Talking Tradecraft @ Pluralsight: A Technical Dive into the Log4Shell Exploit
|
This course is a technical post-mortem of the Log4Shell vulnerability, discussing the impact that has been seen to date, new developments in the remediation, and what to expect in the future.
This course is a post-mortem of the Log4Shell vulnerability, discussing the impact that has been seen to date, new developments in the remediation, and what to expect in the future. First you will learn about the different effected versions and CVE’s that have been assigned to this category of vulnerabilities associated with the Log4J library. Next, we will cover different attacks that have been seen in the wild and how attackers can leverage this exploit in a full attack chain. Last, we will cover a technical walkthrough of the exploit it self and some technical mitigations you can use in any environment.
Author Name: Aaron Rosenmund
Author Description:
Aaron M. Rosenmund is a cyber security operations subject matter expert, with a background in federal and business defensive and offensive cyber operations and system automation. Leveraging his administration and automation experience, Aaron actively contributes to multiple open and closed source security operation platform projects and continues to create tools and content to benefit the community. As an educator & cyber security researcher at Pluralsight, he is focused on advancing cyber secur… more
Table of Contents
- Log4j In-depth Overview
5mins - How Is Log4j Being Used?
13mins - Demo: Log4j
32mins - Prevention
5mins
User Reviews
Be the first to review “Talking Tradecraft @ Pluralsight: A Technical Dive into the Log4Shell Exploit”
Related Products
Command and Control with Sliver
Are you looking for a versatile command and control server with implants for almost every architecture? In this course, you will learn Command and Control using Sliver.
Network Pen Testing with Python
A thorough assessment of an environment requires simulating a high volume of offensive techniques within a fixed time frame. This course will teach you how to automate penetration testing with Python.
Advanced Cyber Defense Analysis with Wireshark
As a member of the security team, you will need to have the skills required to help with mitigating potential attacks. This course will prepare you to use the Wireshark utility to help in this mitigation.
Web Application Penetration Testing with Burp Suite
Want to learn how to use Burp beyond just the capture of requests and responses? This course helps get you up and running quickly to take advantage of all the functionality in the Burp Suite.
Social Engineering: Executive Briefing
Social engineering poses a potential threat to not only employees at an organization, but also directly to company executives. In this executive briefing, we will look at understand what social engineering and how you can protect yourself from it.
IDA Pro Concepts and Basic Functionality
The ability to reverse engineer binary code is accomplished through the use of complex tools which translate machine code. This course will teach you everything you need to know about IDA Pro to get started using this indispensable tool.
There are no reviews yet.