Automate or Die: How Automation Reshapes Cybersecurity

•

1 gefällt mir•652 views

how automation changes both offensive side and defensive side, focusing on the full automation of targeted attacks. Technical analysis of the orchestration and automation of the Lateral Movement phase with BloodHound and GoFetch tools

Technologie

Tal Be’ery, Singtel Innov8 VC
Automate or Die: How Automation
Reshapes Cybersecurity

Tal Be’ery, Independent
Tal Maor, Microsoft ATA
The Industrial Revolution of
Lateral Movement

http://www.ourkids.net/blog/wp-content/uploads/2011/03/assembly-line.jpg

http://www.fanagrams.com/blog/wp-content/uploads/2011/03/Human-Evolution-Wallpaper2.jpg

Group:
tech
User:
User3
Computer:
10.0.0.10
User:
Admin1
Group:
Domain
Admins
http://www.slideshare.net/AndyRobbins3/six-degrees-of-domain-admin-bloodhound-at-def-con-24

BloodHound 1.0
Release
GoFetch Alpha
Demo @BHEU
DeathStar
Release
Invoke-GoFetch
Release
Integration of
BloodHound &
Empire
BloodHound
1.3 Release
Aug 2016 Nov 2016 May 2017 May 2017 June 2017 June 2017

USER1@DOMAIN.TEST.LOCAL
ADMINISTRATOR@DOMAIN.TEST.LOCAL
192.168.0.2
192.168.0.3
192.168.0.200

Automate or Die: How Automation Reshapes Cybersecurity

Empfohlen

The Industrial Revolution of Lateral MovementTal Be'ery

The Enemy Within: Stopping Advanced Attacks Against Local UsersTal Be'ery

Game inspiration image linksLewis Brierley

News bytes Oct-2011Ashwin Patil, GCIH, GCIA, GCFE

Metasploit-TOI-Ebryx-PVT-LtdAli Hussain

X10ABOT: The Modular, Scalable, Extensible robotics architectureRohan Smith

My Minecraft Smart Home: Prototyping the internet of uncanny things - Sascha ...Codemotion Tel Aviv

My Minecraft-Smart-Home: Prototyping the Internet of Uncanny ThingsSascha Wolter

Empfohlen

The Industrial Revolution of Lateral MovementTal Be'ery

The Enemy Within: Stopping Advanced Attacks Against Local UsersTal Be'ery

Game inspiration image linksLewis Brierley

News bytes Oct-2011Ashwin Patil, GCIH, GCIA, GCFE

Metasploit-TOI-Ebryx-PVT-LtdAli Hussain

X10ABOT: The Modular, Scalable, Extensible robotics architectureRohan Smith

My Minecraft Smart Home: Prototyping the internet of uncanny things - Sascha ...Codemotion Tel Aviv

My Minecraft-Smart-Home: Prototyping the Internet of Uncanny ThingsSascha Wolter

Interfaces: Evolução ou não?Tersis Zonato

CONFidence 2015: The Top 10 Web Hacks of 2014 - Matt Johansen, Johnathan KuskosPROIDEA

Real-time data analysis using ELKJettro Coenradie

Feature Bits at DevOpsDays 2010 USErik Sowa

Real World ChatOpsVictorOps

Containers and the Azure Open EcosystemJonathan Yu, P.Eng.

Hacking The World With Flashjoepangus

The Dynamite of Next Generation (Y) AttackPrathan Phongthiproek

How to prevent cyber terrorism taraganaGilles Sgro

Developing iPhone and iPad apps that leverage Windows AzureSimon Guest

ECM and Open Source Software: A Disruptive Force in ECM SolutionsJeff Potts

Lewis brady engine_terminology (edited version)LewisB2013

Lecture 07 virtual machine i鍾誠陳鍾誠

Scaling mobile testing on AWS: Emulators all the way downKim Moir

Will Git Be Around Forever? A List of Possible Successors🎤 Hanno Embregts 🎸

TYPO3 6.2. What's newRafal Brzeski

ETSI Hell's Kitchen Debate, Nice 2009Paul Downey

Алексей Колосов - Drupal для хостингаDrupalSPB

de:code エスキュービズム勉強会0620エンジニア勉強会エスキュービズム

I'm in ur browser, pwning your stuff - Attacking (with) Google Chrome ExtensionsKrzysztof Kotowicz

