-: In this section of the course, 2 2
we're going to discuss how we can detect 3 3
and analyze lateral movement 4 4
and pivoting indicators of compromise, known as IOCs. 5 5
Now we're again going to be focused on domain one, 6 6
Security Operations, in this section of the course 7 7
and specifically, objective 1.2. 8 8
Objective 1.2 states that given a scenario, 9 9
you must be able to analyze indicators 10 10
of potentially malicious activity 11 11
and we're going to be focused specifically 12 12
on the lateral movement and pivoting indicators 13 13
of compromise in this section of the course. 14 14
Now as we move through this section, we're going to start 15 15
out with a look at what lateral movement 16 16
and pivoting really are and how we can detect them 17 17
to be able to identify malicious activity 18 18
within our workstations and our servers. 19 19
Then we're going to move into some common IOCs 20 20
or indicators of compromise 21 21
as well as all the different types 22 22
of them and how we can identify them. 23 23
This includes things like identifying attacks 24 24
like passing the hash, using a golden ticket, 25 25
or other lateral movement and pivoting techniques. 26 26
Finally, we're going to take a short quiz to see 27 27
what you learned during this section of the course 28 28
and review each of those questions fully 29 29
to ensure you can explain why the right answers are right. 30 30
So let's go ahead and analyze our workstations 31 31
and servers to see if we find any lateral movement 32 32
and pivoting indicators of compromise 33 33
across your systems inside this section of the course.