Skip to main content
00:00/00:00
Lecture 66 of 81

Updating our Custom Detections - TCM Security, Inc. - 1920x1080 569K

Download Course (Free)

Course Content

0 / 81 completed
Section 1: Course Curriculum81 videos

Security Incident and Event Management - TCM Security, Inc. - 1920x1080 415K

7m

Welcome! - TCM Security, Inc. - 1920x1080 551K

7m

Security Operations - TCM Security, Inc. - 1920x1080 425K

11m

Role Variety - TCM Security, Inc. - 1920x1080 457K

5m

What Makes a Good Detection - TCM Security, Inc. - 1920x1080 387K

4m

MITRE ATT&CK Framework - TCM Security, Inc. - 1920x1080 448K

4m

The Detection Engineering Workflow - TCM Security, Inc. - 1920x1080 413K

13m

Technology Stack for Detection Engineering - TCM Security, Inc. - 1920x1080 404K

16m

Navigating the MITRE ATT&CK Matrix - TCM Security, Inc. - 1920x1080 583K

14m

Lab Overview - TCM Security, Inc. - 1920x1080 282K

3m

File Downloads - TCM Security, Inc. - 1920x1080 417K

3m

Importing ParrotOS into VirtualBox - TCM Security, Inc. - 1920x1080 427K

5m

Importing Windows 11 into VirtualBox - TCM Security, Inc. - 1920x1080 287K

3m

Ubuntu VirtualBox Installation - TCM Security, Inc. - 1920x1080 274K

5m

Creating a VM Snapshot - TCM Security, Inc. - 1920x1080 264K

3m

Disabling Windows Defender - TCM Security, Inc. - 1920x1080 381K

3m

Installing Zeek - TCM Security, Inc. - 1920x1080 384K

7m

Signing Up for Elastic Trial - TCM Security, Inc. - 1920x1080 188K

3m

Elastic Overview - TCM Security, Inc. - 1920x1080 377K

11m

Trial Extending and New Trials - TCM Security, Inc. - 1920x1080 344K

4m

Elastic Agent Installation - TCM Security, Inc. - 1920x1080 392K

7m

Confirming Zeek Logging With NMAP - TCM Security, Inc. - 1920x1080 481K

7m

Sysmon Overview - TCM Security, Inc. - 1920x1080 567K

3m

Testing Windows Elastic Agent Logging with EICAR File and PowerShell - TCM Security, Inc. - 1920x1080 444K

14m

Installing and Configuring Sysmon - TCM Security, Inc. - 1920x1080 381K

5m

Testing Sysmon Logging with EICAR File and PowerShell - TCM Security, Inc. - 1920x1080 392K

8m

Improving Our PowerShell Visibility - TCM Security, Inc. - 1920x1080 469K

5m

Attack Overview - TCM Security, Inc. - 1920x1080 292K

1m

Setting up the Attack - TCM Security, Inc. - 1920x1080 363K

7m

Performing the Attack - TCM Security, Inc. - 1920x1080 503K

7m

Creating our first Threshold Alert - TCM Security, Inc. - 1920x1080 316K

5m

Overview - TCM Security, Inc. - 1920x1080 162K

1m

Creating our first Query Alert - TCM Security, Inc. - 1920x1080 409K

16m

Alert Confirmation - TCM Security, Inc. - 1920x1080 403K

11m

Creating and Executing Attack - Part 1 - TCM Security, Inc. - 1920x1080 319K

7m

Reviewing the Attack - TCM Security, Inc. - 1920x1080 386K

13m

Creating and Executing Attack - Part 2 - TCM Security, Inc. - 1920x1080 364K

13m

Overview - TCM Security, Inc. - 1920x1080 211K

3m

Creating Alerts - TCM Security, Inc. - 1920x1080 398K

27m

Confirming our Detections - TCM Security, Inc. - 1920x1080 424K

14m

Staging our Attack - TCM Security, Inc. - 1920x1080 416K

22m

Confirming our Detections - TCM Security, Inc. - 1920x1080 403K

4m

Creating and Executing our Attack - TCM Security, Inc. - 1920x1080 312K

17m

Atomic Red Team Introduction - TCM Security, Inc. - 1920x1080 545K

7m

Installation - TCM Security, Inc. - 1920x1080 448K

4m

Creating our Detections - TCM Security, Inc. - 1920x1080 399K

31m

Running our First Atomic - TCM Security, Inc. - 1920x1080 430K

16m

TOML Overview - TCM Security, Inc. - 1920x1080 453K

8m

Writing our First Atomic - TCM Security, Inc. - 1920x1080 474K

9m

Setting up a Development Environment - TCM Security, Inc. - 1920x1080 284K

4m

Reviewing Elastic Rule TOML - TCM Security, Inc. - 1920x1080 468K

6m

Working with the Elastic Detection Rules Repo - TCM Security, Inc. - 1920x1080 484K

11m

Validating TOML Syntax Using Taplo - TCM Security, Inc. - 1920x1080 337K

7m

Creating an Elastic TOML Template - TCM Security, Inc. - 1920x1080 381K

10m

Working with Multiple TOML Files - TCM Security, Inc. - 1920x1080 467K

15m

Enforcing TOML Required Fields - TCM Security, Inc. - 1920x1080 386K

22m

Creating a MITRE Object in Python - TCM Security, Inc. - 1920x1080 565K

47m

Validating MITRE Data in our TOML - Part 1 - TCM Security, Inc. - 1920x1080 534K

21m

Converting and Validating our Detections - TCM Security, Inc. - 1920x1080 457K

9m

Validating MITRE Data in our TOML - Part 2 - TCM Security, Inc. - 1920x1080 477K

19m

Obtaining your API Key - TCM Security, Inc. - 1920x1080 324K

2m

Introduction - TCM Security, Inc. - 1920x1080 374K

1m

Pushing a Sample Rule - TCM Security, Inc. - 1920x1080 454K

11m

GET-ing Our First Rule and Managing Rule IDs - TCM Security, Inc. - 1920x1080 596K

14m

Writing a TOML to JSON Script - TCM Security, Inc. - 1920x1080 452K

25m

Updating our Custom Detections - TCM Security, Inc. - 1920x1080 569K

7mNow Playing

Overview - TCM Security, Inc. - 1920x1080 421K

10m

Working with our Custom Detections - TCM Security, Inc. - 1920x1080 589K

30m

GitHub Actions Introduction - TCM Security, Inc. - 1920x1080 336K

6m

Uploading our Detections and Code - TCM Security, Inc. - 1920x1080 447K

8m

Enforcing Validation Checks - TCM Security, Inc. - 1920x1080 357K

7m

Creating our TOML Validation Action - TCM Security, Inc. - 1920x1080 418K

15m

Syncing with Elastic - Part 1 - TCM Security, Inc. - 1920x1080 374K

9m

Overview - TCM Security, Inc. - 1920x1080 194K

2m

Syncing with Elastic - Part 2 - TCM Security, Inc. - 1920x1080 438K

25m

Converting our TOML to CSV - TCM Security, Inc. - 1920x1080 436K

21m

Converting TOML to MD - TCM Security, Inc. - 1920x1080 476K

22m

Converting our TOML to Att&ck Navigator .JSON - TCM Security, Inc. - 1920x1080 503K

20m

Creating Status Badges - TCM Security, Inc. - 1920x1080 354K

3m

Farewell - TCM Security, Inc. - 1918x1080 572K

4m

Creating our Metrics GitHub Action - TCM Security, Inc. - 1920x1080 470K

24m