Daniel Bohannon
where else to find them
no profile links on file
what they talk about
where they keep going back
no series more than once — all 3 in the filters
on a stage with
never shared a talk
who talks about the same things
- Matt Graeber3 talks
- Lee holmes4 talks
- Rob Pleau8 talks
- James Brundage10 talks
- Filipi Pires5 talks
- Thomas Rayner8 talks
| title | conference | date |
|---|---|---|
| Using Pester & ScriptAnalyzer for Detecting Obfuscated... | PowerShell + DevOps Global Summit 2019 | 2019-04-29 |
Shows concrete detections: combines PesterSec tests and ScriptAnalyzer + AST rules to find token‑level obfuscation that ScriptBlock logging leaves behind… | ||
| Malicious Payloads vs Deep Visibility: A PowerShell Story | PowerShell + DevOps Global Summit 2019 | 2019-04-29 |
Shows real payloads and evasions: staged PowerShell loaders that use RC4 and base64 compression, token/format obfuscation and cmd.exe wrapping, AMSI bypass… | ||
| D1T2 - Techniques FOR %F IN (-style) DO (S-level CMD Obfuscation) | Hack In The Box Amsterdam 2018 | 2018-04-09 |
Claim: cmd.exe offers powerful, under‑documented obfuscation primitives that attackers already exploit and defenders largely miss. Demonstrated techniques… | ||
| PowerShell obfuskation Techniques & How To Detect Them | CODE BLUE 2016 | 2016-10-20 |
Describes a dozen never-before-seen techniques that mutate PowerShell command arguments so common detections fail, demonstrates concrete methods like tick… | ||
| nothing matches | ||