WEBVTT

00:00:05.740 --> 00:00:09.120
Welcome to Pluralsight in this cybersecurity tools course,

00:00:09.130 --> 00:00:12.630
featuring Merlin, the open‑source command and control tool

00:00:12.640 --> 00:00:16.100
developed and maintained by Russell Van Tuyl.

00:00:16.110 --> 00:00:19.130
As intrusion detection systems become more advanced,

00:00:19.140 --> 00:00:22.870
it's important as ever to mimic real application traffic.

00:00:23.640 --> 00:00:25.060
And, as you'll soon see,

00:00:25.070 --> 00:00:29.820
Merlin's got you covered by leveraging newer versions of HTTP such as HTTP

00:00:29.820 --> 00:00:35.730
version 2 or HTTP version 3 as a transport mechanism. However,

00:00:35.740 --> 00:00:38.770
all of these advanced tactics don't mean anything if

00:00:38.770 --> 00:00:40.770
you use Merlin in the wrong way.

00:00:40.780 --> 00:00:43.860
So in this course, you will test various attacks in a

00:00:43.870 --> 00:00:45.750
Docker‑based simulation environment.

00:00:46.140 --> 00:00:46.970
Even better,

00:00:46.980 --> 00:00:49.910
you'll mount your attacks against two intrusion detection

00:00:49.910 --> 00:00:54.360
systems with the goal of performing data exfiltration. And I'm

00:00:54.360 --> 00:00:57.670
warning you now, you might get caught, but that's okay.

00:00:57.700 --> 00:01:01.550
You will learn to adjust. If you're a red teamer looking to evade

00:01:01.550 --> 00:01:05.880
detection by a novel C2 transport mechanism or a blue teamer

00:01:05.890 --> 00:01:09.220
looking for the latest attack patterns, come join me to get up

00:01:09.220 --> 00:01:10.970
and running with Merlin today.