Detection: Challenging Paradigms

Episode 27: Roberto Rodriguez

Nov 7, 2022
Ask episode
Chapters
Transcript
Episode notes
1
Introduction
00:00 • 4min
2
The History of MITRE Attack
04:00 • 3min
3
The Importance of Defining the Scoring Category for Each Technique
07:00 • 4min
4
The Importance of Pre-Requirements in a Framework
10:40 • 4min
5
How to Detect False Positives in Credential Dumping
14:17 • 5min
6
Telemetry and the Relationship Between Things
18:52 • 2min
7
How to Make Meaning of Two Events to Detect One Specific Thing
21:06 • 2min
8
The Importance of Understanding the Unintended Consequences
23:24 • 5min
9
The Importance of Client Side Triage in Kerbros Attacks
28:28 • 3min
10
How to Determine Whether a Kerb Rost Is Malicious
31:13 • 2min
11
Client Server and Endpoint Telemetry
33:42 • 1min
12
The Importance of Digital Context in Data Attacks
34:56 • 5min
13
How to Create a Per User Service
40:05 • 1min
14
How to Reduce Sign Binaries
41:27 • 5min
15
How to Be a Successful Detection Engineer
46:28 • 2min
16
The Importance of Understanding Internals
48:35 • 4min
17
How to Detect a Golden Ticket
52:28 • 2min
18
How to Understand a System on Event
54:00 • 5min
19
The Importance of Deep Knowledge in Organizations
59:02 • 2min
20
The Importance of Deep Knowledge in Organizational Research
01:01:28 • 4min
21
The Problem With Behavioral Detection
01:05:03 • 3min
22
The Role of Technology in Research Implementation
01:08:14 • 1min
23
The Importance of Understanding the Implementation of Technology
01:09:40 • 6min
24
The Importance of Understanding What's Going On
01:15:20 • 3min
25
The Argument for Not Talking About Mom and Pop Shops
01:18:36 • 3min
26
How to Detect a Mom and Pop Shop
01:21:40 • 3min
27
The Importance of Limiting Your Understanding of a Problem
01:24:47 • 2min
28
The Evolution of the Pizza Shop Solution
01:26:57 • 3min
29
The Importance of Understanding the Behavior Going Deep
01:29:40 • 1min
30
The Importance of Research in Organizations
01:31:06 • 5min
31
The Zone of Proximal Development
01:35:37 • 3min
32
The Importance of Supplication
01:38:37 • 2min
33
The Importance of Accountability in Research
01:40:34 • 5min
34
The Future of Data Analytics
01:45:41 • 4min
35
How to Make Sections of a Podcast
01:49:48 • 2min