WEBVTT

1
00:00.000 --> 00:03.920 align:middle line:84%


2
00:03.920 --> 00:05.010 align:middle line:84%
Hello, and welcome back.

3
00:05.010 --> 00:08.390 align:middle line:90%
In this video, I'd like to give
you a tour of Cisco's Talos.

4
00:08.390 --> 00:10.120 align:middle line:90%
So let's begin with
the actual URL.

5
00:10.120 --> 00:11.050 align:middle line:84%
This is the URL.

6
00:11.050 --> 00:14.030 align:middle line:84%
It's talosintelligence.com.

7
00:14.030 --> 00:16.910 align:middle line:90%
And I'm going to do this
demo prior to a Cisco login.

8
00:16.910 --> 00:18.602 align:middle line:90%
So if you want to
follow along, you can.

9
00:18.602 --> 00:20.810 align:middle line:90%
Over time, if they modify
their website a little bit,

10
00:20.810 --> 00:21.893 align:middle line:84%
that's perfect acceptable.

11
00:21.893 --> 00:23.310 align:middle line:90%
We're going to
take a look at some

12
00:23.310 --> 00:25.130 align:middle line:90%
of the big-picture
features and functions

13
00:25.130 --> 00:26.920 align:middle line:84%
we can get from Talos's website.

14
00:26.920 --> 00:29.420 align:middle line:90%
So right here on the home page,
it has some graphics for us.

15
00:29.420 --> 00:30.920 align:middle line:90%
If we scroll down
a little bit, it's
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

15
00:29.420 --> 00:30.920 align:middle line:90%
If we scroll down
a little bit, it's

16
00:30.920 --> 00:32.250 align:middle line:84%
showing us the legend here.

17
00:32.250 --> 00:35.000 align:middle line:90%
So blue represents
legitimate email.

18
00:35.000 --> 00:37.460 align:middle line:90%
The orange, this color
here, represents spam.

19
00:37.460 --> 00:41.400 align:middle line:90%
And this one right here, the
green, represents malware.

20
00:41.400 --> 00:42.440 align:middle line:84%
This is real time too.

21
00:42.440 --> 00:43.010 align:middle line:84%
Check it out.

22
00:43.010 --> 00:45.567 align:middle line:90%
Those guys are busy
with some serious spam.

23
00:45.567 --> 00:47.150 align:middle line:90%
And if we click on
that, it'll give us

24
00:47.150 --> 00:48.500 align:middle line:84%
more details about that.

25
00:48.500 --> 00:49.460 align:middle line:84%
Wow, look at that.

26
00:49.460 --> 00:50.420 align:middle line:84%
That's not good.

27
00:50.420 --> 00:51.890 align:middle line:90%
All right, so
that's the homepage.

28
00:51.890 --> 00:53.390 align:middle line:90%
And then let me give
you an introduction here

29
00:53.390 --> 00:54.598 align:middle line:84%
to some of the various parts.

30
00:54.598 --> 00:57.170 align:middle line:90%
Then we'll dig into them
in subsequent videos.

31
00:57.170 --> 00:59.758 align:middle line:90%
If we click on Software,
this is pretty darn cool.

32
00:59.758 --> 01:01.550 align:middle line:90%
So here under Software,
one of the benefits
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

32
00:59.758 --> 01:01.550 align:middle line:90%
So here under Software,
one of the benefits

33
01:01.550 --> 01:04.370 align:middle line:90%
of having this right here
on talosintelligence.com

34
01:04.370 --> 01:07.580 align:middle line:90%
is that you don't have to wonder
if we're downloading something

35
01:07.580 --> 01:11.075 align:middle line:90%
that has a virus or malware
in it because a lot of times,

36
01:11.075 --> 01:12.950 align:middle line:90%
attackers-- they'll make
something available,

37
01:12.950 --> 01:14.930 align:middle line:90%
and then they'll
inject or package

38
01:14.930 --> 01:17.460 align:middle line:90%
some kind of malicious
code with that software.

39
01:17.460 --> 01:18.328 align:middle line:84%
So you install it.

40
01:18.328 --> 01:20.120 align:middle line:90%
You think you're
installing something good,

41
01:20.120 --> 01:22.440 align:middle line:90%
but you're getting some
malware alongside of it.

42
01:22.440 --> 01:26.253 align:middle line:90%
So here, we have Snort and
ClamAV and several other tools

43
01:26.253 --> 01:26.920 align:middle line:84%
that we can use.

44
01:26.920 --> 01:28.420 align:middle line:90%
And if we just click
on one of them,

45
01:28.420 --> 01:31.183 align:middle line:90%
like Snort, to learn more
about it, there's an overview.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

45
01:28.420 --> 01:31.183 align:middle line:90%
like Snort, to learn more
about it, there's an overview.

46
01:31.183 --> 01:33.350 align:middle line:90%
And then there's options
here for downloading Snort,

47
01:33.350 --> 01:34.450 align:middle line:84%
going to the website.

