Track 3 Friday·1 hr
Josh Rickard
Shows how the atomic-operator Python framework runs Atomic Red Team tests to check detection coverage across operating systems.
threat-detectionframeworkopen-source+2
Track 3 Friday CC10
Mesa, AZ, USA · February 2022 · 10 talks
Track 3 Friday talks from CactusCon 10 2022.
Filters+
1–9 of 9 talks / 10
Track 3 Friday·53 min
Josh Rickard
Shows how phishing kits are built, collected from the web, and used to track attackers and share intelligence.
phishingintelligenceincident-response+2
Track 3 Friday·37 min
Or Katz
Shows how structural signatures for JavaScript packers can flag obfuscated scripts at scale without rendering the pages.
malware-analysisdetectionmachine-learning+1
Track 3 Friday·50 min
Jorge Orchilles
Walks through turning threat intelligence into repeatable purple team exercises, from ISO-based emulation to detection engineering.
threat-detectionintelligenceattack+2
Track 3 Friday·58 min
Daniel Bardenstein · Lance Cleghorn
Recounts how a small government security team hardened COVID-19 vaccine development, distribution and supply chains in months.
supply-chainbug-bountylessons-learned+2
Track 3 Friday·8 min
cyber flamingo
Explains how tag management systems add client-side risk to websites and how security can work with marketing teams.
webapplicationvulnerabilities+2
Track 3 Friday·18 min
Alexandre Mercier
Explains how marketing tag managers slip unreviewed third-party scripts into live sites and how security teams can add guardrails.
webapplicationvulnerabilities+3
Track 3 Friday·57 min
Christian Taillon
Lays out a repeatable process for building a threat hunting program that finds evasive adversaries.
huntingthreat-detectionsecurity-operations+2
Track 3 Friday·11 min
Christian
Explains how to start threat hunts from an adversary, automate data triage, and extend hunting to social media.
huntingthreat-detectionintelligence+2