You’re on a covert penetration test focusing on the client’s monitoring and alerting capabilities. You’ve just established a foothold, maybe even elevated to admin, but now what? You want to know more about the internal network but careless packet slinging will get you caught. Join me on a mining expedition where you can’t swing your pick axe without striking gold. We’ll be mining logs, pilfering connection statistics, and claim jumping process network connections. Without leaving the comfort of your beachhead, you’ll be shouting “Eureka!” in no time.

Talk by Derek Rook