na uniciv,penetration testing with kali linux (pwk),video to mp3,ethical hacking exin,black hills information security internship,incident response tools,white hat hacking course,black hills information security youtube,irongeek security,infosec reactions,