SCANdalous! (External Detection Using Network Scan Data and Automation)

🗓️ 13 Jul 2020 00:00:00Reported by FireEyeType

Using network scans and automation for external threat detection by Advanced Practices, derived from Mandiant Incident Response, Managed Defense, and product telemetry. Introduces the SCANdalous project, previously mentioned as "Scan’t Touch This

Source	Link
youtube	www.youtube.com/watch
github	www.github.com/aaronst/talks/blob/master/scanttouchthis.pdf
fireeye	www.fireeye.com/services/incident-response
fireeye	www.fireeye.com/resources/the-forrester-wave-managed-detection-and-response-q1-2021
fireeye	www.fireeye.com/resources/bypassing-network-restrictions-through-rdp-tunneling
fireeye	www.fireeye.com/resources/apt39-iranian-cyber-espionage-group-focused-on-personal-information
fireeye	www.fireeye.com/resources/overruled-containing-a-potentially-destructive-adversary
fireeye	www.fireeye.com/resources/pick-six-intercepting-a-fin6-intrusion
fireeye	www.fireeye.com/resources/mahalo-fin7-responding-to-new-tools-and-techniques
fireeye	www.fireeye.com/resources/the-cycle-of-adversary-pursuit