How to mitigate risk from nation-state attacks

The video discusses the importance of network security, especially in light of the SolarWinds attack. It emphasizes the need for forensic investigation, cyber insurance, and the use of tools like FTK Imager for offline imaging. The video also highlights the significance of analyzing firewall logs and using long-term solutions like Splunk and Azure Sentinel for attack detection. It introduces Kerberoasting and the importance of securing service accounts with strong passwords. Finally, it stresses the need for effective system monitoring and intrusion detection to be alerted to potential threats.

What steps should companies take if they suspect their servers have compromised backdoor code?

How can forensic images of systems be created and why is it important?

What are some long-term solutions for storing log files to investigate potential attacks?

What is Kerber roasting and how can organizations protect themselves from it?

What monitoring tools should organizations consider to detect intrusion activities?