[SANS Institute and Anvilogic Present] The 2025 State of Detection Engineering Report
Join the waitlist
Skip to main content
Interactive Webshell Investigation: Tracing the Intruder's Tracks in Your Web Apps

#6 Interactive Webshell Investigation: Tracing the Intruder's Tracks in Your Web Apps

August 17, 2023

Get the Giveaway

Join us for Kevin Zuk's second episode where he'll walk you through his process of investigating webshells. You'll learn how to identify webshells in Webserver logs with his tips and real lab examples of how a webshell is installed, executed and used.

This session will help you deduce when a webshell may be in the process of being installed/utilized, and how to get ahead of it. If you love getting hands-on, and into the details- this session is for you!

Episode Host Headshot
Kevin Zuk
Threat Hunting Engineer, Anvilogic

Additional Resources

Launch the Snowflake Lab
Anvilogic for Snowflake
White Paper: Forge Threat Detection Success at the Pyramid Apex
Podcast

More Episodes

Top 10 KQL Queries Every DE Should Know

December 12, 2024

#39 Top 10 KQL Queries Every DE Should Know

In this episode, Alex sits down with Sergio Albea, an accomplished Threat Hunter, Researcher, User Behavior Analyst, and Senior Cloud Security Engineer/Architect, to share a must-have resource for detection engineers: the Top 10 KQL Queries of 2024.

Watch Now and Get the Giveaway
Typo Trouble: How LLMs Can Outsmart TYPOSQUATTING Attacks

December 5, 2024

#38 Typo Trouble: How LLMs Can Outsmart TYPOSQUATTING Attacks

In this episode, we chat with the brilliant Mike Hart, a data scientist with a mission: to outsmart the sneaky world of typosquatting attacks. Just in time for the holiday shopping frenzy, we explore how his open-source project leverages LLMs to safeguard users from clicking on malicious look-alike links.

Watch Now and Get the Giveaway
Maturing SecOps with Detection-as-Code

November 21, 2024

#37 Maturing SecOps with Detection-as-Code

Ever feel like detection rule management is stuck in the Stone Age? This episode with Wade Wells a DE powerhouse trailblazing DaC in the industry is all about leveling up with Detection-as-Code—a game-changing way to manage threat detection that ditches the manual grind. We’ll break down how using code and automation can bring collab, speed, and structure to your detection engineering game.

Watch Now and Get the Giveaway