Give me some (key) space!Tal Be'ery

Web3’s red pill: Smashing Web3 transaction simulations for fun and profitTal Be'ery

Weitere ähnliche Inhalte

Ähnlich wie Automate or Die: How Automation Reshapes Cybersecurity

Interfaces: Evolução ou não?Tersis Zonato

CONFidence 2015: The Top 10 Web Hacks of 2014 - Matt Johansen, Johnathan KuskosPROIDEA

Real-time data analysis using ELKJettro Coenradie

Feature Bits at DevOpsDays 2010 USErik Sowa

Real World ChatOpsVictorOps

Containers and the Azure Open EcosystemJonathan Yu, P.Eng.

Hacking The World With Flashjoepangus

The Dynamite of Next Generation (Y) AttackPrathan Phongthiproek

How to prevent cyber terrorism taraganaGilles Sgro

Developing iPhone and iPad apps that leverage Windows AzureSimon Guest

ECM and Open Source Software: A Disruptive Force in ECM SolutionsJeff Potts

Lewis brady engine_terminology (edited version)LewisB2013

Lecture 07 virtual machine i鍾誠陳鍾誠

Scaling mobile testing on AWS: Emulators all the way downKim Moir

Will Git Be Around Forever? A List of Possible Successors🎤 Hanno Embregts 🎸

TYPO3 6.2. What's newRafal Brzeski

ETSI Hell's Kitchen Debate, Nice 2009Paul Downey

Алексей Колосов - Drupal для хостингаDrupalSPB

de:code エスキュービズム勉強会0620エンジニア勉強会エスキュービズム

I'm in ur browser, pwning your stuff - Attacking (with) Google Chrome ExtensionsKrzysztof Kotowicz

Ähnlich wie Automate or Die: How Automation Reshapes Cybersecurity (20)

Interfaces: Evolução ou não?

CONFidence 2015: The Top 10 Web Hacks of 2014 - Matt Johansen, Johnathan Kuskos

Real-time data analysis using ELK

Feature Bits at DevOpsDays 2010 US

Real World ChatOps

Containers and the Azure Open Ecosystem

Hacking The World With Flash

The Dynamite of Next Generation (Y) Attack

How to prevent cyber terrorism taragana

Developing iPhone and iPad apps that leverage Windows Azure

ECM and Open Source Software: A Disruptive Force in ECM Solutions

Lewis brady engine_terminology (edited version)

Lecture 07 virtual machine i

Scaling mobile testing on AWS: Emulators all the way down

Will Git Be Around Forever? A List of Possible Successors

TYPO3 6.2. What's new

ETSI Hell's Kitchen Debate, Nice 2009

Алексей Колосов - Drupal для хостинга

de:code エスキュービズム勉強会0620

I'm in ur browser, pwning your stuff - Attacking (with) Google Chrome Extensions

Mehr von Tal Be'ery

Give me some (key) space!Tal Be'ery

Web3’s red pill: Smashing Web3 transaction simulations for fun and profitTal Be'ery

Understanding Compound‘s LiquidationTal Be'ery

Web3 Security: The Blockchain is Your SIEMTal Be'ery

The Color of MoneyTal Be'ery

Open Sesame: Picking Locks with CortanaTal Be'ery

THE VOICE OF ESAU: HACKING ENTERPRISES THROUGH VOICE INTERFACES Tal Be'ery

Target Breach AnalysisTal Be'ery

Battlefield networkTal Be'ery

Client sidesec 2013-introTal Be'ery

Client sidesec 2013 - non jsTal Be'ery

Client sidesec 2013 - script injectionTal Be'ery

One Key to Rule Them All: Detecting the Skeleton Key MalwareTal Be'ery

Skeleton key malware detection owaspTal Be'ery

Mehr von Tal Be'ery (14)

Give me some (key) space!

