Whether you're sussing out vulnerabilities or defending enterprise networks, Black Hat Europe's lineup of Briefings, Trainings, and Arsenal tools will help you take things to the next level.
Network defense is a fundamental aspect of cybersecurity, so if you're attending Black Hat Europe in London next month consider making time to check out some of the latest techniques and tools at this premier information security event.
In Stage 2 Security's AWS & Azure Exploitation: Making The Cloud Rain Shells! Training, attendees will get valuable insight into how to apply modern penetration testing skills to cloud-centric networks and environments. This fast-paced, hands-on course is designed to equip you with the tools, tactics, and techniques you need to infiltrate and expand access within remote networks, which are ever more common in today's cloud-centric world.
Hone your network pentesting skills at Pentesting Academy's Active Directory Attacks For Red And Blue Teams Training, which will demonstrate how to attack the modern Active Directory environment using built-in tools like PowerShell and other trusted OS resources. This is important because AD often forms the backbone of the complete enterprise network, and to secure such networks against bad actors it's critical to understand AD and the different techniques and attacks used against it.
Speaking of Active Directory attacks, The University of Tokyo will be presenting a Briefing on Real-Time Detection of Attacks Leveraging Domain Administrator Privilege You'll learn how attackers targeting the Active Directory try to take over Domain Administrator privilege and create a backdoor which disguises them as arbitrary legitimate accounts, in order to obtain long-term administrator privilege. This Briefing will also introduce you to a real-time detection method for attack activities leveraging Domain Administrator privilege (including Golden Tickets) by using Domain Controller Event logs.
In Gigamon's Network Defender Archeology: An NSM Case Study in Lateral Movement with DCOM, Black Hat Europe attendees will learn to combat attackers making malicious use of Windows' Component Object Model (COM) and Distributed Component Object Model (DCOM) systems. This Briefing will showcase how DCOM can be used as a lateral movement technique by antagonists, and provide a methodical walkthrough of the technique from both the attacker and defender perspectives.
Also, make time to swing by the Black Hat Europe Arsenal and check out some useful new network protection tools, including LMYN: Let's Map Your Network. Network security depends on you having a complete picture of all the systems which are connected to your network, and LMYN aims to provide (using basic network commands like traceroute, ping scans, etc.) an easy-to-use interface with which security engineers and network administrators can map their domains in graphical form with zero manual error.
If you're concerned about wireless network breaches, check out the Drosera: Using Wireless Honeypot to Protect Wireless Networks Arsenal demo. Drosera is a wireless honeypot platform for discovering wireless intrusion attacks and identifying intruders. When an attacker takes the bait and goes after a Drosera-protected honeypot network, Drosera will record all actions before and after the attacker connects to the network, including the process of attempting to connect to the network at the 802.11 frame level. Drosera can accurately identify the attack, and, what's more, it can help you get information about who's attacking your network(s), how they're doing it, and how good they really are.
Black Hat Europe returns to The Excel in London December 3-6, 2018. For more information on what's happening at the event and how to register, check out the Black Hat website.