October 2019 – Anet Canada

October 2019

SIEM Domain Generation Algorithm emotet Log Management malware Process Masquerade Profiler siem SureLog ThreatHunting UEBA

Hunting Malware and Viruses by Detecting Random Strings Using SureLog SIEM

There are malware tools available that can create Windows services with random service

SIEM malware Process Masquerade siem SureLog ThreatHunting UEBA virus

Hunting Critical Process Masquerade Using SureLog SIEM

A popular technique for hiding malware running on operating systems is to give

SIEM dga Domain Generation Algorithm Log Management siem SureLog UEBA

Domain Generation Algorithm (DGA) Detection in SureLog

DNS is probably the best source of data for detecting an attacker’s command