In 2018, 58% of cyber-attack victims were small businesses. In this talk we’ll go through the steps an attacker might use to mask their identity and then we’ll explore real scenarios where significant compromise had been accomplished in small businesses due to seemingly harmless configurations.