SANS IT Audit & Security Demos
Loading...
560
subscribers
206,916
video views
Uploaded videos
1-10 of 38-
Extracting Last Logon Time from Active Directory using Powershell.mov
DHAtEnclaveForensics
10 views
The source code in this script can be obtained here: http://it-audit.sans.org/blog/2012/03/05/identifying-inactive-and-unnecessary-user-accounts-in-active-directory-with-po...
-
DNS Spoofing plus WPAD equals Compromised
DHAtEnclaveForensics
640 views
How hard is it for someone to insert a proxy between you and the rest of the Internet without you knowing? Will running a Mac or Linux protect you?
In this episode we combi...
-
VisualSniff - No Interfaces Available
DHAtEnclaveForensics
125 views
-Updated- Some people have been asking where to get VisualSniff. It's available on the Mac App Store: http://itunes.apple.com/us/app/visualsniff/id476030386?mt=12
This ...
-
Overflow Exploitation, Step By Step
DHAtEnclaveForensics
931 views
I previously had this chopped up into pieces that were pretty hard to watch. Now that I'm allowed to have videos longer than 15 minutes, I thought I'd give you the un-cut ...
-
DNS Sinkhole APT Defense
DHAtEnclaveForensics
132 views
(More episodes available at http://auditcasts.com) BIND is usually the go-to DNS solution if you're looking to set up a DNS sinkhole to contain and identify malware. While ...
-
Detecting APT & Malware - Finding File Traces
DHAtEnclaveForensics
234 views
(For similar videos and topics, visit http://auditcasts.com)
In all of the cases that I've worked where a malware infection, suspected APT or other security breach had occu...
-
Detecting APT and Zero Day Malware.mov
DHAtEnclaveForensics
246 views
APT (Advanced Persistent Threat) and other zero day malware are notoriously hard to detect in your environment. In this webcast we examine a super easy technique that can ...
-
Using WPAD to Compromise Web Browsers / How To Protect Yourself at Starbucks!
DHAtEnclaveForensics
554 views
WPAD is a terrific protocol for ease of configuration, but it's also a phenomenal protocol for hackers and penetration testers. This short video will describe the issue, d...
-
Hacking Windows Accounts with Powershell
DHAtEnclaveForensics
1,270 views
If I asked you for your password, no doubt you'd tell me to get lost. If I asked for your username you would be suspicious. If I asked you for your email address, you'd l...
-
Split DNS.mov
DHAtEnclaveForensics
291 views
What harm is there in having private internal records in your external DNS servers? There are many opinions on this with a number of people saying that there's no real risk...
Advertisement
Play all(38)