SANS DFIR Webcast - Incident Response Event Log Analysis
SANS Digital Forensics and Incident Response
@sansforensicsAbout
Over 80% of all breach victims learn of a compromise from third-party notifications, not from internal security teams. In most cases, adversaries have been rummaging through your network undetected for months or even years. Incident response tactics and procedures have evolved rapidly over the past several years. Data breaches and intrusions are growing more complex. Adversaries are no longer compromising one or two systems in your enterprise; they are compromising hundreds. Your team can no longer afford antiquated incident response techniques that fail to properly identify compromised systems, provide ineffective containment of the breach, and ultimately fail to rapidly remediate the incident. A thorough understanding of many detailed areas is required for success, including a mastery of the following fundamental skills covered by the SANS Digital Forensics and Incident Response (DFIR) YouTube Channel.
Video Description
SANS Incident Response Training Course: http://www.sans.org/course/advanced-computer-forensic-analysis-incident-response Windows event logs contain a bewildering variety of messages. But homing in on a few key events can quickly profile attacker activity. From administrator logins, to scheduled tasks, to entries related to system services, and more-- the event logs are a one-stop shop. Learn to "crack the code" and enhance your investigations by adding event log analysis to your toolset. Speaker Bio Hal Pomeranz Hal Pomeranz is an independent digital forensic investigator who has consulted on cases ranging from intellectual property theft, to employee sabotage, to organized cybercrime and malicious software infrastructures. He has worked with law enforcement agencies in the US and Europe and global corporations. While equally at home in the Windows or Mac environment, Hal is recognized as an expert in the analysis of Linux and Unix systems. His research on EXT4 file system forensics provided a basis for the development of Open Source forensic support for this file system. His EXT3 file recovery tools are used by investigators worldwide. Hal is a SANS Faculty Fellow and Lethal Forensicator, and is the creator of the SANS Linux/Unix Security track (GCUX). He holds the GCFA and GREM certifications and teaches the related courses in the SANS Forensics curriculum. He is a respected author and speaker at industry gatherings worldwide. Hal is a regular contributor to the SANS Computer Forensics blog and co-author of the Command Line Kung Fu blog. For more incident response training courses at SANS: http://www.sans.org/course/advanced-incident-response-digital-forensics http://www.sans.org/course/advanced-network-forensics-analysis
Metal 3D Printing Essentials
AI-recommended products based on this video
SUNLU High Speed PLA Meta Filament, 4KG PLA 3D Printer Tougher Filament 1.75mm, Dimensional Accuracy +/- 0.02 mm, 4kg Total, 1kg per Spool, Pack of 4, Sky Blue+Mint Green+Sunny Orange+Lemon Yellow
SUNLU High Speed PLA Meta Filament, 4KG PLA 3D Printer Tougher Filament 1.75mm, Dimensional Accuracy +/- 0.02 mm, 4kg Total, 1kg per Spool, Pack of 4, Sky Blue+Mint Green+Sunny Orange+Lemon Yellow