Maximize Your Moloch for Investigations and Threat Hunting with TLS Decryption

Hosted by Nubeva: 

Technical Brown Bag

Date: March 18^th, 2020 – 12pm PST

In our March Technical Brown Bag, Open Source technology expert Erik Freeland will deep dive into the popular Moloch tool. Moloch is an open source, large scale, full packet capturing (FPC), indexing, and database system used to equip security teams with metadata parsing and searching capabilities for after-the-fact investigations and threat hunting.

In this session, Erik will cover:

• Moloch overview
• Core use cases for Moloch
• Investigating a security incident using flows and headers
• Investigating a security incident with modern TLS decrypt
• Overview of simplified Quick Start to launch Moloch with new TLS visibility capabilities

We'll end the session with questions and answers. If you want to follow along and ask questions live, check out the Nubeva TLS Decrypt + AWS QuickStart for easy, deployment of Moloch + Nubeva or head to www.Nubeva.com to create a free trial account.