Before we go,
I want to share with you a few more resources in case you want
to learn more about Seatbelt and discovery.
First and most important,
check the official documentation from Seatbelt. In this course, we cover
just a tiny fraction of the features of this tool.
But the reality is that Seatbelt has several other features, like
network drive discovery, Microsoft Outlook enumeration,
Windows Firewall enumeration, and much more.
Remember, this tool has over 100 modules that we can use, so
there are a lot of other interesting features.
Also, if you want to improve your discovery skills,
I do recommend you two courses here at Pluralsight. First, the Discovery with
ADRecon, in which you learn how to fully enumerate an Active Directory
domain. And, talking about Active Directory, I also recommend a really good
course here called Discovery with BloodHound. In there, you'll learn how to
fully map out your Active Directory so you can create a strategy to gain
domain admin privileges.
Also, if you're wondering how you can protect your company against
those discovery techniques that we discussed in here,
I have a few suggestions for you. First, use some security solutions to
monitor the Windows and Active Directory logs. A good endpoint protection
solution or even a SIEM solution might do the job, as long as they are
able to detect malicious or anomalous behavior. The idea here is that
those discovery techniques that we use generate a lot of logs in the
machines and the domain controller. So, you can create rules to detect
such logs and alert you in case anyone is performing some discovery
techniques.
So that's it.
That's the end of our Seatbelt course.
I hope you enjoyed this course and that now you have one
more discovery technique in your skillset.
So, thank you for watching, and I will see you in the next course.