Eric Pursley, Log Analyzing off the Land | KringleCon 2022
Experience the SANS Holiday Hack Challenge ►► https://sans.org/holidayhack
Eric Pursley discusses the importance of enabling PowerShell/script block logging due to the prevalence of techniques like Living off the Land, which is commonly used by attackers to remain undetected -- unless their actions are generating logs. He also gives defenders an intro on using the same technique to analyze those logs with built-in Windows tools..
Follow Eric: / inscyght
Follow KringleCon: / kringlecon