Blog

My training "Post Exploitation Adversary Simulations - Network Data Exfiltration Techniques" has been officially accepted at the 10th edition of the most recognized Belgium Hacking Conference - Brucon! It is a great pleasure for me. Registration is already open. As far as I know, the class is almost fully booked already, so take a look at the agenda and register asap! BruCONers - see you guys in early October.

Read more

The Open Source Defensive Security Training has been accepted @ Brucon Spring Session 2018 in Ghent, Belgium. It was a great time, see you guys at Brucon Conference in October!

Read now

During a Flocon 2018 in Tucson, AZ, I had a pleasure to talk about various network exfiltration methods and techniques (DNS, ICMP, TCP, UDP, HTTP, RDP, Cloud-app based and others). During a short, 30 minutes talk I described that without:
- Excellent Network Visibility Based on Multiple Collectors (PH, DNS, TLS, HTTP, Logs, SNMP, Netflows, others)
- Network Behavior Analytics powered by Hybrid Supervised/Unsupervised Anomaly Detection
- Active Response Module which supports all your existing security HW/SW
you are doing your Network Security just wrong.

Read now

My workshop: "May the data stay with you - Network Data Exfiltration Techniques." has been officialy accepted on Brucon 2017 Conference in Ghent, Belgium.

Data exfiltration is the process of transmitting data from pwned or infected networks back to the attacker while trying to minimize detection. During this workshop (2 hours) we will go through different network exfiltration methods and techniques (DNS, ICMP, TCP, UDP, HTTP, RDP, Cloud-app based and others). I will explain how they work, how to run them and what differences between are. It is a highly interactive workshop (I have dozen short labs already prepared) where you will be guided through the use of a set of open source tools powered by a short-fast theory.

Register now