How To Detect Remote Desktop Protocol tunneling over SSH
How RDP tunnelled over SSH shows up in logs and network traffic, and how to detect it.
11 min
Category: Detect
Posts
3 entriesDealing With Advanced Windows Defender Bypass Attempts
Detecting C2 traffic and fileless malware when Defender is bypassed, and what to harden on the endpoint and in PowerShell.
An Introduction To Security Monitoring With Open Source Software
Security monitoring does not need a SOC contract or a commercial SIEM. What open source software gets you when you start from zero visibility.