7MS #495: Desperately Seeking a Super SIEM for SMBs - Part 5

7MS #495: Desperately Seeking a Super SIEM for SMBs - Part 5

Today we continue our SIEM/SOC evaluation series with a closer look at one particular managed solution and how it fared (very well) against a very hostile environment: the Light Pentest LITE pentesting course! Spoiler alert: this solution was able to detect:

  • RDP from public IPs
  • Password spraying
  • Kerberoasting
  • Mimikatz
  • Recon net commands
  • Hash dumping
  • Hits on a "honey domain admin" account
  • Users with non-expiring passwords
  • Hits on the SSH/FTP/HTTP honeypot

Avsnitt(687)

Populärt inom Politik & nyheter

p3-krim
rss-viva-fotboll
svd-dokumentara-berattelser-2
flashback-forever
rss-sanning-konsekvens
aftonbladet-daily
rss-krimstad
rss-vad-fan-hande
svenska-fall
olyckan-inifran
motiv
fordomspodden
krimmagasinet
dagens-eko
rss-frandfors-horna
rss-expressen-dok
svd-nyhetsartiklar
blenda-2
rss-mord-forsvinnanden
spotlight