Red Team Apocalypse
Beau Bullock and Derek Banks
BSides Tampa 2018

Abstract: TABLETOP SCENARIO: Your organization regularly patches, uses application whitelisting, has NextGen-NG firewalls/IDS's, and has the latest Cyber-APT-Trapping-Blinky-Box. You were just made aware that your entire customer database was found being sold on the dark web. Go. Putting too much trust in security products alone can be the downfall of an organization. In the 2015 BSides Tampa talk ""Pentest Apocalypse"" Beau discussed 10 different pentesting techniques that allow attackers to easily compromise an organization. These techniques still work for many organizations but occasionally more advanced tactics and techniques are required. This talk will continue where ""Pentest Apocalypse"" left off and demonstrate a number of red team techniques that organizations need to be aware of in order to prevent a ""Red Team Apocalypse"" as described in the tabletop scenario above."

Bio: Beau is a Senior Security Analyst at Black Hills Information Security where he performs penetration tests and red team assessments. He is the author of various red team/pentest tools such as MailSniper, PowerMeta, HostRecon, and DomainPasswordSpray. Beau is a host of the web shows Tradecraft Security Weekly & Hack Naked TV, and is a frequent speaker at industry events including Black Hat, DerbyCon, Wild West Hackin' Fest, SANS, and various BSides events. Derek is a Senior Security Analyst at Black Hills Information Security and has over 20 years of experience in the IT industry as a systems administrator for multiple operating system platforms, and monitoring and defending those systems from potential intruders. He has worked in the aerospace, defense, banking, manufacturing, and software development industries. Derek has experience with creating custom host and network based monitoring solutions."

Twitter: @dafthack and @0xderuke

/p>

Back to BSides Tampa 2018 video list