Скачать или смотреть Threat Hunting and Incident Response with Osquery | TryHackMe

🚀 Cyber Security Certification Notes
https://shop.motasem-notes.net/collec...
🚀OR Certification Notes with Cheat Sheets
https://buymeacoffee.com/notescatalog...
💡Cyber Security Notes | Membership Access
https://buymeacoffee.com/notescatalog...
🔥Download FREE Cyber Security 101 Study Notes
https://buymeacoffee.com/notescatalog...
****
In this video walkthrough, we demonstrated incident response and investigation using osquery on Windows and Linux endpoints.
#osquery
#cybersecurity
*********
Receive Cyber Security Field Notes and Special Training Videos
https://buymeacoffee.com/notescatalog...
Writeup
https://motasem-notes.net/threat-hunt...
Room Link
https://tryhackme.com/room/osqueryf8
********
Store
https://buymeacoffee.com/notescatalog...
Patreon
  / motasemhamdan  
LinkedIn
[1]:   / motasem-hamdan-7673289b  
[2]:   / motasem-eldad-ha-bb42481b2  
Instagram
  / motasem.hamdan.official  
Google Profile
https://maps.app.goo.gl/eLotQQb7Dm6ai...
Twitter
  / manmotasem  
Facebook
  / motasemhamdantty  
****
0:00 Introduction to OSQuery
0:14 Overview of OSQuery Framework
0:26 Installing OSQuery on Windows, Linux, and Mac
0:50 Using OSQuery for Incident Investigation
1:13 Prerequisite Knowledge: SQL for OSQuery
2:04 Differences Between OSQuery and Other Monitoring Tools
2:28 Integrating OSQuery with Sysmon
2:43 OSQuery for Threat Hunting and Security Analysis
3:05 Getting Started with OSQuery on TryHackMe
3:31 Exploring OSQuery Commands and Tables
4:44 Querying Installed Programs Using OSQuery
5:36 Filtering SQL Outputs in OSQuery
6:13 Finding OSQuery Version and Default Output Mode
7:07 Using Meta Commands to Customize Outputs
8:04 Exploring OSQuery Schema Documentation
9:19 Querying Windows Services Using OSQuery
10:25 Filtering Results Using SQL `LIKE` Clause
12:17 Using Documentation to Query OSQuery Version
12:59 Answering Questions About OSQuery Tables
13:36 Counting Compatible Tables for Windows and Linux
14:49 Identifying Double-Compatible Tables in OSQuery
15:00 Writing SQL Queries to Retrieve Specific Fields
15:48 Understanding and Querying User Accounts
16:25 Constructing Complex SQL Queries in OSQuery