Server Message Block Worms - The Gift That Keeps on Giving

Explore the persistent threat of Server Message Block (SMB) worms in this 45-minute conference talk from Converge 2018. Delve into the intricacies of SMB, its vulnerabilities, and common exploitation methods. Follow along as Matthew Aubert guides you through a comprehensive incident response process, from initial detection to post-incident activities. Gain valuable insights on prevention strategies and access essential resources to enhance your cybersecurity knowledge and preparedness against SMB-based attacks.

Intro
Why are we in this room?
About Me
What is Server Message Block (SMB)?
How can SMB be exploited?
How are SMB worms typically delivered?
Incident Response Process
Scenario
Detection and Analysis
Discussion
Containment
Eradication and Recovery
Post-Incident Activity
How can we prevent this from happening?
Resources