Getting the most out of Sysmon | Amanda Berlin | WWHF Deadwood 2022

Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/

The default logging capabilities from Microsoft are only helpful to a certain extent. This session will discuss how to utilize the Sysinternals tool Sysmon for threat hunting, testing detections and more. The session will explain use cases and look at real examples of Sysmon successfully detection malicious behavior in the wild.

Amanda Berlin is the Lead Incident Detection Engineer for …

amanda berlin capabilities cases default detection detections discuss engineer hunting incident incident detection logging malicious malicious behavior microsoft session sysinternals sysmon testing threat threat hunting tool use cases