Threat Hunting via DNS

My SANS @Mic talk Threat Hunting via DNS

Link to the Youtube video.

Here are the links:

• DNS New World Order: QuadX! DoH! DoT! Da Fuq?
• Paul Vixie on DoH
• Firefox continues push to bring DNS over HTTPS by default for US users
• Firefox to enable DNS-over-HTTPS by default to US users
• Firefox HTTP logging
• Tutorial to setup your own DNS-over-HTTPS (DoH) server
• DNS-over-HTTPS with Pi-Hole
• https://github.com/MarkBaggett/domain_stats
• https://www.arin.net/resources/registry/whois/rdap/

CISSP Cram Session

Here are the slides for my CISSP Cram Session webcast.



The webcast is available here: http://sans.org/u/140g

BSides Halifax

Here's a link to my BSides Halifax talk Threat Hunting via DNS

Here's a link to my SANS Miami 2020 keynote talk:

Threat Hunting via Sysmon

Maine DEFCON 207

Here's a copy of my DEFCON 207 talk Threat Hunting via Windows Event Logs

DeepBlueCLI GitHub site: https://github.com/sans-blue-team/DeepBlueCLI

Threat Hunting via Windows Event Logs

Here's a copy of my SANS Security West keynote Threat Hunting via Windows Event Logs

Here's a copy of my Atlantic Security Conference talk: Build it Once, Build it Right: Architecting for Detection