Loading…
BSidesSF 2020 has ended
Back To Schedule
Saturday, February 22 • 12:45pm - 3:00pm
Signature and Socket Based Malware Detection with osquery and Yara

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.
Event held offsite, location to be announced (NOT METREON!)
Registration at https://bsidessf.regfox.com/2020 REQUIRED (cannot be reserved with Sched)

In this interactive session, students will learn how to use osquery and Yara to detect malware on Windows, Mac, Linux, and containerized environments. Detection methods will include whitelist and blacklist network socket based approaches as well as filehash and Yara signature based approaches.

There are no prerequisites to course. Some experience with osquery or SQL is
helpful, but also not required
Speakers
JW

Julian Wayte

Julian Wayte is a Security Solutions Engineer for Uptycs. In this role, he helps organizations architect security solutions - based on endpoint telemetry and automated workflows – in order to solve a variety of security use cases. Julian loves working with and teaching osquery... Read More →

Sponsors
avatar for HashiCorp

HashiCorp

Workshop

Saturday February 22, 2020 12:45pm - 3:00pm PST
Terraform HashiCorp SF Office 101 2nd St #700, San Francisco, CA 94105
  Workshop

Attendees (1)