IMPROVE YOUR SECURITY POSTURE A RED TEAM PERSPECTIVE TIM MEDIN - PowerPoint PPT Presentation

Feb 07, 2023 •784 likes •1.11k views

IMPROVE YOUR SECURITY POSTURE A RED TEAM PERSPECTIVE TIM MEDIN tim@redsiege.com BE LAZY NOT APT JUST PT EQUIFAX CIS CONTROL 1 & 2 INVENTORY PHISHING 101 WEB FILTER UNKNOWN NEW UNCATEGORIZED FINDING A DOMAIN STOP ATTACHMENTS

IMPROVE YOUR SECURITY POSTURE A RED TEAM PERSPECTIVE TIM MEDIN tim@redsiege.com
BE LAZY
NOT APT JUST PT
EQUIFAX
CIS CONTROL 1 & 2 INVENTORY
PHISHING 101
WEB FILTER UNKNOWN NEW UNCATEGORIZED
FINDING A DOMAIN
STOP ATTACHMENTS DISABLE MACROS
WINDOWS DEFENDER
PREVENTION FAILS SIGNATURES FAIL DETECTION IS A MUST
POWERSHELL
CONSTRAINED LANGUAGE MODE & LOGGING
SPECTER MELTDOWN
BAD PASSWORDS
PASSWORD SPRAY
DETECT SPRAY MICROSOFT AZURE 2FA
2FA IS NOT PERFECT
BEWARE OF CRED SNIPER
THE MYTH OF ESCALATION
DOMAIN ADMIN IS ONLY A TOOL
KEEP IT SIMPLE
PROTECT DETECT
Tim Medin tim@redsiege.com @TimMedin @RedSiegeInfoSec

Download Presentation

Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

CRFB.org Social Security Reform Should Improve Equity Within Generations Vertical equity:

CRFB.org Social Security Reform Should Improve Equity Within Generations Vertical equity: Increase progressivity of benefits and taxes Improve income security for low-income retirees and especially widow(er)s Horizontal Equity:

379 views • 14 slides

Small Is Beautiful How to improve security by maintaining less code About Me Natalie Silvanovich

Small Is Beautiful How to improve security by maintaining less code About Me Natalie Silvanovich AKA natashenka Project Zero member Previously did mobile security on Android and BlackBerry Defensive-turned-offensive researcher

799 views • 53 slides

RENOVATE SCHOOL FACILITIES AND IMPROVE SECURITY Dr. Chrys Sweeting, Superintendent Mr. Brian

2018 BOND PROPOSAL TO CONSTRUCT AND RENOVATE SCHOOL FACILITIES AND IMPROVE SECURITY Dr. Chrys Sweeting, Superintendent Mr. Brian Lewis, Executive Director of Operations Bonds to Construct and Renovate School Facilities and Improve Security

400 views • 19 slides

To improve food security information using Earth observation at national/regional/global scale

To improve food security information using Earth observation at national/regional/global scale -Reflect the inter-dependent nature of the food price and security challenges - Shin-ichi Sobue Remote Sensing Technology Center of Japan Asia rice

325 views • 28 slides

LED lighting solutions dedicated to equine sector Improve its welfare Guarantee its security

LED lighting solutions dedicated to equine sector Improve its welfare Guarantee its security Optimise its performances FUNDAMENTAL ROLE OF PROXIMAL LIGHTING WELFARE, RECOVERY COMFORT, CONCENTRATION SCIENTIFIC AND TECHNICAL APPROACH SECURITY,

280 views • 5 slides

Improve physical layer security via cooperation Ning zhang 1 Outline Outline Physical

Improve physical layer security via cooperation Ning zhang 1 Outline Outline Physical layer security Ph i l l it Approach based on Multiple antennas Cooperation for security Single cooperative relay (with/without jamming)

539 views • 21 slides

Advisory Group Coorong Water Security Advisory Group Aims: To improve livestock producer water

LIVESTOCK WATER SECURITY IN SOUTH AUSTRALIA Coorong Water Security Advisory Group Coorong Water Security Advisory Group Aims: To improve livestock producer water security. Savings made will lead to reinvestment in improved livestock and feed

465 views • 23 slides

Containers can actually improve your security story(!) Maya Kaczorowski, Google Cloud June 12

Containers can actually improve your security story(!) Maya Kaczorowski, Google Cloud June 12 2019 Maya Kaczorowski Security PM, Google Cloud @MayaKaczorowski Objection: My security team is opposed to containers and Kubernetes 3

649 views • 41 slides

CLIENT: METRO LA How might we improve bike security for commuters at Wilshire and Western? By

FALL 2018 THIS PROPOSAL IS BROUGHT TO YOU BY: HAREN SORIL ARASELI SERRANO EDDIE MARTINEZ COLE VERCAMMEN CLIENT: METRO LA How might we improve bike security for commuters at Wilshire and Western? By creating an affordable and digital bike

579 views • 33 slides

Retail security gate solutions Industrial security gate solutions Institutional

PHYSICAL SECURITY SOLUTIONS Quantum security gates can help you improve security quickly. Before or after a break-in. Retail security gate solutions Industrial security gate solutions Institutional security gate solutions Office

