What Security Logs Tell You About Attackers in Your Network - Seguridad Mania.com - España y América Latina

Preventing attackers from gaining control of network endpoints is difficult. Your preventative controls might stop such an event, but defence-in-depth best practices recommend a multi-layered security approach to protect your organisation. In this webcast, Seth Goldhammer, Director of Product Management at LogRhythm, joins Randy Franklin Smith, Windows Security subject matter expert, to discuss how to detect attackers in various stages of the Cyber Attack Lifecycle. The duo examines Windows and Windows Firewall events including: * 4798—A user's local group membership was enumerated * 4799—A security-enabled local group membership was enumerated * 4627—Group membership information * 6416—A new external device was recognised by the system They also show how LogRhythm’s analytics can recognise progression along the Cyber Attack Lifecycle, while increasing risk scoring with each progression, and how LogRhythm can infer additional context about a user during analysis. Watch now to learn how to take your security operations to the next level.