Investigation: Tracing Intruder's Tracks in Your Web Apps

#6 Interactive Webshell Investigation: Tracing the Intruder's Tracks in Your Web Apps

August 17, 2023

Join us for Kevin Zuk's second episode where he'll walk you through his process of investigating webshells. You'll learn how to identify webshells in Webserver logs with his tips and real lab examples of how a webshell is installed, executed and used.

This session will help you deduce when a webshell may be in the process of being installed/utilized, and how to get ahead of it. If you love getting hands-on, and into the details- this session is for you!

Kevin Zuk

Threat Hunting Engineer, Anvilogic

Additional Resources

Launch the Snowflake Lab

Anvilogic for Snowflake

White Paper: Forge Threat Detection Success at the Pyramid Apex

Podcast

More Episodes

November 7, 2024

Get Smarter with Entity Correlation + RBA in Sentinel

Join Detection Engineers Micah Funderburk and Alex Temaly as they break down their RBA success story in Sentinel—packed with insights, tips, and the best moves to help your SOC catch threats faster and smarter.

Watch Now and Get the Giveaway

October 31, 2024

#35 So What Does a Detection Engineer Actually Do?

Join Alex and Chris Black, Senior Detection Engineer at NBC Universal, as they take you inside the dynamic world of detection engineering and explore why it just might be the coolest job you’ve never heard of–our parents for sure never have.

Watch Now and Get the Giveaway

October 24, 2024

#34 The Threat Hunting & Alerting Secret Sauce

In this episode, Alex sits down with a seasoned cybersecurity expert from Expel Security to explore what makes a good alert and how to avoid drowning in a sea of irrelevant notifications.

Watch Now and Get the Giveaway