DFIR Summit 2014 Keynote:  Barbarians at Every Gate: Responding to a Determined Adversary
Channel: SANS Digital Forensics and Incident Response
Date: 2015-03-13

KEYNOTE: Barbarians at Every Gate: Responding to a Determined Adversary
Location: Lone Star Room
In the last six months, Mandiant has helped an organization repel targeted attackers that utilized an increasingly sophisticated
set of tactics to re-compromise their environment. These tactics included:
• Leveraging interfaces from third-party networks
• Use of the heartbleed exploit to bypass VPN authentication
• Phishing attacks using a zero-day exploit in IE
This presentation will focus on how Mandiant kept pace with a determined adversary, followed the breadcrumb trails from
new attack vectors, and helped the client repel and remediate these attacks.
Speaker: Christopher Glyer, Technical Director, Mandiant