48
01:34.450 --> 01:37.112 align:middle line:90%
And assuming we're here
at talosintelligence.com,

49
01:37.112 --> 01:39.570 align:middle line:90%
can assume that all these links,
all this content, is good.

50
01:39.570 --> 01:41.330 align:middle line:90%
Next, we have
Vulnerability Information

51
01:41.330 --> 01:42.920 align:middle line:84%
and Microsoft Advisories.

52
01:42.920 --> 01:45.980 align:middle line:90%
We'll do a separate video just
on Vulnerability Information

53
01:45.980 --> 01:47.480 align:middle line:84%
and how to read the reports.

54
01:47.480 --> 01:50.515 align:middle line:90%
Then there's the Reputation
Center, which is amazing.

55
01:50.515 --> 01:51.890 align:middle line:90%
So here in the
Reputation Center,

56
01:51.890 --> 01:54.590 align:middle line:90%
we can go ahead and
specify a URL or an IP

57
01:54.590 --> 01:57.710 align:middle line:90%
address or a domain and get
more information regarding

58
01:57.710 --> 01:58.760 align:middle line:84%
its reputation.

59
01:58.760 --> 02:01.700 align:middle line:90%
So if we want to check and see
if anything is malicious or not
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

59
01:58.760 --> 02:01.700 align:middle line:90%
So if we want to check and see
if anything is malicious or not

60
02:01.700 --> 02:03.990 align:middle line:90%
or is known to have a
lot of malicious content,

61
02:03.990 --> 02:05.810 align:middle line:84%
this is a great way of doing it.

62
02:05.810 --> 02:09.320 align:middle line:90%
If we scroll down, we have
options for file reputation,

63
02:09.320 --> 02:10.639 align:middle line:84%
options for AMP.

64
02:10.639 --> 02:12.740 align:middle line:90%
And we also have
intelligence categories.

65
02:12.740 --> 02:14.690 align:middle line:90%
We'll also cover this
tab, Reputation Center,

66
02:14.690 --> 02:16.890 align:middle line:90%
in a separate video
coming right up as well.

67
02:16.890 --> 02:19.800 align:middle line:90%
Here's a link for the Library
for additional information,

68
02:19.800 --> 02:20.923 align:middle line:84%
including presentations.

69
02:20.923 --> 02:22.340 align:middle line:90%
And one of the
benefits of getting

70
02:22.340 --> 02:24.665 align:middle line:90%
these directly here from
talosintelligence.com

71
02:24.665 --> 02:27.860 align:middle line:90%
is that we don't have to
really wonder, is this vetted?

72
02:27.860 --> 02:28.910 align:middle line:84%
Is this legit?

73
02:28.910 --> 02:30.260 align:middle line:84%
Is this really happening?
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

73
02:28.910 --> 02:30.260 align:middle line:84%
Is this really happening?

74
02:30.260 --> 02:31.940 align:middle line:90%
If Talos has it on
their site, it's

75
02:31.940 --> 02:34.610 align:middle line:90%
a good bet it's very
relevant and very real.

76
02:34.610 --> 02:36.507 align:middle line:90%
There's a tab for
Incident Response.

77
02:36.507 --> 02:38.090 align:middle line:90%
And this is primarily
going to benefit

78
02:38.090 --> 02:39.882 align:middle line:90%
those people who have
contracts and support

79
02:39.882 --> 02:41.390 align:middle line:84%
agreements with Talos.

80
02:41.390 --> 02:44.900 align:middle line:90%
And there's also tabs for
Careers, a link for their blog,

81
02:44.900 --> 02:46.610 align:middle line:84%
a link for podcasts.

82
02:46.610 --> 02:48.790 align:middle line:90%
And then the About has
contact information

83
02:48.790 --> 02:50.540 align:middle line:90%
about how to reach the
secret intelligence

84
02:50.540 --> 02:52.673 align:middle line:84%
team, the Talos team at Cisco.

85
02:52.673 --> 02:54.590 align:middle line:90%
So now that we've had a
peek at their website,

86
02:54.590 --> 02:56.210 align:middle line:90%
there are some
amazing tools we can

87
02:56.210 --> 02:59.720 align:middle line:90%
use on that website for
free regarding vulnerability

88
02:59.720 --> 03:00.220 align:middle line:84%
information.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

88
02:59.720 --> 03:00.220 align:middle line:84%
information.

89
03:00.220 --> 03:02.845 align:middle line:90%
And that's what I'd like to talk
with you about and demonstrate

90
03:02.845 --> 03:03.960 align:middle line:84%
in the very next video.

91
03:03.960 --> 03:06.090 align:middle line:90%
So I'll see you there
in just a moment.

92
03:06.090 --> 03:08.450 align:middle line:90%
Meanwhile, I hope this has
been informative for you,

93
03:08.450 --> 03:11.620 align:middle line:90%
and I'd like to thank
you for viewing.