Ad
Ad
Ad
Ad
Ad
Ad
Ad
Ad
Ad
Ad
Ad
SESSION ID:SESSION ID:
#RSAC
Anthony Talamantes
Keeping Up with the Adversary:
Creating a Threat-Based Cyber Team
AIR-R03
...
#RSAC
Where We Were
2
Ground Up Approach
Continuous Monitoring
— Anti-Virus
— IPS/IDS
— Blackhole/Sinkhole
— Sandboxes
— A...
#RSAC
APL Targeted by Nation State – Case Study
3
Malware evolution
Persistence in Registry
Enumerate running processes
An...
1 of 27 Ad