Brownbag
Leveraging Passive DNS for Incident Response
Original Webinar Date: Wednesday, June 2nd, 2021
Length: 1.5 Hours
Submit the form to get a copy of the recording.
- Newsletter Sign Up
- Call now: +1-650-489-7919
- Solutions
- Overview
- By Role
- CISO / Security Management
- Security Operations
- Threat Intelligence
- Network Operations / IT
- By Need
- Incident Response
- Threat Hunting
- Brand Protection
- Fraud Protection
- Anti-Phishing
- Technology
- Partner Integrations
- Security Information Exchange
- All Solutions
- DNSDB
- Newly Active Domains
- Newly Observed Domains
- Newly Observed Hostnames
- DNS Changes
- DNS Errors
- Resources
- Blog
- Partners
- Community
- Company
- Free Trial
- Farsight Labs
In this presentation, we will show you what passive DNS is, where it comes from, and how you can leverage it for incident response. One of the key fundamentals of a good incident response plan is knowing where your assets are before an incident occurs. We will demonstrate how to use passive DNS to map the outer edges of an enterprise, and try to discover potential areas of risk that may not have been on the incident response team’s radar. Then we will pivot, and demonstrate some techniques for using passive DNS during and after an incident, to get a better idea about the motivations of a potential intruder.
Equipment You Will Need:
- Laptop, Internet
- Farsight DNSDB API Key
Get the Webinar
On-Demand
PRESENTER
Daniel Schwalbe
Daniel Schwalbe is Deputy Chief Information Security Officer and Vice President of Engineering for Farsight Security, Inc. He is a veteran information security professional with 20 years of experience leading incident response and digital forensics efforts in large enterprise settings. Prior to joining Farsight, he served as Associate Chief Information Security Officer at the University of Washington, where his focus areas were threat intelligence, information sharing, and incident response. He is an active contributor and speaker in the information security community, and previously served on the board of directors for the REN-ISAC.
