Penetrating B1 Trusted Operating Systems
Mythrandir explores penetrating b1 trusted operating systems at DEF CON 8, examining trusted-os and practical defenses.
Summary
Architecture and Background
Mythrandir - Penetrating B1 Trusted Operating Systems If you have attended the Newbie B1 talk, or have previous experience with B1 systems then you will find this talk enlightening.
Vulnerability Analysis
Typically, B1 systems can only be penetrated due to misconfigurations.
Exploitation and Demonstrations
We will take a whirlwind tour of all of the areas to check for security misconfigurations and develop a methodology for attacking B1 Trusted Operating Systems.
Remediation and Defensive Strategies
You are going to find B1 Trusted Operating Systems in increasing use, and you owe it to yourself to understand how to penetrate these systems and how to lock them down. Mythrandir, Software Evangelist and Visionary, Argus Systems Group, Inc.
Related talks
Main Stage·43 min
Quentin Roland · Wilfried Bécard
Demonstrates how red teams can weaponize Active Directory Group Policy Objects (GPOs) into a stealthy, native command-and-control infrastructure.
Main Stage·34 min
Yuval Gordon
Discloses critical design flaws in delegated Managed Service Accounts (dMSAs) in Windows Server 2025, enabling unprivileged domain users to become Domain Admins.
Main Stage·39 min
Mehdi Elyassa
Explores new offensive attack paths and privilege escalation techniques targeting Microsoft System Center Configuration Manager (MECM/SCCM) in enterprise networks.


