Measure Twice, Cut Once: The Importance of Lab-ing out Attack Paths

No ratings

Presented at Securi-Tay 2024 by

Andy Gill

When I’m doing a red team, a large portion of what I do is measuring my environment and mirroring the setup so that each step is calculated. Lab each step repeatedly so the result is measured before attacking and reducing the chances of tripping things. The Blue Team is getting more innovative, deceptive technology is improving, and as important as the hacks are in a Red Team, the recommendations are just as important therefore playing through both sides in a lab comes into their own. This talk will walk you through some tooling I've written in the last year for making red teaming easier and for exploring how certain tools react when met with a mature defensive stack.