Project Obsidian: The Importance of Sysmon Telemetry for Investigations
Project Obsidian details configuring Sysinternals Sysmon to capture critical process creation, network connection, and DLL load events for investigations.
Summary
Malware Analysis and Reverse Engineering
This talk covers techniques for analyzing malicious software and firmware code. The presentation discusses tools, methodologies, and approaches for understanding executable behavior, identifying vulnerabilities, and analyzing obfuscated code.
(AI summary — Claude Haiku)
Related talks
Blue Team Village·59 min
Matt Scheurer
Matt Scheurer shares battle-tested incident response methodologies, telemetry sources, and fast containment strategies for enterprise defenders.
Blue Team Village·36 min
Defenders explore unconventional log analysis techniques, correlating seemingly unrelated telemetry sources to uncover stealthy enterprise intrusions.
Creator Stage·43 min
Josh Pyorre
Explores building detection signatures from network transaction timing intervals to identify malicious command-and-control communication.