DanderSpritz: A case study in Nation State Post-Exploitation Framework Capabilities & Defense Strategies

No ratings

Presented at BSidesKansasCity 2018 by

Francisco Donoso

This talk will cover the tools, methodologies, and capabilities built into DanderSpritz, the Equation Group's leaked post exploitation framework. We will review how the Equation Group gained and maintained persistence, bypassed auditing and AV, scanned, sampled, subdued, and successfully dominated an entire organization.We will cover advanced adversary tradecraft and discuss potential methods of detection.