BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: us-east-1 Shuffle: Lateral Movement and other Creati
 ve Steps\n   Attackers Take in AWS Cloud Environments and how to detect th
 em\n   When: Saturday\, Aug 13\, 13:40 - 14:20 PDT\n   Where: Flamingo - S
 unset-Scenic Ballroom (Cloud Village) - [1]Map\n\n   SpeakerBio:Felipe Esp
 ósito\n   Felipe Espósito also known as Pr0teus\, graduated in Informatio
 n\n   Technology at UNICAMP and has a master's degree in Systems and\n   C
 omputing Engineering from COPPE-UFRJ\, both among the top technology\n   u
 niversities in Brazil. He has over ten years of experience in\n   informat
 ion security and IT\, with an emphasis on security monitoring\,\n   networ
 king\, data visualization\, threat hunting\, and Cloud Security.\n   Over 
 the last years he has worked as a Security Researcher for Tenchi\n   Secur
 ity\, a Startup focused in secure the cloud\, he also presented at\n   res
 pected conferences such as Hackers 2 Hackers Conference\, BHACK\,\n   BSid
 es (Las Vegas and SÏ€o Paulo)\, FISL\, Latinoware\, SecTor\, SANS SIEM\n  
  Summit\, and Defcon's CloudSec Village.\n   Twitter: [2]@Pr0teusBR\n\n   
 Description:\n   Attackers do not always land close to their objectives (d
 ata to\n   steal). Consequently\, they often need to move laterally to acc
 omplish\n   their goals. That is also the case in cloud environments\, whe
 re most\n   organizations are increasingly storing their most valuable dat
 a. So as\n   a defender\, understanding the possibilities of lateral movem
 ents in\n   the cloud is a must.\n\n   Because the control plane APIs are 
 exposed and well documented\,\n   attackers can move between networks and 
 AWS accounts by assuming\n   roles\, pivoting\, and escalating privileges.
  It is also possible for\n   attackers to move relatively easily from the 
 data plane to the control\n   plane and vice-versa.\n\n   In this talk\, w
 e are going to explore how attackers can leverage AWS\n   Control and Data
  Planes to move laterally and achieve their\n   objectives. We will explor
 e some scenarios that we discovered with our\n   clients and how we approa
 ched the problem. We will also share a tool\n   we created to help us visu
 alize and understand those paths.\n\n   '\n\n   1. https://defcon.outel.or
 g/consolidated_page.html#FlamingoThirdFloor\n   2. https://twitter.com/Pr0
 teusBR\n\n\n
DTEND:20220813T212000Z
DTSTART:20220813T204000Z
LOCATION:CLV - Flamingo - Sunset-Scenic Ballroom  (Cloud Village)
SUMMARY:us-east-1 Shuffle: Lateral Movement and other Creative Steps Attack
 ers Take in AWS Cloud Environments and how to detect them
END:VEVENT
END:VCALENDAR