Overt Operations | When the Red Team gets in your Face!
Channel: BSides SATX
Date: 15/08/2020

Title: Overt Operations | When the Red Team gets in your Face!
Presenter: Matthew Toussain
Track: In The Weeds
Time: 1500
BSides San Antonio 2020
July 11th, San Antonio, Texas

Abstract:
We talk covert operations all the time, but there’s more. What does an advanced red team do when their cover is blown? What changes do you make when the blue team already knows you're there? How do we operate overtly!?
In this talk, we delve into the specialized world of advanced red teaming. Here we move beyond the basics of an active directory domain and discuss methods to acquire freedom of maneuver within a target environment by leveraging all of the nuances that make each enterprise unique. We'll explore effects-driven operations and examine techniques to safely target Industrial Control Systems (ICS). Finally, advanced red teamers don't simply attack enterprises; they craft techniques to attack the enterprise defenses weaponizing them against the organization itself. The thing is... if the defenders already know you’re there, what could be better than making them think you’re everywhere!
Want a sneak preview of an in-development SANS class on advanced red teaming? Let's go!

Speaker Bio:
CTO, Open Security Inc.