Cyber Threat Workshop April 14, 2022 - Digital Future: How We Can Create a Safer Internet, Together

Описание: We will be looking at how External Attack Surface Management (EASM) and Threat Intelligence (TI) have blended to get organizations contextual aware ness of real direct observations risks and threats on the internet. Armed with this knowledge we will show how to harness this information to protect you, others, and third parties from these threats making the internet a safer place for all.

The Lab exercises will include hands-on use of RiskIQ Illuminate to perform research and deep dive into real and potentially malicious indicators to determine the full extent of threat actor infrastructure.

Disclaimer
RiskIQ’s Cyber Threat Workshops include live, real-time observations and threat indicators, including malicious infrastructure and adversary-threat tooling.

RiskIQ will share online resources (e.g., IP addresses, domain names) that should be considered real threats posing a clear and present danger.

We ask our participants to use their best judgment and minimize unnecessary risk while interacting with malicious systems in workshop lab exercises.

Use Cases:
00:26:29 Examining a known good and bad domain
What looks normal?
what looks suspicious?

00:56:28 Credential-Stealing malware.
What are they after, Social Media accounts?

01:19:02 EvilNominatus Ransomware
How threat actors are leveraging cheap services to host bad things.

01:44:01 Finding iCloud phishing domains
Examining phishing domains and leveraging attributes inside of whois data to find related phishing sights.