Скачать с ютуб SAINTCON 2024 - Gerrit Gerritsen - From Bait to Breach в хорошем качестве

SAINTCON 2024 - Gerrit Gerritsen - From Bait to Breach

From Bait to Breach: Understanding and Interrupting the Spear Phishing Kill Chain A purple-team-style after-action review of a recent real-world spear phishing campaign. Phishing is the most common form of cyber attack, with spear phishing emerging as a particularly insidious threat. Understanding the anatomy of spear phishing campaigns will enable defenders to identify and prevent attacks. During this session, attendees will demystify spear phishing attacks by examining how the spear phishing kill chain is used in actual engagements. Participants will gain a comprehensive understanding of each phase of the kill chain, from initial research to the final retrieval of sensitive data. While walking through these real-world scenarios, we will highlight opportunities for defenders to detect and thwart spear phishing attacks. This session isn't just about identifying the steps an attacker takes—it's about empowering the blue team to recognize vulnerabilities and implement strategies that interrupt the attack chain effectively.