Covert Attack Mystery Box: A few novel techniques for exploiting Microsoft "features"
From Wild West Hackin' Fest 2018 in Deadwood, SD.
Presenters: Mike Felch and Beau Bullock
Does the blue team got you feeling down because they are on you like Windows Defender on a Mimikatz binary? Have you lost sleep at night because their logging and alerting levels are so well tuned that if they were vocals, auto-tune couldn’t make them any better? Do you like surprises? Well you are in luck!
Over the last few months we’ve been doing a bit of research around various Microsoft “features”, and have mined a few interesting nuggets that you might find useful if you’re trying to be covert on your red team engagements. This talk will be “mystery surprise box” style as we’ll be weaponizing some things for the first time. There will be demos and new tools presented during the talk. So, if you want to win at hide-n-seek with the blue team, come get your covert attack mystery box!
--------------------------------------
Beau is a Penetration Tester at Black Hills Information Security where he performs various security assessments for organizations. Beau is a host of Tradecraft Security Weekly, Hacker Dialogues, and the CoinSec Podcast. He has spoken at industry events including Black Hat Arsenal, DerbyCon, Wild West Hackin' Fest, BSides events, and various SANS conferences.
Michael began his career in 1997 as a Linux Administrator which eventually led to numerous offensive security roles, software development and hardware/software security research. Michael is also a lead forensics instructor for TeelTech, an Officer for OWASP Orlando (Chief Breaker) and an organizer for BSides Orlando.
--------------------------------------
Follow Wild West Hackin' Fest on Twitter here: / wwhackinfest
Website & Info: https://www.wildwesthackinfest.com/