Purple Team.

Logstash, Meet Sentinel… Sentinel, Meet Logstash!

Detecting Pass-the-Ticket (PtT) Attacks

PsExec. I thought we were friends

What the Heck PsExec!

Using Kibana and Packetbeat to map DNS queries

An intro into abusing and identifying WMI Event Subscriptions for persistence