Blog

My training "In&Out: Network Data Exfiltration Techniques" has been officially accepted and registration is already open!
I am very honored to be a part of such a great ITsec conference. We are going to have very - I said - very, intensive 2-day training session about post exploitation adversary simulations and network data exfiltration. Save the date: November 25-26, 2018 - Dubai and register as soon as possible. HITB2018DXB - I am coming:)

Read more

My training "Post Exploitation Adversary Simulations - Network Data Exfiltration Techniques" has been officially accepted at the 10th edition of the most recognized Belgium Hacking Conference - Brucon! It is a great pleasure for me. Registration is already open. As far as I know, the class is almost fully booked already, so take a look at the agenda and register asap! BruCONers - see you guys in early October.

Read more

The Open Source Defensive Security Training has been accepted @ Brucon Spring Session 2018 in Ghent, Belgium. It was a great time, see you guys at Brucon Conference in October!

Read now

During a Flocon 2018 in Tucson, AZ, I had a pleasure to talk about various network exfiltration methods and techniques (DNS, ICMP, TCP, UDP, HTTP, RDP, Cloud-app based and others). During a short, 30 minutes talk I described that without:
- Excellent Network Visibility Based on Multiple Collectors (PH, DNS, TLS, HTTP, Logs, SNMP, Netflows, others)
- Network Behavior Analytics powered by Hybrid Supervised/Unsupervised Anomaly Detection
- Active Response Module which supports all your existing security HW/SW
you are doing your Network Security just wrong.

Read now