Corelight: How to find lateral movement with Corelight and MITRE ATT&CK
Register today to join us for this live webinar on Tuesday, May 21st at 10 am GMT / 11 am CET.
Corelight drives broad coverage across the MITRE ATT&CK TTPs using an approach focused on visibility and explainable, evidence-based analytics. The foundation of this approach is Zeek® network telemetry, data that captures activity across a broad set of network protocols and fuels advanced
In this webinar you will learn how to:
- Find pass the hash attacks where attackers authenticate without the user's cleartext password
- Spot attempts to gain unauthorized interactive access to workstations and servers via RDP
- Monitor FTP for potential transferers of malicious toolkits into your environment