SPECIAL PRESENTATION: Backdoors & Breaches Live

00:00 - Introduction

01:22 - The Scenario

02:50 - First Steps

03:48 - Endpoint Analysis Roll

04:22 - Logon Scripts Were installed

05:09 - I.R. Team Introductions

07:17 - Second Step

10:32 - Network Threat Hunting Roll

11:36 - Third Step

15:12 - Anyway Here’s Firewall Roll

15:43 - Fourth Step

18:26 - SIEM Roll

19:41 - Fifth Step

20:47 - UEBA Roll

21:19 - Senario Recap

22:20 - Senario Plausibility?

25:51 - Wrap-up Takeaways

• (00:00) - Introduction
• (01:21) - The Scenario
• (02:50) - First Steps
• (03:47) - Endpoint Analysis Roll
• (04:21) - Logon Scripts Were installed
• (05:09) - I.R. Team Introductions
• (07:16) - Second Step
• (10:32) - Network Threat Hunting Roll
• (11:36) - Third Step
• (15:12) - Anyway Here's Firewall Roll
• (15:42) - Fourth Step
• (18:26) - SIEM Roll
• (19:41) - Fifth Step
• (20:47) - UEBA Roll
• (21:18) - Senario Recap
• (22:19) - Senario Plausibility?
• (25:50) - Wrap-up Takeaways