Specialized Hunts: Threat Hunting within Mail Servers

Focused View

Laurentiu Raducu

56:22

101 View

Exercise Files

specialized-hunts-threat-hunting-mail-servers.zip

Module 1 - Course Overview

1. Course Overview.mp4

01:03

Module 2 - Remote Email Collection (T1114.002)

1. Introduction.mp4

02:06

2. Perform Remote Email Collection Using MailSniper.mp4

06:07

3. Monitoring Using ELK Stack.mp4

05:33

4. Identifying Remote Email Collection Threats.mp4

08:18

Module 3 - Endpoint Denial of Service (T1499.002)

1. Analyzing a DoS Attack Script.mp4

07:16

2. Monitoring Network Traffic Content.mp4

05:33

3. Filtering Network Traffic.mp4

04:58

Module 4 - Internal Spearphishing (T1534)

1. Analyzing Malicious Payloads in Emails.mp4

05:53

2. Serializing Email Data.mp4

04:29

3. Identifying Phishing Attempts Using ElasticSearch.mp4

05:06

Description

This course will teach you how you can perform threat hunting analysis on email servers.

What You'll Learn?

Email Servers are crucial for the data flows within an organization. Finding security vulnerabilities before the attackers do is essential for protecting the sensitive data transmitted over emails. In this course, Specialized Hunts: Threat Hunting within Mail Servers, you will learn techniques and methods for improving your skill set in threat hunting. Throughout the course, you will get to know how to leverage different tools in performing threat hunting analysis on Email servers. First, you will learn how to find vulnerabilities related to email account enumeration. Next, you will explore how to identify if an email server is exposed to denial of service attacks. Finally, you will discover how you can leverage ElasticSearch to diagnose malicious activity in the messages reaching an email server. By the end of this course, you will improve your skill set in threat hunting, as well as your ability to find indications of compromise in email servers.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

Data Analysis

Email Productivity Hacks

Laurentiu Raducu

Instructor's Courses

It all began in highschool, when Laurentiu first started his path in the computer science journey. Initially he started with C++, and fell in love quickly with the prospect of learning to develop software. Thanks to his passion for chess, his first computer program was a console-based ASCII chess game developed in C++. After a while, during university, Laurentiu started to experiment with other OOP programming languages, like Java, Kotlin or Python. He started to play with different tech stacks and frameworks, developing and publishing software apps for Android devices. However, things started to change when Laurentiu decided to explore the world of cybersecurity. He started to go to security hackathons, CTF events, and completed numerous challenges on websites like overthewire.org. At the same time, he realized it might be a good idea to document his journey using short videos, and then he thought that he can become a lecturer, helping people learn more about tech.

Pluralsight

View courses Pluralsight

Pluralsight, LLC is an American privately held online education company that offers a variety of video training courses for software developers, IT administrators, and creative professionals through its website. Founded in 2004 by Aaron Skonnard, Keith Brown, Fritz Onion, and Bill Williams, the company has its headquarters in Farmington, Utah. As of July 2018, it uses more than 1,400 subject-matter experts as authors, and offers more than 7,000 courses in its catalog. Since first moving its courses online in 2007, the company has expanded, developing a full enterprise platform, and adding skills assessment modules.