Hunting for APT in network logs - Oleh Levytskyi, Bogdan Vennyk
https://cfp.nonamecon.org/nnc2021/tal...
Network logs are one of the most efficient sources to hunt adversaries, but building good analytics capabilities requires a deep understanding of benign activity and attacker behavior. This training focuses on detecting real-case attacks, tools, and scenarios by the past year.
The training is highly interactive and retains a good balance between theory and a lot of hands-on exercises for the students to get used to the detection engineering methodology and prepare them to start implementing this at their organizations.