PowerShell Detection and Security - Understanding Adversarial Abuse and Defense Strategies

PowerShell Detection and Security - Understanding Adversarial Abuse and Defense Strategies

Red Canary via YouTube Direct link

Intro

1 of 15

1 of 15

Intro

Class Central Classrooms beta

YouTube videos curated by Class Central.

Classroom Contents

PowerShell Detection and Security - Understanding Adversarial Abuse and Defense Strategies

Automatically move to the next video in the Classroom when playback concludes

  1. 1 Intro
  2. 2 The agenda
  3. 3 Harnessing Power(Shell)
  4. 4 Threats abusing PowerShell in 2022
  5. 5 Malicious PowerShell in the wild
  6. 6 Evolving tradecraft
  7. 7 Automatic scriptblock logging
  8. 8 Scriptblock logging tells a story
  9. 9 AMSI: Real-time Protection
  10. 10 AMSI Provider Authenticode
  11. 11 Unusual Formatting
  12. 12 Combinations of Terms & Behaviors
  13. 13 Detection challenges
  14. 14 Constrained Language mode
  15. 15 AMSI testing - AMSI Provider

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.