Adversary Emulation w/ Carlos Perez - PSW #789
Security Weekly Podcast Network (Audio)
00:00
Sysmon for Linux: How to Track Network Connections and Processes
As somebody who has had to deal with audit D, I love it. People set up everything and they ingest a ton of stuff, but they don't write anything around it. In the case of Sysmon for Linux, everything is in the Sys log. So do you have any application that can ship Sys log logs over to a sim or any other centralized place you can use that?
Play episode from 28:40
Transcript