215 views • 18 slides

Food Insecurity in the World Strengthening the enabling environment to improve food security and

The State of Food Insecurity in the World Strengthening the enabling environment to improve food security and nutrition Food and Agriculture Organization of the United Nations European Commission Brussels, 16th October 2014

442 views • 30 slides

Security requirements Term Secuirty requirement A need or restriction from a user, a

Security requirements Term Secuirty requirement A need or restriction from a user, a stakeholder or the environment related to the goal to improve the system security. Holistic security requirement engineering, Computers & Security

216 views • 17 slides

PYRAMID CONSULTANTS Improve the food security and quality of life for the people involved in

PYRAMID CONSULTANTS Improve the food security and quality of life for the people involved in agriculture. Meet the Team Sreekant Lavanya Brian Quinn Pratik Sadie MBA Student MBA Student Mechanical Engineering Advertising Agricultural

408 views • 40 slides

Etiquette to Improve Internet Security Niklas Carlsson Martin Arlitt University of Calgary,

Leveraging Organizational Etiquette to Improve Internet Security Niklas Carlsson Martin Arlitt University of Calgary, Canada HP Labs, USA Presentation at IEEE ICCCN , Zurich, Switzerland, August 4, 2010 Motivation Organizations

341 views • 19 slides

REMEDI3S-TLD: Reputation Metrics Design to Improve Intermediary Incentives for Security of TLDs A

REMEDI3S-TLD: Reputation Metrics Design to Improve Intermediary Incentives for Security of TLDs A project in collaboration with SIDN and NCSC Maciej Korczy ski Delft University of Technology Contact: maciej.korczynski@tudelft.nl ICANN 54

605 views • 23 slides

DISC- Improv to Improve DISC- Improv to Improve DISC- Improv to Improve DISC- Improv to Improve

DISC- Improv to Improve DISC- Improv to Improve DISC- Improv to Improve DISC- Improv to Improve DISC- Improv to Improve DISC Personally I am very fond of strawberries and cream, but I have found that for some strange reason, fish prefer

270 views • 6 slides

Lecture 23: Cache, Memory, Security Todays topics: Caching policies Main memory

Lecture 23: Cache, Memory, Security Todays topics: Caching policies Main memory system Hardware security intro 1 Cache Misses On a write miss, you may either choose to bring the block into the cache (write-allocate) or

460 views • 11 slides

SoK: The Challenges, Pitfalls, and Perils of Using Hardware Performance Counters for Security

SoK: The Challenges, Pitfalls, and Perils of Using Hardware Performance Counters for Security Sanjeev Das , Jan Werner, Manos Antonakakis, Michalis Polychronakis, and Fabian Monrose SoK: The Challenges, Pitfalls, and Perils of Using Hardware

529 views • 28 slides

Meltdown an and Sp Spectre vu vuln lnerabili litie ies th the ch chall llenge is is up!

2/21/2018 Meltdown an and Sp Spectre vu vuln lnerabili litie ies th the ch chall llenge is is up! Jos van Eijndhoven Synopsys {040CODERS.nl} Meetup 20180215 Jos van Eijndhoven Profession: IC design tools, Hobby: Processor design

545 views • 15 slides

Advanced Systems Security: Hardware Security Trent Jaeger Systems and Internet

Systems and Internet Infrastructure Security Network and Security Research Center Department of Computer Science and Engineering Pennsylvania State University, University Park PA Advanced Systems Security: Hardware Security Trent Jaeger

703 views • 46 slides

Abusing hardware for fun and profit Agenda Cache-based Covert channels w/ demo Spectre

Abusing hardware for fun and profit Agenda Cache-based Covert channels w/ demo Spectre and Meltdown from covert channels Process isola8on + OS (CS 423) OS paging OS services 0x00000000 Communica<on to other processes

568 views • 15 slides

SOUND DEVIRTUALIZATION LLVM DEVMTG18 SOUND DEVIRTUALIZATION WHAT ARE VIRTUAL CALLS

PIOTR PADLEWSKI KRZYSZTOF PSZENICZNY SOUND DEVIRTUALIZATION LLVM DEVMTG18 SOUND DEVIRTUALIZATION WHAT ARE VIRTUAL CALLS Polymorphism in OOP %vtable = load {} %p %vfun = load {} %vtable call {} %vfun(args) LLVM DEVMTG18

537 views • 25 slides

Too Big to Fail: Risk - Return Considerations for Pension Trustees Moderator: Erin Shackelford ,

Too Big to Fail: Risk - Return Considerations for Pension Trustees Moderator: Erin Shackelford , Trustee Leadership Forum for Retirement Security, Initiative for Responsible Investment, Harvard Kennedy School Presenters: Simon Johnson , Ronald

744 views • 35 slides

Parallel Processing Anirudh Krishna Villivalam, Jennifer Xiao Multiscalar Processors Agenda

Parallel Processing Anirudh Krishna Villivalam, Jennifer Xiao Multiscalar Processors Agenda The Case for a Single-Chip Multiprocessor Paper Discussion Multiscalar Processors Motivation Long history (50 years) of sequential coding lead to a

853 views • 35 slides