Destroying the Fog of War: Demonstrating Realistic End-to-End Attacks and Detective Controls – Jeff McJunkin

This talk reveals the five ways outside attackers gain internal access and outlines defenders’ three core objectives: reducing initial access, lowering detection and response time, and slowing down attackers. Through live demonstrations, real-world examples, and even a unique Mario Kart analogy, this talk provides actionable insights into detective controls and slowing down attackers. Emphasizing that prevention is ideal but not always possible, the session focuses on minimizing, detecting, and accelerating response to incidents, arming attendees with the tools to outpace attackers and safeguard their environments. Wherever you’re interested, there will also be links to other presentations on credential stuffing, threat hunting, slowing down attackers, and more throughout!

Jeff McJunkin is the founder of Rogue Valley Information Security, a consulting firm specializing in penetration testing entire companies – from web and network to cloud assets. His specialty, therefore, is generalization, with significant experience in areas from forensics, systems and network administration, virtualization, and many aspects of offensive operations. He focuses on actionable reports full of findings that real-world adversaries would also find in clients’ environments. In addition to consulting, he presents at many conferences around the world, holds many certifications, and teaches for the SANS Institute.