SANS - SEC599: Defeating Advanced Adversaries - Purple Team Tactics & Kill Chain Defenses

[LeeAndro]

Erik Van Buggenhout, Stephen Sims | Duration: 24h+ | Video: H264 1280x720 | Audio: AAC 32 kHz mono | 2,70 GB | Language: English

Defeating Advanced Adversaries - Purple Team Tactics & Kill Chain Defenses will arm you with the knowledge and expertise you need to overcome today's threats.

Recognizing that a prevent-only strategy is not sufficient, we will introduce security controls aimed at stopping, detecting, and responding to your adversaries through a purple team strategy.

The topics to be addressed include:

Leveraging MITRE ATT&CK as a "common language" in the organization

Building your own Cuckoo sandbox solution to analyze payloads

Developing effective group policies to improve script execution (including PowerShell, Windows Script Host, VBA, HTA, etc.)

Highlighting key bypass strats for script controls (Unmanaged Powershell, AMSI bypasses, etc.)

Stopping 0-day exploits using ExploitGuard and application whitelisting

Highlighting key bypass strats in application whitelisting (focus on AppLocker)

Detecting and preventing malware persistence

Leveraging the Elastic stack as a central log analysis solution

Detecting and preventing lateral movement through Sysmon, Windows event monitoring, and group policies

Blocking and detecting command and control through network traffic analysis

Leveraging threat intelligence to improve your security posture



DOWNLOAD
uploadgig

https://uploadgig.com/file/download/8250B3E3dcce5248/K4xTSjKc__SEC599_.part1.rar
https://uploadgig.com/file/download/fbac998a766e09B9/K4xTSjKc__SEC599_.part2.rar
https://uploadgig.com/file/download/1BB27966cf17745c/K4xTSjKc__SEC599_.part3.rar

rapidgator

https://rapidgator.net/file/a4a16f26beee0adb147915aa792c8bd6/K4xTSjKc__SEC599_.part1.rar.html
https://rapidgator.net/file/a51a9595e5ae3d3fb1af004ef9b8fcde/K4xTSjKc__SEC599_.part2.rar.html
https://rapidgator.net/file/bb89d7954c57545b011ae9d2a8a752d9/K4xTSjKc__SEC599_.part3.rar.html

nitroflare

http://nitroflare.com/view/60F5CB7C64452B6/K4xTSjKc__SEC599_.part1.rar
http://nitroflare.com/view/062CA15B0DE34E7/K4xTSjKc__SEC599_.part2.rar
http://nitroflare.com/view/C2F22CE35B0D33C/K4xTSjKc__SEC599_.part3.rar