SANS - SEC599 Defeating Advanced Adversaries - Purple Team Tactics & Kill Chain Defenses

[voska89]

Erik Van Buggenhout, Stephen Sims | Duration: 24h+ | Video: H264 1280x720 | Audio: AAC 32 kHz mono | 2,70 GB | Language: English
Defeating Advanced Adversaries - Purple Team Tactics & Kill Chain Defenses will arm you with the knowledge and expertise you need to overcome today's threats. Recognizing that a prevent-only strategy is not sufficient, we will introduce security controls aimed at stopping, detecting, and responding to your adversaries through a purple team strategy.
The topics to be addressed include:

* Leveraging MITRE ATT&CK as a "common language" in the organization
* Building your own Cuckoo sandbox solution to analyze payloads
* Developing effective group policies to improve script execution (including PowerShell, Windows Script Host, VBA, HTA, etc.)
* Highlighting key bypass strategies for script controls (Unmanaged Powershell, AMSI bypasses, etc.)
* Stopping 0-day exploits using ExploitGuard and application whitelisting
* Highlighting key bypass strategies in application whitelisting (focus on AppLocker)
* Detecting and preventing malware persistence
* Leveraging the Elastic stack as a central log analysis solution
* Detecting and preventing lateral movement through Sysmon, Windows event monitoring, and group policies
* Blocking and detecting command and control through network traffic analysis
* Leveraging threat intelligence to improve your security posture
Homepage
https://www.sans.org/cyber-security-courses/defeating-advanced-adversaries-kill-chain-defenses/

Recommend Download Link Hight Speed | Please Say Thanks Keep Topic Live

https://uploadgig.com/file/download/6757004a5B93bB9A/w52v0.SANS..SEC599.Defeating.Advanced.Adversaries..Purple.Team.Tactics..Kill.Chain.Defenses.part1.rar
https://uploadgig.com/file/download/893D4773b80A15b5/w52v0.SANS..SEC599.Defeating.Advanced.Adversaries..Purple.Team.Tactics..Kill.Chain.Defenses.part2.rar
https://uploadgig.com/file/download/c4a13c629eCeA5F5/w52v0.SANS..SEC599.Defeating.Advanced.Adversaries..Purple.Team.Tactics..Kill.Chain.Defenses.part3.rar

https://rapidgator.net/file/978a13f4d36adb8e517918b17b0e16bd/w52v0.SANS..SEC599.Defeating.Advanced.Adversaries..Purple.Team.Tactics..Kill.Chain.Defenses.part1.rar.html
https://rapidgator.net/file/929f7c3b53f8b5ea0711d590ec417bd8/w52v0.SANS..SEC599.Defeating.Advanced.Adversaries..Purple.Team.Tactics..Kill.Chain.Defenses.part2.rar.html
https://rapidgator.net/file/18f158d9c7d2f5c3b988ec5a547d35a1/w52v0.SANS..SEC599.Defeating.Advanced.Adversaries..Purple.Team.Tactics..Kill.Chain.Defenses.part3.rar.html

http://nitroflare.com/view/E3A820AE2F95835/w52v0.SANS..SEC599.Defeating.Advanced.Adversaries..Purple.Team.Tactics..Kill.Chain.Defenses.part1.rar
http://nitroflare.com/view/7CF1141E198F754/w52v0.SANS..SEC599.Defeating.Advanced.Adversaries..Purple.Team.Tactics..Kill.Chain.Defenses.part2.rar
http://nitroflare.com/view/D9C8AAF829E09EA/w52v0.SANS..SEC599.Defeating.Advanced.Adversaries..Purple.Team.Tactics..Kill.Chain.Defenses.part3.rar

Links are Interchangeable - No Password - Single Extraction