BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Helpful Principles in Adversarial Operations\n   Whe
 n: Sunday\, Aug 14\, 11:00 - 11:30 PDT\n   Where: Flamingo - Sunset-Scenic
  Ballroom (Adversary Village) - [1]Map\n\n   SpeakerBio:Dan Borges\n   Dan
  Borges is an experienced incident responder and red teamer. He\n   plays 
 on the national CCDC red team and leads the virtual region each\n   year a
 nnually\, writing and leveraging custom red team tools. He also\n   helped
  start CPTC\, or the Collegiate Penetration Testing Competition.\n   Last 
 year he wrote a book on adversarial tradecraft in cyber security\,\n   dra
 wing on many lessons from these attack and defense competitions\, as\n   w
 ell as real world operations. Today he leads an incident response and\n   
 detection effort at a small startup.\n   Twitter: [2]@1njection\n\n   Desc
 ription:\n   I released a book last year titled Adversarial Tradecraft in\
 n   CyberSecurity: Offense vs Defense in real time. This book includes\n  
  several red team and blue team techniques that help get the advantage\n  
  over the opponent\, ultimately giving the user an edge in the conflict.\n
    Throughout this book I distilled several principles or theories that\n 
   either side can leverage in an abstract sense to gain these\n   advantag
 es. I will cover the principles\, as well as several real world\n   exampl
 es of using them from both the offense and defensive\n   perspectives. The
  principles and some examples are as follows:\n\n     * Principle of Decep
 tion - Offensive perspective will show some\n       obfuscation and hiding
  in the file system techniques Defensive\n       perspective will show hon
 eypots and honeytokens to get more info\n       about an attacker\n\n   *P
 rinciple of Physical Access - Offensive perspective will show how\n   phys
 ical keyloggers are so effective\, grabbing creds and remaining off\n   th
 e wire. Defensive perspective will show how no matter what an\n   attacker
  does defender can reimage and regain control if they have\n   physical ac
 cess\n\n   *Principle of Humanity - Offensive perspective will show how\n 
   researching the people involved can help you find the path to the\n   ac
 cess you need\, and who you need to exploit target to get there.\n   Defen
 sive perspective will show how profiling the attackers will help\n   to un
 derstand their TTPs\, and thus defend against them.\n\n   *Principle of Ec
 onomy - Shows how both sides are limited on personal\,\n   and how underst
 anding where they spend their money can help you avoid\n   their strongest
  areas\, or target their weakest spend locations.\n   Principle of Plannin
 g We will show how planning\, to get to run books\n   or even automation w
 ill save critical time during operations.\n\n   *Principle of Innovation -
  Will show how researching the attackers or\n   defenders tools can help d
 evelop exploits\, which can be used to change\n   the came or get unexpect
 ed access\, such as the defenders getting\n   access to a c2 server\, or t
 he offense getting an 0day to get in on the\n   edge.\n\n   *Principle of 
 Time - On the offense will show how previous automations\n   can help get 
 an advantage\, where as doing it by hand will not get the\n   same advanta
 ge (think killing the AV/EDR\, then running an automated\n   tool while it
  restarts) The defensive perspective will show how and\n   when you respon
 d to an incident can make or break it\, depending on how\n   much access t
 he offense has already gained.\n\n   '\n\n   1. https://defcon.outel.org/c
 onsolidated_page.html#FlamingoThirdFloor\n   2. https://twitter.com/1nject
 ion\n\n\n
DTEND:20220814T183000Z
DTSTART:20220814T180000Z
LOCATION:AVV - Flamingo - Sunset-Scenic Ballroom (Adversary Village)
SUMMARY:Helpful Principles in Adversarial Operations
END:VEVENT
END:VCALENDAR