IMPROVE YOUR SECURITY POSTURE A RED TEAM PERSPECTIVE TIM MEDIN - PowerPoint PPT Presentation

Feb 07, 2023 •784 likes •1.11k views

IMPROVE YOUR SECURITY POSTURE A RED TEAM PERSPECTIVE TIM MEDIN tim@redsiege.com BE LAZY NOT APT JUST PT EQUIFAX CIS CONTROL 1 & 2 INVENTORY PHISHING 101 WEB FILTER UNKNOWN NEW UNCATEGORIZED FINDING A DOMAIN STOP ATTACHMENTS

IMPROVE YOUR SECURITY POSTURE A RED TEAM PERSPECTIVE TIM MEDIN tim@redsiege.com
BE LAZY
NOT APT JUST PT
EQUIFAX
CIS CONTROL 1 & 2 INVENTORY
PHISHING 101
WEB FILTER UNKNOWN NEW UNCATEGORIZED
FINDING A DOMAIN
STOP ATTACHMENTS DISABLE MACROS
WINDOWS DEFENDER
PREVENTION FAILS SIGNATURES FAIL DETECTION IS A MUST
POWERSHELL
CONSTRAINED LANGUAGE MODE & LOGGING
SPECTER MELTDOWN
BAD PASSWORDS
PASSWORD SPRAY
DETECT SPRAY MICROSOFT AZURE 2FA
2FA IS NOT PERFECT
BEWARE OF CRED SNIPER
THE MYTH OF ESCALATION
DOMAIN ADMIN IS ONLY A TOOL
KEEP IT SIMPLE
PROTECT DETECT
Tim Medin tim@redsiege.com @TimMedin @RedSiegeInfoSec

Recommend

CRFB.org Social Security Reform Should Improve Equity Within Generations Vertical equity:

CRFB.org Social Security Reform Should Improve Equity Within Generations Vertical equity: Increase progressivity of benefits and taxes Improve income security for low-income retirees and especially widow(er)s Horizontal Equity:

379 views • 14 slides

Small Is Beautiful How to improve security by maintaining less code About Me Natalie Silvanovich

Small Is Beautiful How to improve security by maintaining less code About Me Natalie Silvanovich AKA natashenka Project Zero member Previously did mobile security on Android and BlackBerry Defensive-turned-offensive researcher

799 views • 53 slides

RENOVATE SCHOOL FACILITIES AND IMPROVE SECURITY Dr. Chrys Sweeting, Superintendent Mr. Brian

2018 BOND PROPOSAL TO CONSTRUCT AND RENOVATE SCHOOL FACILITIES AND IMPROVE SECURITY Dr. Chrys Sweeting, Superintendent Mr. Brian Lewis, Executive Director of Operations Bonds to Construct and Renovate School Facilities and Improve Security

400 views • 19 slides

To improve food security information using Earth observation at national/regional/global scale

To improve food security information using Earth observation at national/regional/global scale -Reflect the inter-dependent nature of the food price and security challenges - Shin-ichi Sobue Remote Sensing Technology Center of Japan Asia rice

325 views • 28 slides

LED lighting solutions dedicated to equine sector Improve its welfare Guarantee its security

LED lighting solutions dedicated to equine sector Improve its welfare Guarantee its security Optimise its performances FUNDAMENTAL ROLE OF PROXIMAL LIGHTING WELFARE, RECOVERY COMFORT, CONCENTRATION SCIENTIFIC AND TECHNICAL APPROACH SECURITY,

280 views • 5 slides

Improve physical layer security via cooperation Ning zhang 1 Outline Outline Physical

Improve physical layer security via cooperation Ning zhang 1 Outline Outline Physical layer security Ph i l l it Approach based on Multiple antennas Cooperation for security Single cooperative relay (with/without jamming)

539 views • 21 slides

Advisory Group Coorong Water Security Advisory Group Aims: To improve livestock producer water

LIVESTOCK WATER SECURITY IN SOUTH AUSTRALIA Coorong Water Security Advisory Group Coorong Water Security Advisory Group Aims: To improve livestock producer water security. Savings made will lead to reinvestment in improved livestock and feed

465 views • 23 slides

Containers can actually improve your security story(!) Maya Kaczorowski, Google Cloud June 12

Containers can actually improve your security story(!) Maya Kaczorowski, Google Cloud June 12 2019 Maya Kaczorowski Security PM, Google Cloud @MayaKaczorowski Objection: My security team is opposed to containers and Kubernetes 3

649 views • 41 slides

CLIENT: METRO LA How might we improve bike security for commuters at Wilshire and Western? By

FALL 2018 THIS PROPOSAL IS BROUGHT TO YOU BY: HAREN SORIL ARASELI SERRANO EDDIE MARTINEZ COLE VERCAMMEN CLIENT: METRO LA How might we improve bike security for commuters at Wilshire and Western? By creating an affordable and digital bike

