Offensive Operating Against SysMon, Carlos Perez - Paul's Security Weekly #577

Sep 30, 2018 · 29 min · 128.6 MB

0:00-29:22

Streams straight from the publisher. podnod never proxies or re-hosts episode audio.

Carlos Perez delivers the Technical Segment on How to Operate Offensively Against Sysmon. He talks about how SysMon allows him to create rules, and track specific types of tradecraft, around process creation and process termination. He dives into network connection, driver loading, image loading, creation of remote threats, and more!

Full Show Notes: https://wiki.securityweekly.com/Episode577

Visit https://www.securityweekly.com/psw for all the latest episodes!