Tristan Bennett
where else to find them
no profile links on file
what they talk about
where they keep going back
- NDC Security2 editions2024–2025
on a stage with
never shared a talk
who talks about the same things
- Lee holmes4 talks
- Daniel Bohannon5 talks
- Ken Johnson5 talks
- Gareth Emslie6 talks
- Avishay Zawoznik3 talks
- Matt Graeber3 talks
| title | conference | date |
|---|---|---|
| Spoofing Commands - Can You Trust Process Creation Logs? | NDC Security 2025 | 2025-01-20 |
Attacks overwrite the process environment block to replace the logged command line after a process is created suspended, so Windows, Sysmon and Defender XDR… | ||
| Detecting Malicious Activity: Unveiling the Secrets of MS-SQL Logging | NDC Security 2024 | 2024-01-09 |
Detects concrete MS‑SQL abuse patterns by deploying a repeatable 8–12 week audit configuration and simple detections, shipped as SQL scripts and JSON tests on… | ||
| nothing matches | ||