Security Incident Using Huntress & SentinelOne: What Was Found & What Was Missed 🚨 [YouTube Release]

Additional Resources:

Huntress Demo & Review 2022

SentinelOne Review and Malware Rollback Demo.

Threat reports

The FRP on GitHub

S1 Behavioral page

Huntress Blog regarding their product

Connecting With Us

Lawrence Systems Shirts and Swag

β–ΊπŸ‘• https://teespring.com/stores/lawrence-technology-services

AFFILIATES & REFERRAL LINKS

Amazon Affiliate Store
:shopping_cart: Lawrence Systems's Amazon Page

Ubiquiti Affiliate
:shopping_cart: Ubiquiti Store

All Of Our Affiliates that help us out and can get you discounts!
:shopping_cart: https://www.lawrencesystems.com/partners-and-affiliates/

Gear we use on Kit
:shopping_cart: Kit

Try ITProTV free of charge and get 30% off!
:shopping_cart: https://go.itpro.tv/lts

Use OfferCode LTSERVICES to get 10% off your order at
:shopping_cart: Tech Supply Direct - Premium Refurbished Servers & Workstations at Unbeatable Prices

Digital Ocean Offer Code
:shopping_cart: DigitalOcean: AI-Powered Unified Inference Cloud Infrastructure

HostiFi UniFi Cloud Hosting Service
:shopping_cart: HostiFi - Fast and Reliable UniFi in the Cloud

Protect you privacy with a VPN from Private Internet Access
:shopping_cart: https://www.privateinternetaccess.com/pages/buy-vpn/LRNSYS

Patreon
:money_bag: https://www.patreon.com/lawrencesystems

:stopwatch: Time Stamps :stopwatch:
00:00 :play_button: Security Incident Feb 2023
02:45 :play_button: Huntress Incident Report
03:29 :play_button: Virustotal results
04:31 :play_button: Fast Reverse Proxy
04:53 :play_button: How It Was Found
06:41 :play_button: Threat Research
08:35 :play_button: Using SentinelOne Deep Visibility For Threat Hunting
09:52 :play_button: Why SentinelOne Did not trigger?
11:45 :play_button: SentinelOne False Positive
13:12 :play_button: Closing Thoughts

#cybersecurity #security #threathunting