7 februari 2016

3 februari 2016

Obtaining and Detecting Domain Persistence

Ta över en domain controller. Beskriver flera sätt att bibehålla access till en domain controller. Beskriver även hur en försvarare kan se händelser i loggarna. Mycket bra presentation.


DEF CON 23 - Grant Bugher - Obtaining and Detecting Domain Persistence - YouTube


28 januari 2016

NSA Hacker Chief Explains How to Keep Him Out of Your System

How to Keep the NSA Out

If you really want to make the NSA’s life hard, he ticked off a list of things to do: limit access privileges for important systems to those who really need them; segment networks and important data to make it harder for hackers to reach your jewels; patch systems and implement application whitelisting; remove hardcoded passwords and legacy protocols that transmit passwords in the clear...

....Another nightmare for the NSA? An “out-of-band network tap”—a device that monitors network activity and produces logs that can record anomalous activity—plus a smart system administrator who actually reads the logs and pays attention to what they say.....

NSA Hacker Chief Explains How to Keep Him Out of Your System | WIRED