Dan Crossley, Sales Engineering Manager, LogRhythm and Imran Hafeez, LogRhythm Analytic Co-Pilot Consultant Live online January 13 at 10:00 a.m |
Click here to register |
Ransomware has evolved from a commodity malware strain primarily targeting home users, to a devastating and effective tool in the arsenal of advanced threat groups. As these human-operated cyberattacks continue to be a lucrative source of income for threat actors, ransomware will continue to pose a major threat to many organisations. Dan Crossley, Sales Engineering Manager, LogRhythm and Imran Hafeez, LogRhythm Analytic Co-Pilot Consultant, discuss: • The anatomy of a human operated ransomware attack • What additional log data can be enabled within a Windows environment to allow better tracing of threat actor activity, including: o Process creation with command-line execution o PowerShell logging o Microsoft Sysmon |
Recent Comments