CODE BLUE·28 min
Engineers explore architecture and security mechanisms for ［CB20］LogonTracer v1.5 + Elasticsearch = Real-time AD Log Analysis System.
log-analysiselasticsearchlogontracer+2
log-analysis
12 talks tagged with this topic.
Filters+
Loading filters…
1–12 of 12 talks · loading…
Security BSides San Francisco·26 min
BSidesSF 2023 - NLP for security log analysis : Learning to crawl before you run (Arjun Chakraborty)
Reviews BSidesSF 2023 - NLP for security log analysis : Learning to crawl before you run (Arjun Chakraborty) and evaluates key implications for security practitioners.
nlplog-analysisbsidessf+1
Car Hacking Village·50 min
Kartheek Lade
Kartheek Lade presents CANalyse 2.0, a vehicle network analysis tool featuring automated dataset filtration, SQL-based log querying, and Telegram bot injection.
can-buslog-analysisinjection+2
Blue Team Village·36 min
Defenders explore unconventional log analysis techniques, correlating seemingly unrelated telemetry sources to uncover stealthy enterprise intrusions.
log-analysisthreat-huntingsiem+2
Blue Team Village·22 min
Christine Le
The life of a blue-teamer is daunting. There are logs to sift through, tasks to automate, incidents to triage, vulnerabilities to manage, meetings to attend, coffee to drink, etc. Scenarios have moving parts, procedur...
log-analysissoc-operationsincident-analysis+1
Blue Team Village·37 min
Siyu Zhu
Due to internal environment of Windows domains is always too tolerant, and enterprises are more concerned about border defenses than internal security, the penetration behavior based on Windows Active Directory has be...
malware-analysisactive-directorythreat-detection+3
Blue Team Village·19 min
Norman Lundt
Industrial Control System(ICS) protocols are often neglected in the realm of network security monitoring. Detecting, parsing, and finding malicious activity can be frustrating and time consuming. In this session we wi...
threat-detectionlog-analysisics-monitoring+1
Blue Team Village·44 min
Carlos Garay
Memhunter is an endpoint sensor tool specialized in detecting memory-resident malware. The detection process is performed through a combination of endpoint data collection and memory inspection scanners. Memhunter au...
malware-analysisthreat-detectionlog-analysis+3
Blue Team Village·31 min
Georgios Kapoglis
In this talk we will go over traditional log analysis methods for AWS Cloudtrail logs and why we needed to find a better way of performing such investigations. We will then dive into AWS Athena which is essentially a ...
malware-analysislog-analysiscloud-security+1
Blue Team Village·26 min
ch33r10
What if I told you that it is possible for blue teamers to practice CTI everyday?! With minimal guidance and insight, blue teamers can learn how to see things through the eyes of a cyber threat intel analyst. We’ll st...
malware-analysisthreat-detectionlog-analysis+3
Main Stage·52 min
Rich Murphey
Rich Murphey explores intrusion prevention techniques on windows and unix at DEF CON 11, examining log-analysis and practical defenses.
log-analysissecurity-monitoringdetection-engineering+1
Main Stage·53 min
Mick Bauer
Mick Bauer explores stealthful sniffing, logging, and intrusion detection at DEF CON 10, examining packet-sniffing and practical defenses.
packet-sniffingintrusion-detectionlog-analysis+1