Loading video...

Video Failed to Load

Go Home

How DCOM lateral movement works. #ThreatHunting #DFIR

ACEResponder's profile picture

ACE Responder

17,902 subscribers

15,047 views • 11 months ago •via X (Twitter)

Science & Technology#ThreatHunting#DFIR
LIVE

Anya Rossi• Live Now

Private livecam show

4 Comments

DEATHCon's profile picture
DEATHCon11 months ago

Great list of resources for anyone getting started in #detectionengineering (h/t to Richard Akroyd for creating this list)

Nicolas Krassas's profile picture
Nicolas Krassas11 months ago

Python alternative to Mimikatz lsadump::dcshadow

Smukx.E's profile picture
Smukx.E11 months ago

How I ruined my vacation by reverse engineering WSC. TLDR: This post will briefly describe the journey implementing defendnot, a tool that disables Windows Defender by using the Windows Security Center (WSC) service API directly.

J⩜⃝mie Williams's profile picture
J⩜⃝mie Williams11 months ago

nah we cousins.

Related Videos

How lateral movement with WMI event subscriptions works. #ThreatHunting #DFIR
0:57

How lateral movement with WMI event subscriptions works. #ThreatHunting #DFIR

ACE Responder

20,128 views • 1 year ago

Detecting Remote Service Lateral Movement (formerly PsExec) #ThreatHunting #DFIR
5:23

Detecting Remote Service Lateral Movement (formerly PsExec) #ThreatHunting #DFIR

ACE Responder

21,063 views • 1 year ago

How domain fronting works. #ThreatHunting #DFIR
0:29

How domain fronting works. #ThreatHunting #DFIR

ACE Responder

11,002 views • 1 year ago

How the Bash reverse shell one liner works. #ThreatHunting #DFIR #hacking
0:40

How the Bash reverse shell one liner works. #ThreatHunting #DFIR #hacking

ACE Responder

14,844 views • 1 year ago

How the new Bad Successor dMSA domain takeover attack works. #ThreatHunting #DFIR
0:50

How the new Bad Successor dMSA domain takeover attack works. #ThreatHunting #DFIR

ACE Responder

13,473 views • 1 year ago

How the #XZUtils SSHD backdoor works. #ThreatHunting #DFIR #xzbackdoor Based on Anthony Weems POC
1:06

How the #XZUtils SSHD backdoor works. #ThreatHunting #DFIR #xzbackdoor Based on Anthony Weems POC

ACE Responder

33,572 views • 2 years ago

☁️ Pass-the-PRT: How attackers pivot to the cloud. #ThreatHunting #DFIR
0:48

☁️ Pass-the-PRT: How attackers pivot to the cloud. #ThreatHunting #DFIR

ACE Responder

12,325 views • 11 months ago

The Windows startup process tree. #ThreatHunting #DFIR
0:28

The Windows startup process tree. #ThreatHunting #DFIR

ACE Responder

43,048 views • 1 year ago

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam
0:51

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

ACE Responder

21,289 views • 10 months ago

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam
0:51

A buffer overflow attack visualized. #ThreatHunting #DFIR #redteam

ACE Responder

37,409 views • 2 years ago

How AS-REP Roasting works. 🔐 This animation demonstrates the more secure Kerberos pre-auth and contrasts it with an AS-REP roasting attack which abuses the 'Do not require Kerberos preauthentication' setting. #ThreatHunting #DFIR
1:07

How AS-REP Roasting works. 🔐 This animation demonstrates the more secure Kerberos pre-auth and contrasts it with an AS-REP roasting attack which abuses the 'Do not require Kerberos preauthentication' setting. #ThreatHunting #DFIR

ACE Responder

33,118 views • 2 years ago

📢Want to make cool animations like us? Check out our new free 🎞️Attack Animator tool: #DFIR #ThreatHunting #Pentesting #redteam #CyberSecurity #ACEResponder
2:21

📢Want to make cool animations like us? Check out our new free 🎞️Attack Animator tool: #DFIR #ThreatHunting #Pentesting #redteam #CyberSecurity #ACEResponder

ACE Responder

32,937 views • 1 year ago

Sonny Styles run defense. Block destruction, lateral movement, instincts, and elite tackling form
1:59

Sonny Styles run defense. Block destruction, lateral movement, instincts, and elite tackling form

Billy M

449,915 views • 4 months ago

Here's how to start improving lymphatic flow: 1) Movement Any form of exercise works great because your lymphatic system relies on muscle movement. Rebounding is an incredible and often overlooked method. Here's why it works (just 5-10min per day):
0:43

Here's how to start improving lymphatic flow: 1) Movement Any form of exercise works great because your lymphatic system relies on muscle movement. Rebounding is an incredible and often overlooked method. Here's why it works (just 5-10min per day):

Lyfespan

113,836 views • 1 month ago

Oklahoma LB commit Marcus James crafting lateral/downhill movement. 6’4 220 moving fluid 💯
0:21

Oklahoma LB commit Marcus James crafting lateral/downhill movement. 6’4 220 moving fluid 💯

#HCville

31,781 views • 1 year ago

Luka Doncic needs to work on his conditioning, mobility and lateral movement this summer.
1:09

Luka Doncic needs to work on his conditioning, mobility and lateral movement this summer.

Ball Don't Stop

33,686 views • 1 year ago

Florida State linebacker Chris Jones working downhill & lateral movement CHRIS JONES | FSU Football #NoleFamily #HCville
0:31

Florida State linebacker Chris Jones working downhill & lateral movement CHRIS JONES | FSU Football #NoleFamily #HCville

#HCville

17,975 views • 24 days ago