本页内容尚不支持所选语言。Elastic 正在不断努力,以实现对多种语言内容的支持。感谢您在此期间给予的耐心与陪伴!

On-demand webinar

Finding Bad Guys Using Math and Statistics

Hosted by:

Jared McQueen

Jared McQueen

Principal Systems Engineer

McQueen Solutions

Overview

Using enrichment to turn low-value events into high-value events. Enrichment techniques are geoip, tld extraction, length, and entropy. I then demonstrate how to find anomalous stuff like: drive-by malware / malicious web browsing Command and Control (C2) Communications DNS tunneling Data Exfiltration

Video thumbnail