Overt Operations | When the Red Team gets in your Face!

No ratings

Presented at BSidesSATX 2020 by

We talk covert operations all the time, but there’s more. What does an advanced red team do when their cover is blown? What changes do you make when the blue team already knows you're there? How do we operate overtly!?In this talk, we delve into the specialized world of advanced red teaming. Here we move beyond the basics of an active directory domain and discuss methods to acquire freedom of maneuver within a target environment by leveraging all of the nuances that make each enterprise unique. We'll explore effects-driven operations and examine techniques to safely target Industrial Control Systems (ICS). Finally, advanced red teamers don't simply attack enterprises; they craft techniques to attack the enterprise defenses weaponizing them against the organization itself. The thing is... if the defenders already know you’re there, what could be better than making them think you’re everywhere!Want a sneak preview of an in-development SANS class on advanced red teaming? Let's go!