Resources¶
Blogs¶
Presentations¶
- BSides DFW 2019: ATT&CKing Koadic with EQL (slides)
- BlackHat 2019: Fantastic Red-Team Attacks and How to Find Them (slides, blog)
- BSides SATX 2019: The Hunter Games: How to Find the Adversary with EQL (slides)
- Circle City Con 2019: The Hunter Games: How to Find the Adversary with EQL (slides)
- Atomic Friday: Endgame on EQL (slides, notebook)
- MITRE ATT&CKcon: From Technique to Detection
Additional Resources¶
- Atomic Red Team
- Microsoft Sysmon
- MITRE ATT&CK™
- Event Query Language (docs, code, twitter)
- EQL Analytics Library (docs, code)