BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Weather Proofing GCP Defaults\n   When: Friday\, Aug
  12\, 12:30 - 13:10 PDT\n   Where: Flamingo - Sunset-Scenic Ballroom (Clou
 d Village) - [1]Map\n\n   SpeakerBio:Shannon McHale\n   Shannon McHale\, A
 ssociate Consultant at Mandiant\, has spent her first\n   year in the secu
 rity industry focused on Red- Teaming cloud\n   environments and recently 
 passed the Google Cloud Certified\n   Professional Cloud Security Engineer
  (PCSE) exam. As one of Mandiant's\n   Google Cloud Platform (GCP) Subject
  Matter Experts (SME)\, she works\n   hard on enhancing and delivering the
  GCP Penetration Test methodology.\n   This is her first DefCon\, but she 
 has presented at ShmooCon and the\n   Women in Cybersecurity (WiCyS) confe
 rences\, while simultaneously\n   obtaining her Bachelor's of Science in C
 omputing Security from\n   Rochester Institute of Technology.\n   Twitter:
  [2]@_shannon_mchale\n\n   Description:\n   Default Google Cloud Platform 
 (GCP) configurations include open ports\,\n   high numbers of excessive pe
 rmissions\, limited logging\, and credential\n   expiration dates\, which 
 security professionals would typically never\n   let happen. But\, we cann
 ot expect users in GCP environments to know\n   and prioritize the most se
 cure option for each setting when they\n   configure a resource. This inad
 vertently leads to unsafe environments\n   that attackers can leverage.\n\
 n   In this talk\, we will review the 'dangerous defaults' of GCP and how\
 n   they can be abused by attackers. We'll also provide specific policies\
 n   cloud architects and cloud administrators should implement to stop\n  
  their users from deploying default configurations and outline how to\n   
 set up policies that reduce decision fatigue on their users. The goal\n   
 is for cloud architects\, engineers\, and Blue Teamers to implement what\n
    they see in this talk and scale their environment to be significantly\n
    more secure. It will also give my fellow Red Teamers a list of items\n 
   to check for during their assessments to help organizations further\n   
 harden their environments.\n\n   '\n\n   1. https://defcon.outel.org/conso
 lidated_page.html#FlamingoThirdFloor\n   2. https://twitter.com/_shannon_m
 chale\n\n\n
DTEND:20220812T201000Z
DTSTART:20220812T193000Z
LOCATION:CLV - Flamingo - Sunset-Scenic Ballroom  (Cloud Village)
SUMMARY:Weather Proofing GCP Defaults
END:VEVENT
END:VCALENDAR