امن افزار رایکا

فهرست مطالب کتاب SANS SEC699.2 Initial Intrusion Strategies Emulation & Detection:

Initial Intrusion Strategies

Traditional Attack Strategies & Defenses

Emulating Adversarial Techniques & Detections

Anti-Malware Scanning Interface (AMSI)

Office Macro Obfuscation Techniques

Exercise: VBA Stomping, Purging & AMSI Bypasses

Application Execution Control

Exercise: Bypassing Application Execution Control

ExploitGuard & Attack Surface Reduction Rules

Exercise: Bypassing Attack Surface Reduction

Going Stealth – Process Shenanigans

Zooming in on Windows Internals

Bypassing Security Products Through Process Shenanigans

Hunting for These Shenanigans

Exercise: Bypassing Modern Security Products

Conclusions

فهرست مطالب کتاب SANS SEC699.3 Lateral Movement Emulation & Detection:

Active Directory Enumeration

BloodHound Enumeration

Exercise: Analyzing BloodHound Attack Chains

Credential Dumping

LSASS Credential Stealing Techniques

Exercise: Stealing Credentials from LSASS

Stealing Credentials Without Touching LSASS

Exercise: Internal Monologue in NTLMv1 Downgrades

Stealing NTLMv2 Challenge-Response

Exercise: Creative NTLMv2 Challenge-Response Stealing

Kerberos Attacks

Kerberos Refresh

Unconstrained Delegation Attacks

Exercise: Unconstrained Delegation Attacks

(Resource-Based) Constrained Delegation

Exercise: (Resource-Based) Constrained Delegation

Conclusions

فهرست مطالب کتاب SANS SEC699.6 Adversary Emulation Capstone:

Capstone

Capstone Introduction – Live Events

Capstone Introduction – OnDemand

فهرست مطالب:

ندارد

فهرست مطالب:

ندارد

فهرست مطالب:

ندارد