There are three major Sysmon configurations:
@SwiftOnSecurity : A great introductory walkthrough of many of the settings. Get started with 1 command
@olafhartong: Extremely maintainable with detailed rule notes for guided response and SIEM.
@cyb3rops: Bleeding-edge and proactive.
@dnsprincess You can contact @CircleCityCon or go to the https://t.co/GSNrtlGZ6q. So when tickets are available they should tell the student asap because it’s first come first serve.
Gotta love cybersecurity conferences that purport to be very central to the community but can’t manage to have any network connectivity, let alone a NOC that inspires confidence.
We just blocked Kiwifarms. The threats on the site escalated enough in the last 48 hours that, in spite of proactively working with law enforcement, it became enough of an imminent emergency we could no longer wait for them to act. Details of our decision: https://t.co/xNnSXn65R6