Education and Awareness has become a huge focus for a number of organizations. With the elevated trends around hackers bypassing millions of dollars of technology by simply sending an email or picking up a phone – it has never been easier to own a network. This talk will discuss a lot of the defensive measures we teach our employee population to detect attack and how to circumvent these education controls in order to get into anything. I'll be demonstrating some advanced evasion techniques on getting around some of the most popular technologies such as next generation firewalls, application whitelisting, memory analysis, and more. In this talk we'll turn around everything we are taught, everything we hold sacred, and flip it upside and then destory it with a hammer. Dave Kennedy is founder and principal security consultant of TrustedSec - An information security consulting firm located in Cleveland Ohio. David was the former Chief Security Officer (CSO) for a Fortune 1000 company where he ran the entire information security program. Kennedy is a co-author of the book "Metasploit: The Penetration Testers Guide," the creator of the Social-Engineer Toolkit (SET), and Artillery. Kennedy has presented on a number of occasions at Black Hat, Defcon, ShmooCon, BSIDES, Infosec World, Notacon, AIDE, ISACA, ISSA, Infragard, Infosec Summit, and a number of other security-related conferences. Kennedy has been interviewed by several news organizations including CNN, Fox News, MSNBC, CNBC, Katie Couric, and BBC World News. Kennedy and was originally on the Back|Track and Exploit-DB development team and co-host of the Social-Engineer.org podcast. Kennedy has testified in front of Congress on two occasions on the security around government websites. Kennedy is one of the co-authors of the Penetration Testing Execution Standard (PTES); a framework designed to fix the penetration testing industry. Kennedy is the co-founder of DerbyCon, a large-scale conference in Louisville Kentucky. Prior to Diebold, Kennedy was a VP of Consulting and Partner of a mid-size information security consulting company running the security consulting practice. Prior to the private sector, Kennedy worked for the United States Marine Corps and deployed to Iraq twice for intelligence related missions.