Open Threat Research - The Hunt for Red Apples: How to threat hunt and emulate Ocean Lotus on macOS


Open Threat Research (OTR) is a community movement that brings together passionate security researchers from different backgrounds and levels of expertise that have a goal in common to collaborate, share, and contribute to open source initiatives! A group of researchers got together to develop a new project: "The Hunt For Red" Threat Hunt Workshop Series. To kick off the series we concentrated on MacOs and emulated a known adversary: Ocean Lotus. In this talk we will share the ups and downs of emulating an adversary, our approach and methodology. Leveraging the Attack Life Cycle and Mitre ATT&CK framework we will share threat hunting queries and detection ideas for each stage we emulated. Finally, after the session, we will unveil and open source the final project. Carlos R, Threat Hunting Operations Lead, Yahoo - https://twitter.com/plugxor Ben Bornholm, DART Engineer, Dropbox - https://twitter.com/cptofevilminion View upcoming Summits: https://ift.tt/CTBwLyA Download the presentation slides (SANS account required) at https://ift.tt/aTXM5sS #ThreatHuntingSummit #OceanLotus

For more hacking info and tutorials visit: https://ift.tt/Ym04aZs

Hello and welcome to the temple of cybersecurity. Now you are watching Open Threat Research - The Hunt for Red Apples: How to threat hunt and emulate Ocean Lotus on macOS published at November 27, 2021 at 02:15AM. If you are looking for tutorials and all the news about the world of hacking and computer security, you have come to the right place. We invite you to subscribe to our newsletter in the box at the top and to follow us on our social networks:

NFT store: https://mintable.app/u/cha0smagick
Twitter: https://twitter.com/freakbizarro
Facebook: https://web.facebook.com/sectempleblogspotcom/
Discord: https://discord.gg/5SmaP39rdM

We also invite you to visit the other blogs in our network, where you can find something for every taste.
https://elantroposofista.blogspot.com/
https://gamingspeedrun.blogspot.com/
https://skatemutante.blogspot.com/
https://budoyartesmarciales.blogspot.com/
https://elrinconparanormal.blogspot.com/
https://freaktvseries.blogspot.com/


Ignore tags:
#hacking,#infosec,#tutorial,#bugbounty,#threat,#hunting,#pentest,#hacked,#ethical,#hacker,#cyber,#learn,#security,#computer,#pc,#news

Comments