Technology
7MS #495: Desperately Seeking a Super SIEM for SMBs - Part 5
2021-11-17
Download
Right click and do "save link as"
Today we continue our SIEM/SOC evaluation series with a closer look at one particular managed solution and how it fared (very well) against a very hostile environment: the Light Pentest LITE pentesting course! Spoiler alert: this solution was able to detect:
- RDP from public IPs
- Password spraying
- Kerberoasting
- Mimikatz
- Recon net commands
- Hash dumping
- Hits on a "honey domain admin" account
- Users with non-expiring passwords
- Hits on the SSH/FTP/HTTP honeypot
More Episodes
7MS #487: Light Pentest eBook Announcement!
2021-09-28
2021-09-28
7MS #485: Interview with Christopher Fielder
2021-09-15
2021-09-15
7MS #479: A Prelude to PwnTown
2021-08-06
2021-08-06
7MS #477: Cobalt Strike for Newbs
2021-07-21
2021-07-21
7MS #476: Tales of Pentest Pwnage - Part 28
2021-07-16
2021-07-16
7MS #473: Interview with Nikhil Mittal
2021-06-24
2021-06-24
7MS #472: Interview with Christopher Fielder
2021-06-16
2021-06-16
Get this podcast on your
phone, FREE
