October 25-28, 2017!! We’re going to have so much fun! Hopefully you can join us!
Back To Schedule
Friday, October 27 • 09:00 - 09:45
Morphing to Legitimate Behavior Attack Patterns

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Let's face it, the industry is getting better at detection. Not everyone, but it's getting there. Companies are focusing on getting logs from their endpoints and looking for abnormal patterns of behavior. As attackers, our tactics have been shifting over time to become more compliant with standard protocols and behavior. This has implications on how we test, length of engagements, and the level of effort to attack. It’s not as easy as it once way (with many exceptions), but as defense grows, our capabilities as attackers has to grow as well.

This talk will dive into what I'm seeing out there as far as detection capabilities, and how to get around them. Let’s take a dive into multiple detection and preventive capabilities and how to circumvent them without getting detected. As the offense, we can't rely on hoping for multicast to DA every time. The times are changing, our skills need to match that appropriately.

avatar for Dave Kennedy

Dave Kennedy

Trusted Sec
David Kennedy is the founder of TrustedSec, Binary Defense Systems, and DerbyCon.  TrustedSec and Binary Defense are focused on the betterment of the security industry from an offense and a defensive perspective.  David also serves as a board of director for the ISC2 organization... Read More →

Friday October 27, 2017 09:00 - 09:45 MDT
Pine Crest A