Advanced Attackers Hiding Inside Encrypted Traffic at the Endpoint

No ratings

Presented at GrrCon2018 2018 by

Jared Phipps

Advanced attackers are always looking for ways to stay hidden. The growing use of traffic encryption — over 50% of Web traffic today is encrypted — provides a simple trick for attackers to hide their threats and communications channels. Exploit kits, malware, adware, callbacks, as well as command & control channels leverage encrypted communications to infiltrate organizations and exfiltrate information. Look into encrypted traffic, without the need for a proxy or additional agents and ensure full coverage of threats hiding within covert channels. SentinelOne extends EPP capabilities to provide an integrated workflow from visibility & detection to response & remediation. The single agent, single console architecture provides deployment simplicity and operational agility to improve productivity and minimize business impact of threats.In this session:Explore and expose threats hiding inside encrypted traffic at the endpointDiscover Autonomous Detection and Response to formerly “unseeable” threatsLive Attack Demonstration, Investigation and Remediation