Uncovering Windows Defender Real-time Protection History with DHParser | allinfosecnews.com

w

Jan. 20, 2022, midnight |

SANS Blog www.sans.org

DHParser is an excellent way to gather more complete information on the nature of threats picked up by Windows’ native AV software. Hopefully, the brief introduction to the DetectionHistory artifact has inspired you to dig deeper into what data Windows Defender’s logs can offer to DFIR professionals.

defender history protection windows windows defender

More from www.sans.org / SANS Blog

SA

The Ripple Effect: NIS2's Impact on Cybersecurity Practices Across the EU 21 hours ago | www.sans.org

blog compliance cybersecurity cybersecurity practices +5

SA

Following the Trail of Threat Actors in Google Workspace Audit Logs 4 days, 21 hours ago | www.sans.org

audit challenge data data sources +17

SA

Enhancing Your Cyber Defense: Comparing Simulations and Tabletop Exercises 6 days, 21 hours ago | www.sans.org

blog cyber cyber defense defense +4

SA

Aviata Cloud Solo Flight Challenge 1 week ago | www.sans.org

challenge cloud cloud security flight +5

SA

Beyond Compliance: Leveraging NIS2 for Enhanced Cyber Resilience and Leadership Accountability 1 week, 1 day ago | www.sans.org

accountability beyond blog compliance +5

SA

The Quest to Summit | SANS ICS Security Summit 2024 2 weeks ago | www.sans.org

ics ics security quest register +4

SA

4 Trends That Will Define the CISO's Role in 2024 2 weeks, 6 days ago | www.sans.org

ciso discussions experts leaders +6

SA

A Visual Summary of SANS New2Cyber Summit 2024 3 weeks ago | www.sans.org

blog cybersecurity cybersecurity blog sans +1

SA

4 Key Cybersecurity Trends to Watch in 2024 3 weeks, 1 day ago | www.sans.org

cisos cybersecurity cybersecurity trends infographic +9

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Advisory Red Consultant

@ Security Risk Advisors | Philadelphia, Pennsylvania, United States

View on infosec-jobs.com

Cyber Business Transformation Change Analyst

@ National Grid | Warwick, GB, CV34 6DA

View on infosec-jobs.com

Cyber Security Analyst

@ Ford Motor Company | Mexico City, MEX, Mexico

View on infosec-jobs.com

Associate Administrator, Cyber Security Governance (Fort Myers)

@ Millennium Physician Group | Fort Myers, FL, United States

View on infosec-jobs.com

Embedded GSOC Lead Operator, Events

@ Sibylline Ltd | Seattle, WA, United States

View on infosec-jobs.com