579 views • 33 slides

Retail security gate solutions Industrial security gate solutions Institutional

PHYSICAL SECURITY SOLUTIONS Quantum security gates can help you improve security quickly. Before or after a break-in. Retail security gate solutions Industrial security gate solutions Institutional security gate solutions Office

215 views • 18 slides

Food Insecurity in the World Strengthening the enabling environment to improve food security and

The State of Food Insecurity in the World Strengthening the enabling environment to improve food security and nutrition Food and Agriculture Organization of the United Nations European Commission Brussels, 16th October 2014

442 views • 30 slides

Security requirements Term Secuirty requirement A need or restriction from a user, a

Security requirements Term Secuirty requirement A need or restriction from a user, a stakeholder or the environment related to the goal to improve the system security. Holistic security requirement engineering, Computers & Security

216 views • 17 slides

PYRAMID CONSULTANTS Improve the food security and quality of life for the people involved in

PYRAMID CONSULTANTS Improve the food security and quality of life for the people involved in agriculture. Meet the Team Sreekant Lavanya Brian Quinn Pratik Sadie MBA Student MBA Student Mechanical Engineering Advertising Agricultural

408 views • 40 slides

Etiquette to Improve Internet Security Niklas Carlsson Martin Arlitt University of Calgary,

Leveraging Organizational Etiquette to Improve Internet Security Niklas Carlsson Martin Arlitt University of Calgary, Canada HP Labs, USA Presentation at IEEE ICCCN , Zurich, Switzerland, August 4, 2010 Motivation Organizations

341 views • 19 slides

REMEDI3S-TLD: Reputation Metrics Design to Improve Intermediary Incentives for Security of TLDs A

REMEDI3S-TLD: Reputation Metrics Design to Improve Intermediary Incentives for Security of TLDs A project in collaboration with SIDN and NCSC Maciej Korczy ski Delft University of Technology Contact: maciej.korczynski@tudelft.nl ICANN 54

605 views • 23 slides

DISC- Improv to Improve DISC- Improv to Improve DISC- Improv to Improve DISC- Improv to Improve

DISC- Improv to Improve DISC- Improv to Improve DISC- Improv to Improve DISC- Improv to Improve DISC- Improv to Improve DISC Personally I am very fond of strawberries and cream, but I have found that for some strange reason, fish prefer

270 views • 6 slides

Orchestrating Security Tooling With AWS Step Functions 1 Background Jules Denardou Justin

Orchestrating Security Tooling With AWS Step Functions 1 Background Jules Denardou Justin Massey @Pod_Sec @jmassey09 @JulesDT @th3r3p0 Security Engineers at Datadog Product Security team Improve security of product without

1.2k views • 84 slides

Auditors Conference Election Security Legislative Discussion Last years bill 2647/6412 had

Auditors Conference Election Security Legislative Discussion Last years bill 2647/6412 had several parts Improve signature witness information Reorganize and improve post-election audits Update the recount process Protect the

433 views • 18 slides

Mission Objective: Compromise Nuclear Facility Using Virtual Reality to Improve Cyber Security and

Mission Objective: Compromise Nuclear Facility Using Virtual Reality to Improve Cyber Security and Physical Protection of Nuclear Material and Nuclear Facilities 1. Mission Briefing 10. Mission Recap High sense of realism Browse thru this

506 views • 11 slides

Design, Privilege Separation CS 161: Computer Security Prof. David Wagner January 27, 2016

Software Security: Design, Privilege Separation CS 161: Computer Security Prof. David Wagner January 27, 2016 Robustness Security bugs are a fact of life How can we use access control to improve the security of software, so security bugs

695 views • 32 slides

Improving Application Software Security in Linux Sebastian Neubauer Technische Universitt

Improving Application Software Security in Linux Sebastian Neubauer Technische Universitt Mnchen Computer Science Department July 19, 2017 1 Improve C/C++ applications contain bugs Security Existing security mechanisms Still

367 views • 32 slides

Security and Resilience Juan Torres, SNL April 21, 2016 Overview The "Security and

Security and Resilience Juan Torres, SNL April 21, 2016 Overview The "Security and Resilience" focus area has five main activities, based on the NIST cybersecurity framework, but expanded to all- hazards. Improve the Ability to

647 views • 6 slides

(And How to Improve It) A Complimentary Webinar From healthsystemCIO.com Your Line Will Be

Understanding Your Security Posture (And How to Improve It) A Complimentary Webinar From healthsystemCIO.com Your Line Will Be Silent Until Our Event Begins at 12:00 ET Thank You! Slide Deck: http://goo.gl/700LIu Webex Support

556 views • 21 slides

African-German partnership to enhance resource use efficiency and improve food security in urban

Urban Urban Food Plus Food Plus African-German partnership to enhance resource use efficiency and improve food security in urban and peri-urban agriculture of West African cities PI-Meeting 14.05.2013 Witzenhausen Steinstr. 19 (H21)

362 views • 25 slides