Learning about Writing Endpoint Detections (with a demo)
This is a demo about me learning about writing an endpoint detection, using Atomic Red Team & Sysmon, and using a custom alert written in Golang.
0:00 Introduction & Background
1:29 Running Atomic Red Team
4:43 Creating the Detection
11:30 Attaching a Task to the Detection
13:34 Recap & Lessons Learned