Forewarned is Forearmed: Detecting Windows Registry Attacks

About this webinar

Recorded: August 24, 2018

You probably know that hackers have been using the registry’s Run and RunOnce keys for decades to automatically start their malware when a user logs on.  While those keys are still being used in attacks, there are many others you need to know about as well. In this webinar, Windows security expert Randy Franklin Smith shines a light into several dark corners of the registry that bad guys are now exploiting.

In particular, we’ll review how the bad guys are exploiting the registry for privilege elevation, and the most recent way bad guys are leveraging the registry — as a storage location for their code, making their malware file-less. 

In this webinar, Randy will show:

  • Where to find up-to-date and complete lists of registry keys used for persistence – a list that keeps growing as years go by
  • Utilities for monitoring the registry
  • How to use Windows Auditing and the Security Log to monitor the registry
  • How bad guys hide code in the registry
  • Ways bad guys have elevated their privileges via vulnerable registry keys
  • How bad guys have injected malicious DLLs into legitimate processes via other registry keys
Hosted by
Jeff Melnick,
Solutions engineer
Randy Franklin Smith,
CEO, Monterey Technology Group, Inc.

How Attackers Exploit Office 365 Vulnerabilities

Office 365 has become the platform of choice for document collaboration and sharing. If you're using Office 365 or planning to migrate there, understanding the types of security attacks you can expect is imperative. Microsoft provides tools for testing your end users by simulating some of the most common attacks, so you can educate them as part of your broader defense strategy.

In this webinar, you'll discover:

  • Unconventional Office 365 attack techniques
  • How to test your end users
  • How to spot attacks in early stages so you can take steps to prevent a breach
  • How you can keep your executives mailboxes safe
17
October
10:00am PDT
17 October, 10:00am PDT
Register Now