Defensive Intel with Security Onion

Описание: Understanding the changes happening in your environment is critical to proactively reducing risk. In this session, we will cover a new proof of concept node in Security Onion that provides capabilities to track key areas:
This includes monitoring changes (diffs) to:

⦾ Organizational subdomains (subdomain enumeration)
⦾ Organizational TLS Certificate Registrations (Cert Transparency)
⦾ Organizational Public IP space
⦾ Public Internet for organizational keywords (Shodan)
⦾ Public cloud resources (buckets)

Speaker Bio(s)
Josh Brower has been crashing computers since his teens, and now feels fortunate to be doing it professionally. He has spent the last 15 years focusing on Information Security, particularly network and endpoint detection. He also enjoys teaching around InfoSec issues, especially to non-technical learners - helping them to understand how their actions in the digital world have real-world consequences, as well as how to proactively reduce the risk.