Exploit to Exfil - Emerging techniques for persistence, lateral movement

No ratings

Presented at Bsidescanberra 2017 by

Ben Wilson

During numerous investigations and incidents we've seen that attackers can be a creative and crafty lot. We'll take a look at some of the notable tactics and techniques we've seen used by advanced threat actors for persistence and lateral movement that attempt to evade detection, such as "living off the land" by using and abusing built in Operating System tools and libraries, running Command and Control and Exfiltration traffic through legitimate websites, tunnelling tools preconfigured with proxy configurations and credentials, persistence locations that you won't find with autoruns, and lots more. You'll walk away with a todo list of actionable detection and defensive steps you can take to counter these in your own environments. Click here to enable macros and continue reading the rest of this abstract.