What is MSIexec and How to Detect it?
Learn how to detect and monitor MsiExec Web Install alerts in your SIEM solution. Gain tangible knowledge to prevent breach damage. Ideal for beginner to intermediate Security or IT personnel.
What you’ll learn
- Understand how Detect MsiExec Web Install
- Learn what MsiExec is and why its important
- Understand how to fine tune SIEM queries to create effective alert
- Complete quiz questions to test your knowledge on how to best implement MsiExec Web Install alerts
In this course, you will learn about MSI files and more specifically Msiexec, and how you can start to detect them within your SIEM solution. I have provided learners with a base search query to start you off with at the end of this course in some of the most popular SIEM solutions. From these base searches, I will provide you with some direction and tips on how to further refine those searches to create effective monitoring dashboards or even high fidelity alerts in your SIEM.
The overall intent of these SIEM SEC Series courses is to deliver you tangible knowledge that you can quickly apply to your environment as soon as you finish the course. I aim to keep these courses short and concise, with the mindset that you can complete one or two of these within your lunch break at work. Ideally, the knowledge learned will help you prevent thousands of dollars in breach damage.
I hope you enjoy the course and feedback is always welcome. I am willing to sculpt further courses to meet the needs of my learners. At the end of the day, I want these to be highly beneficial, with an instant return on investment.
Who this course is for:
- Beginner to intermediate Security or IT personal
User Reviews
Be the first to review “What is MSIexec and How to Detect it?”
You must be logged in to post a review.
There are no reviews yet.