TryHackMe | Intro to Endpoint Security

In this room, we will introduce the fundamentals of endpoint security monitoring, essential tools, and high-level methodology. This room gives an overview of determining a malicious activity from an endpoint and mapping its related events. To start with, we will tackle the following topics to build a stepping stone on how to deal with Endpoint Security Monitoring. At the end of this room, we will have a threat simulation wherein you need to investigate and remediate the infected machines. This activity may require you first to understand the fundamentals of endpoint security monitoring to complete it. Now, let’s deep-dive into the basics of Endpoint Security! Core Windows Processes Before we deal with learning how to deep-dive into endpoint logs, we need first to learn the fundamentals of how the Windows Operating System works. Without prior knowledge, differentiating an outlier from a haystack of events could be problematic. To learn more about Core Windows Processes, a built-in Wind

In this room, we will introduce the fundamentals of endpoint security monitoring, essential tools, and high-level methodology. This room gives an overview of determining a malicious activity from an endpoint and mapping its related events. To start with, we will tackle the following topics to build a stepping stone on how to deal with Endpoint Security Monitoring. At the end of this room, we will have a threat simulation wherein you need to investigate and remediate the infected machines. This activity may require you first to understand the fundamentals of endpoint security monitoring to comp