Web3’s red pill: Smashing Web3 transaction simulations for fun and profit

Understanding Compound‘s Liquidation

Web3 Security: The Blockchain is Your SIEM

The Color of Money

Open Sesame: Picking Locks with Cortana

THE VOICE OF ESAU: HACKING ENTERPRISES THROUGH VOICE INTERFACES

Target Breach Analysis

Battlefield network

Client sidesec 2013-intro

Client sidesec 2013 - non js

Client sidesec 2013 - script injection

One Key to Rule Them All: Detecting the Skeleton Key Malware

Skeleton key malware detection owasp

Kürzlich hochgeladen

Breaking the Kubernetes Kill Chain: Host Path MountPuma Security, LLC

Unblocking The Main Thread Solving ANRs and Frozen FramesSinan KOZAK

How to convert PDF to text with Nanonetsnaman860154

How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Miguel Araújo

Neo4j - How KGs are shaping the future of Generative AI at AWS Summit London ...Neo4j

Developing An App To Navigate The Roads of BrazilV3cube

Scaling API-first – The story of a global engineering organizationRadu Cotescu

2024: Domino Containers - The Next Step. News from the Domino Container commu...Martijn de Jong

Presentation on how to chat with PDF using ChatGPT code interpreternaman860154

04-2024-HHUG-Sales-and-Marketing-Alignment.pptxHampshireHUG

Top 5 Benefits OF Using Muvi Live Paywall For Live StreamsRoshan Dwivedi

GenCyber Cyber Security Day PresentationMichael W. Hawkins

Driving Behavioral Change for Information Management through Data-Driven Gree...Enterprise Knowledge

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Igalia

A Domino Admins Adventures (Engage 2024)Gabriella Davis

[2024]Digital Global Overview Report 2024 Meltwater.pdfhans926745

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Drew Madelung

The Codex of Business Writing Software for Real-World Solutions 2.pptxMalak Abu Hammad

🐬 The future of MySQL is Postgres 🐘RTylerCroy

Kürzlich hochgeladen (20)

Breaking the Kubernetes Kill Chain: Host Path Mount

Unblocking The Main Thread Solving ANRs and Frozen Frames

How to convert PDF to text with Nanonets

How to Troubleshoot Apps for the Modern Connected Worker

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Neo4j - How KGs are shaping the future of Generative AI at AWS Summit London ...

Developing An App To Navigate The Roads of Brazil

Scaling API-first – The story of a global engineering organization

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Presentation on how to chat with PDF using ChatGPT code interpreter

04-2024-HHUG-Sales-and-Marketing-Alignment.pptx

Top 5 Benefits OF Using Muvi Live Paywall For Live Streams

GenCyber Cyber Security Day Presentation

Driving Behavioral Change for Information Management through Data-Driven Gree...

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

A Domino Admins Adventures (Engage 2024)

[2024]Digital Global Overview Report 2024 Meltwater.pdf

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

The Codex of Business Writing Software for Real-World Solutions 2.pptx

🐬 The future of MySQL is Postgres 🐘

Automate or Die: How Automation Reshapes Cybersecurity

1. Tal Be’ery, Singtel Innov8 VC Automate or Die: How Automation Reshapes Cybersecurity

4. Tal Be’ery, Independent Tal Maor, Microsoft ATA The Industrial Revolution of Lateral Movement

8. http://www.ourkids.net/blog/wp-content/uploads/2011/03/assembly-line.jpg

10.

11.

12.

13.

14. http://www.fanagrams.com/blog/wp-content/uploads/2011/03/Human-Evolution-Wallpaper2.jpg

15. The Automation

16.

17.

18.

19. Group: tech User: User3 Computer: 10.0.0.10 User: Admin1 Group: Domain Admins http://www.slideshare.net/AndyRobbins3/six-degrees-of-domain-admin-bloodhound-at-def-con-24

20. http://www.fanagrams.com/blog/wp-content/uploads/2011/03/Human-Evolution-Wallpaper2.jpg

21.

22.

23. BloodHound 1.0 Release GoFetch Alpha Demo @BHEU DeathStar Release Invoke-GoFetch Release Integration of BloodHound & Empire BloodHound 1.3 Release Aug 2016 Nov 2016 May 2017 May 2017 June 2017 June 2017

24. USER1@DOMAIN.TEST.LOCAL ADMINISTRATOR@DOMAIN.TEST.LOCAL 192.168.0.2 192.168.0.3 192.168.0.200

25.

26. Industrial Revolution

27.

28.

29.

30.

31.

32.

33.

34.

35.

36. Defense Automation

37.

38.

39.

40.

41.

42. Outro