CSIT Village·24 min
Shao Xiang
Shao Xiang examines understanding the adversary mindset is essential for cyber defenders to anticipate how attackers operate and strategically strengthen defenses.
adversary-emulationthreat-modelingred-team+1
red-team
185 talks tagged with this topic.
Filters+
Loading filters…
1–24 of 176 talks / 185 · loading…
Black Hat·40 min
Presenters detail vulnerability discovery and exploitation in Fantastic Red-Team Attacks and How to Find Them.
fantasticred-teamattack+2
Briefings·41 min
Alex Gonzalez
Android key attestation provides a way for a device's secure hardware to verify that cryptographic material is in secure hardware, protected against compromise of the Android OS.
hardwarered-teamopen-source+3
Cloud Village·23 min
Mark Manning
Practical Kubernetes security techniques for both offensive and defensive practitioners.
cloudkubernetesred-team+1
Cloud Village·19 min
Golan Myers
KIEMPossible: exploiting KIEM (Key Identity and Execution Manager) weaknesses in Azure environments.
cloudazureiam+2
Cloud Village·30 min
Viktor Gazdag
Attack surface analysis and abuse possibilities of Microsoft Azure Fabric services.
cloudazurered-team+1
Cloud Village·32 min
Crashwire · Nathan
Novel ESXi hypervisor persistence techniques for maintaining long-term access in cloud environments.
cloudvmwareesxi+2
Cloud Village·18 min
Ariel Kalman
Exfiltrating cloud data from behind Google Identity-Aware Proxy without a public IP.
cloudgcpexfiltration+1
Cloud Village·28 min
Michael Katchinskiy · Yossi Weizman
How official cloud installation scripts expose Kubernetes clusters and cloud environments to breach.
cloudkubernetesred-team+1
Cloud Village·39 min
Simon Maxwell-Stewart
Turning Azure subscription access into persistent backdoor access across tenants.
cloudazurered-team+1
Cloud Village·23 min
Muhammad Yuga Nugraha
TencentGoat: an intentionally vulnerable Tencent Cloud environment for hands-on cloud security training.
cloudred-teamlab-environment+1
Cloud Village·25 min
Shani Peled
Exploiting AWS SageMaker to gain persistence and exfiltrate data from ML platforms.
cloudai-securityaws+1
Cloud Village·41 min
Rodrigo Montoro
Weaponizing AWS Systems Manager for lateral movement and hardening techniques for defenders.
cloudawsssm+2
Ekoparty Security Conference·58 min
Jorge Orchilles
Provides #Eko2020 Zona / Red / Team | Jorge Orchilles: Adversary Emulation - Dont get stung by a Honeybee and evaluates key implications for security practitioners.
red-teamemulationeko2020+2
Main Stage·16 min
Scott Taylor
Scott Taylor introduces C4, an open-source framework decoupling payload implants from command-and-control protocols using versatile external connectors.
command-and-controlred-teamimplants+2
OWASP Foundation·29 min
Frank Breedijk
Engineers explore architecture and security mechanisms for AppSec EU15 - Frank Breedijk - Red Team, Blue Team Or White Cell? Trends In IT.
red-teamblue-teamappsec+3
Hack In The Box Security Conference·1 hr 50 min
Analysts investigate attack surfaces and defenses concerning #HITBCyberWeek D2 LAB - Red Team Vs. Blue Team Exercises For ICS/SCADA Security.
red-teamblue-teamscada+1
RSAC Cybersecurity·45 min
Presenters detail vulnerability discovery and exploitation in Advancing AI Security with Insights from the World’s Largest AI Red Team.
red-teamadvancinginsight+2
RSAC Cybersecurity·53 min
Engineers explore architecture and security mechanisms for Atomic Red Team: Where Adversary Emulation and EDR Testing Meet.
red-teamedremulation
RSAC Cybersecurity·34 min
Analysts investigate attack surfaces and defenses concerning Test or Be Tested: Adversary Emulation with Atomic Red Team.
red-teamemulationtest+3
Main Stage·27 min
Asaf Gilboa · Ron Ben-Yitzhak
Asaf Gilboa and Ron Ben-Yitzhak present a stealthy credential dumping technique that abuses native Windows Error Reporting (WER) to dump LSASS without alerts.
lsasscredential-dumpingwer+2
Main Stage·44 min
Nick Powers · Steven Flores
Nick Powers and Steven Flores show how Microsoft ClickOnce technology can be abused for stealthy phishing initial access, bypassing Mark-of-the-Web and AppLocker.
clickonceinitial-accessphishing+2
Main Stage·54 min
Christopher Panayi
Christopher Panayi demonstrates exploiting Microsoft Endpoint Configuration Manager (MECM/SCCM) OS deployment mechanisms and network booting to extract enterprise Active Directory credentials.
active-directorymecmsccm+3
Main Stage·42 min
Wietze Beukema
Wietze Beukema presents novel DLL hijacking techniques that manipulate user-controlled environment variables to execute code via signed binaries with zero file drops.
dll-hijackingenvironment-variablesevasion+2