DeepBlueCLI: a PowerShell Module for Hunt Teaming via Windows Event Logs

Here's a video of my 2016 DerbyCon talk DeepBlueCLI. Thank you, @irongeek_adc

A copy of my 2016 DerbyCon talk DeepBlueCLI slides:



Github site: https://github.com/sans-blue-team/DeepBlueCLI

Link to my Quality Not Quantity talk, which inspired DeepBlueCLI.

C2 Phone Home: Leveraging SecurityOnion to Identify Command and Control Channels

Video of the talk

Links from my Security Onion Con 2016 talk:

C2 Phone Home: Leveraging SecurityOnion to Identify Command and Control Channels

Link to all pcaps, Bro logs and Whitecap Snort Rules