Bumper Targeted Attacks and the Privileged Pivot

Explore targeted attacks and privilege escalation techniques in this 28-minute conference talk from GrrCON 2015. Delve into traditional defense strategies, the concept of "The Keep" and "The Vault," and understand the privilege escalation cycle. Learn about seed selection, harvesting techniques, and data storage methods. Examine real-world case studies, including the October 2013 DAY 14 incident, November 1-8, 2013 DAY 36 event, and the Ashley Madison breach. Discover the Rough Auditing Tool for Security and the use of PSExec. Gain insights into effective countermeasures and practical steps to enhance your organization's security posture against sophisticated cyber threats.

Intro
Traditional Defense
The Keep
The Vault
The Privilege Escalation Cycle
Pick Your Seed
Harvest
Repeat
Storage
October 2013 - DAY 14
November 1 - 8, 2013 - DAY 36
Rough Auditing Tool for Security
November December - DAY 66
PSExec
Ashley Madison
What can I do???