We’re an information security practitioner-focused company dedicated to providing impactful, high quality training and education. Founded by @chrissanders88.
Gainesville, GA
Joined January 2015
- Tweets663
- Following7
- Followers3.5K
- Likes164
Applied Network Defense retweeted
This one is worth the price of admission just for the Windows process genealogy overview alone. Must-have knowledge for DF, SOC, and IR.
In our latest lesson, @DunhamSec demonstrates tools and techniques for identifying process tree anomalies, with a bonus overview of typical Windows process genealogy!
ALT Reviewing typical Windows process genealogy to make it easier to spot anomalies.
Applied Network Defense retweeted
How about a surprise sale as we wind down summer?
All Applied Network Defense online courses are 20% off today and tomorrow.
I'll also pick five random folks who buy a course to win a free six-month subscription to my Analyst Skills Vault.
networkdefense.io
ALT All courses 20% off. Expires at Midnight ET on Aug 7th. Use code SUMMERCAMP at checkout. https://networkdefense.io
Applied Network Defense retweeted
🧰 Thank you to @NetworkDefense for your continued support of #BSidesAugusta 2025. Your efforts help us empower more defenders!
#IncidentResponse #BlueTeam #InfoSec #CyberSecurity
Applied Network Defense retweeted
I’ve always thought these SSH tunneling techniques were confusing to follow at times, but Dan does a tremendous job simplifying the idea. Lots of practical demos. A must understand for attackers and defenders, both.
Applied Network Defense retweeted
My `Detection Engineering with Sigma` course is on sale for 25% off for the next few days. This is the only sale we do all year. Use code MAKEMOREBISCUITS at checkout. 🤣
networkdefense.io/library/de…
@sigma_hq @NetworkDefense #Sigma #InfoSec
Applied Network Defense retweeted
In this Analyst Skills Vault video I looked at a #Stealc malware sample that uses an app-bound encryption bypass against Chrome 127+.
#malware
Want to learn malware analysis? We just added @ForensicITGuy 's new case study of a dynamic analysis of the Stealc malware to our Analyst Skills Vault.
ALT A screenshot demonstrates using ProcDOT to examine Stealc execution, along with the title "Stealc Dynamic Malware Analysis (Part 1 - Host)"
Applied Network Defense retweeted
A lot of the tutorials on JQ are overly complex and not really focused on the investigative use case, so we made this. Enough to get you started and into your most common use cases when dealing with JSON data.
Applied Network Defense retweeted
Today's Training Tuesday Highlight is @NetworkDefense founded by @chrissanders88!
They offer several courses including:
- CyberChef for Security Analysts
- Splunk for Security Analysts
- ELK for Security Analysts
- Practical Packet Analysis
- Investigation Theory
- YARA for Security Analysts
- Practical Threat Hunting
and more!
I recently completed the hands-on CyberChef for Security Analysts course taught by @mattnotmax and highly recommend it!
It covers:
- CyberChef Basics
- Data Formatting, Parsing, and Manipulation
- Regular Expressions
- Log File Analysis
- Digital Forensics & Data Verification
- Malware Analysis
and more!
There is also an Analyst Skills Vault with helpful tutorials on various topics including data acquisition and analysis, malware analysis, tools, and breakdowns of attacks.
In addition, @chrissanders88 has a FREE The Cuckoo's Egg Decompiled Course. Check it out here: chrissanders.org/training/cu…
Links
Applied Network Defense Courses: networkdefense.io/p/course-l…
Analyst Skills Vault: networkdefense.co/skillsvaul…
CyberChef Recipes by @mattnotmax, the CyberChef for Security Analysts Instructor: github.com/mattnotmax/cyberc…
#DFIR #IncidentResponse #MalwareAnalysis #ThreatHunting #DFIRDivaTTH
Applied Network Defense retweeted
We're doing a one-day-only flash sale today. All my courses are 20% off.
Full Course Catalog: networkdefense.io.
Use discount code WAFFLEHOUSE at checkout.
I was thinking about breakfast when I made the code 🤣🧇
ALT All courses 20% off. https://networkdefense.io. Expires at midnight ET 6/26 Use Discount Code WAFFLEHOUSE at Checkout
Applied Network Defense retweeted
Evidence Insight 💾 - Filtering Windows Event Logs
Windows Event Logs are helpful in investigations because they are intentional evidence! That means they are designed to prove that things happened. #EvidenceInsight #DFIR #SOC
Applied Network Defense retweeted
We recently did a big update and refresh to our Sigma course, and it's on sale for the rest of the week.
We've recently deployed some major updates to our @sigma_hq class. To celebrate, you can sign up for $50 off through Friday using code SIGMAV2
Some updates include:
- Using Sigma rule packages to customize your detection coverage
1/3
ALT The Detection Engineering with SIGMA logo appears on a blue striped background.
Applied Network Defense retweeted
It fills me with a little joy that Defender fights back when I'm recording videos for the @NetworkDefense Analyst Skills Vault. There are still techniques that work, but Defender's getting smarter every day, blocking things like Named Pipe Impersonation.
Applied Network Defense retweeted
Dan is one of our new Skills Vault instructors and he did a great job with this one. He demonstrates a few different versions of the attack before showing the artifacts it left behind. I hope you'll check it out!
Applied Network Defense retweeted
Do you want to learn YARA to track malware but don't know where to start?
In anticipation of #100DaysofYARA we're giving away 3 free seats to AND's YARA Course!
To enter, reply to this tweet with what malware you want to track. Most creative responses by Friday 2023-11-24 win!
Applied Network Defense retweeted
In our latest Analyst Skills Vault video from @ForensicITGuy, learn how attackers steal copies of NTDS.DIT to acquire domain credentials and discover the forensic artifacts that theft leaves behind.
ALT A screenshot of an attacker copying NTDS.DIT appears along with the words "Analyst Skills Vault: NTDS.DIT Theft for Credential Access."
Applied Network Defense retweeted
If you're at #socaugusta, you can win a free seat in any of my training courses or a signed copy of Intrusion Detection Honeypots by dropping a ticket in the appropriate fishbowl in the lobby.
Applied Network Defense retweeted
In our latest Skills Vault lesson, @DefensiveDepth demonstrates techniques for building common forensic queries for MacOS Unified Logs. You'll learn how to query for artifacts of service launches, user creation, and more.
ALT A screenshot interacting with the MacOS Unified Log to show user activity appears with the words "Building MacOS Unified Log Queries," a new lesson in the Analyst Skills Vault.
Applied Network Defense retweeted
I’ve taken a few of @chrissanders88 courses, which have all been great, (@NetworkDefense), and plenty from other vendors too, but his Investigation Theory course: top notch. Only a portion of the way through, but already a solid impact on my thinking.
Applied Network Defense retweeted
In celebration of Splunk.conf, we've got our Splunk for Security Analysts course heavily discounted this week. It's the best online Splunk course for security analysts, built by security analysts.
Deal ends Thursday. Take a peek and register here: networkdefense.io/library/sp….