{
  "version": "1.2.0",
  "chapters": [
    {
      "title": "Intro",
      "startTime": 0,
      "endTime": 167
    },
    {
      "title": "Why Are We Doing This?",
      "startTime": 167,
      "endTime": 307
    },
    {
      "title": "AT7: The Logs You Are Looking For",
      "startTime": 307,
      "endTime": 461
    },
    {
      "title": "AD Best Practices to Frustrate Attackers",
      "startTime": 461,
      "endTime": 577
    },
    {
      "title": "AT 5 – Complete Takedown & AT 6 – IOCs",
      "startTime": 577,
      "endTime": 724
    },
    {
      "title": "Blue Team-Apalooza",
      "startTime": 724,
      "endTime": 862
    },
    {
      "title": "WIndows Logging, Sysmon and ELK – Part 1",
      "startTime": 862,
      "endTime": 1005
    },
    {
      "title": "Implementing Sysmon and Applocker",
      "startTime": 1005,
      "endTime": 1305
    },
    {
      "title": "...And Group Policies That Kill Kill-Chains ",
      "startTime": 1305,
      "endTime": 1351
    },
    {
      "title": "Here Are Some Important Blogs",
      "startTime": 1351,
      "endTime": 1415
    },
    {
      "title": "Summary Complete",
      "startTime": 1415,
      "endTime": 1528
    },
    {
      "title": "Introducing the Atomic Red Team",
      "startTime": 1528,
      "endTime": 1670
    },
    {
      "title": "Installing the Atomic Framework",
      "startTime": 1670,
      "endTime": 1769
    },
    {
      "title": "Squibbly Doo",
      "startTime": 1769,
      "endTime": 1846
    },
    {
      "title": "The Results",
      "startTime": 1846,
      "endTime": 1889
    },
    {
      "title": "Let's Take A Step Back: The Atomic Tests",
      "startTime": 1889,
      "endTime": 1938
    },
    {
      "title": "Another Step Back: WEF / Winlogbeat Config",
      "startTime": 1938,
      "endTime": 2021
    },
    {
      "title": "Executing T1015",
      "startTime": 2021,
      "endTime": 2066
    },
    {
      "title": "Catching Executables",
      "startTime": 2066,
      "endTime": 2465
    },
    {
      "title": "Executing T1003",
      "startTime": 2465,
      "endTime": 2522
    },
    {
      "title": "ElastAlert",
      "startTime": 2522,
      "endTime": 2601
    },
    {
      "title": "Now, On the ATT&CK",
      "startTime": 2601,
      "endTime": 2660
    },
    {
      "title": "Not Sure If That's a Wrap Yet. (It's Not)",
      "startTime": 2660,
      "endTime": 2831
    },
    {
      "title": "Check Out Our Dashboard",
      "startTime": 2831,
      "endTime": 3491
    }
  ]
}