Learn to analyze, detect, and respond to common remote access tools in this comprehensive webinar featuring experts from Red Canary and MITRE ATT&CK®. Discover why adversaries frequently abuse legitimate remote access software like NetSupport Manager to control infected hosts and conduct post-exploit activities. Gain valuable insights into differentiating between malicious usage and authorized applications of these tools within organizations. Explore concrete detection strategies, understand how to identify legitimate use versus abuse, and develop effective response protocols for malicious remote access tools. Get introduced to Surveyor, a free and open source tool for environmental scanning of unwanted tooling. Master the identification of commonly misused legitimate tools while building practical skills for protecting your organization's security infrastructure.
Overview
Syllabus
The Detection Series: Remote access tools
Taught by
Red Canary
Related Courses
-
Remote System Discovery and Remote Desktop Protocol
-
OS Credential Dumping and Remote Services
-
MITRE ATT&CK Defender™ (MAD) ATT&CK® Fundamentals Badge Training
-
MITRE ATT&CK Defender™ (MAD) ATT&CK® SOC Assessments Certification Training
-
Volt Typhoon: T1070.003 Indicator Removal Detection
-
Match Legitimate Name or Location and Data Encrypted for Impact
