Tackling SAP Security Together – The Journey to Attack and Defend
Channel: NO MONKEY
Date: 2022-11-03

Tackling SAP Security Together – The Journey to Attack and Defend

Topics covered in this session:

· Approaching Enterprise Application Security Experts
· SAP Experts moving to Security
· SOC Analysts and Blue Teamers
· Penetration Testers

You have just landed your first job in information security. Let's say you're a junior penetration tester. You have a decent HACK-THE-BOX completion record and you breezed right through your Ethical Hacker Certification (EHC). Now you’ve been assigned a project to assess the security of servers for a Fortune 500 company. Great! You feel ready to go. 

But wait...the first port scans provide strange results. Ports are open all over the place. Regardless of the settings, the port scanner is not able to identify most of the services. You find some web services but there are no matches with the standard file enumeration lists. You're getting nervous. The first day is already over and you  don't yet have an idea of what's running on these boxes, or even a first finding. After tweaking the port scanner you get some information on exposed SAP services. But, when you google for SAP, you find a plethora of different software solutions and products. You're imposter syndrome kicks in. Are you good enough for this? How can you do a proper assessment when you don't have a clue about the technology?

How about joining this Tackling SAP Security Together session and learn from the journey of two info sec. professionals getting into SAP security. Get advice from their discussion on:

– Where you can find relevant information to start on  the topic
– What do you need to consider when SAP technology becomes part of your information security agenda 
– What techniques and tools you can adapt and what additional tools are important to incorporate in your toolbox.
–  What are the first things to start with when threat hunting.

Afterwards, the floor is yours! Ask questions and get them answered on the spot.