SANS Whitepaper: https://www.sans.org/reading-room/whitepapers/detection/paper/39055 SANS Webinar: https://register.gotowebinar.com/register/603121010349954316 SANS ISC Stormcast Episode: https://isc.sans.edu/podcastdetail.html?id=6574 SEC 505: https://www.sans.org/course/securing-windows-with-powershell Orai: https://www.orai.com/ Python Crash Course (2nd edition): https://nostarch.com/pythoncrashcourse2e Show notes: https://seangoodwin.blog/sts002 Twitter: https://twitter.com/0xSeanG iTunes: https://podcasts.apple.com/us/podcast/stumbling-through-security/id1460066606