TIM MEDIN BREACHES - Red Siege€¦ · if-FW TV-IPIIOW 1.1.0-104 20110325 r1006.pckof=2 bs=l skip=32320 count-646816 646816+0 records in 646816+0 records out 646816 bytes (647 kB)

BREACHES:AN ATTACKERS PERSPECTIVE

TIM MEDIN

WHO?

1. HEALTHCARE

GOVERNANCE

PREVENTION DETECTION

37% MALWARE UNIQUE HASH

WINDOWSDEFENDER

THREAT INTEL

PHISHING

PHISHING 101

FINDING A DOMAIN

NOT APT JUST PT

EQUIFAX

ENDPOINT PROTECTION

BYPASS

POINT CLICK

IOT

WEB CAM

VULNERABITYMANAGEMENT

ACTIONABLERESPONCE

SPECTERMELTDOWN

BAD PASSWORDS

ETERNALBLUE

MYSQLCVE-2012-2122

CISCO SSH AUTH

BYPASS

YOU NEVER KNOW TOO

MUCH

DETECTION ISKEY

Tim Medin tim@redsiege.com @TimMedin