SANS Protects: The Network

SANS Protects: The Network

SANS Protects is a series of papers focused on the most prevalent threats to specific, critical components of your environment as well as actions you can take to mitigate those threats and thwart threat actors.

In this webcast, sponsored by Corelight, SANS Certified Instructor Matt Bromiley will examine current, prevalent network threats and how adversaries use them to take advantage of, and maintain footholds in, victim environments.

Some of the threats we investigate include:

  • The ease of lateral movement in unsegmented networks
  • Unsecured or weakly configured remote access tools
  • How adversaries hide their network traffic and manage to steal data
  • Abuse of networks protocols, such as DNS, to hide among often uninspected traffic