Exfiltration: Level hard
summary
The talk examines advanced data exfiltration techniques beyond common channels like HTTPS, DNS, and ICMP, evaluating whether more “elegant” methods can be used to steal data from organizations. It also assesses whether Data Loss Prevention (DLP) systems are capable of detecting or stopping those sophisticated exfiltration attempts.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 3:51HTTP listeners and exfiltration
- 8:05ICMP exfiltration and T-Shark
- 14:42DNS exfiltration and records
- 20:10Websockets and exfiltration
- 23:46FTP exfiltration and size
- 28:47Morse code exfiltration
- 32:21FSK sound exfiltration
- 35:57LPT printer exfiltration
- 39:52Monitor exfiltration
- 41:37Summary and Q&A
related talks
44mData Splicing Attacks: Breaking Enterprise...
39mExfiltrate All The Things!
48mData-Driven Cyber Indicators of Malicious Insider Threat
26mMisuse of DNS, the Second Most Used Protocol
41mWhen Cybersecurity Is More Than Just Vulnerabilities
40mFighting Where They Aren't: How Attackers Avoid Endpoints in Modern Attacks
47mData at Rest Encryption Going Beyond the Basics to Address Modern Attacks
34mPractical Steps for Reducing Exposure and Detecting Compromise