Hunting Webshells - Tracking TwoFace

Explore the intricacies of hunting webshells and tracking TwoFace in this 45-minute conference talk from Derbycon 2019. Delve into the methodology behind TwoFace's operations, analyze command prompt techniques, and examine host-side analysis strategies. Learn effective mitigation tactics to protect against webshell threats. Gain valuable insights from security experts Josh Bryant and Robert Falcone as they share their expertise on this critical cybersecurity topic.

Intro
TwoFace
What They Did
Command Prompt Dish
Host Side Analysis
Mitigation