Track 2·51 min
John Poulin
Walks through a time-boxed AWS red team workflow covering recon, privilege escalation, exfiltration and persistence with common tools.
cloudexploitationautomation+2
Track 2 CC12
Mesa, AZ, USA · February 2024 · 11 talks
Track 2 talks from CactusCon 12 2024.
1–11 of 11 talks
Track 2·56 min
Philip Young
Walks through a mainframe penetration test from SNA scanning to privilege escalation and data exfiltration.
mainframeexploitationnetwork+2
Track 2·46 min
Larry Suto
Shows how to stand up a self-hosted MISP threat intelligence platform and connect it to SIEM and endpoint tools.
intelligencethreatopen-source+2
Track 2·52 min
Ken Westin
Traces how stolen-device recovery and photo metadata uncovered organized crime, and how the same methods threaten privacy.
open-sourceintelligenceprivacy+2
Track 2·55 min
Michael Galde
Shows how a university built passive OT network monitoring to help facilities staff baseline and understand industrial protocol traffic.
icsinfrastructurenetwork+2
Track 2·8 min
Rebecca T
Explains how phishing kits are built and sold as services, how criminals evade detection, and how to defend against them.
phishingthreatdefensive-security+1
Track 2·45 min
Ofir Shen
Shows how baselining each process's network behavior can expose injected code that host-based tools miss.
threat-detectionnetworkdetection+2
Track 2·48 min
Danny Quist
Shows how to reverse Go-based BianLian ransomware binaries, restoring symbols and separating author code from library code.
reverse-engineeringmalware-analysisransomware+2
Track 2·50 min
Mari DeGrazia
Shows where MSIX-packaged apps keep per-application registry hives that traditional forensic checks often miss.
windowsincident-responsedigital-forensics+2
Track 2·50 min
Or Katz
Traces a long-running phishing scam whose redirect network and reused templates kept it alive across thousands of domains.
phishinginfrastructurethreat+2
Track 2·54 min
Andrew Sanford
Examines how organizations can verify employee identity when voice, video and other impersonation methods can be convincingly faked.
identitysocialai+2