Hello and congratulations
on the successful completion of
the privilege escalation phase
of these discussions with respect
to the miter attack framework.
So what should we have learned up
to this point?
Well, we're going to be quick.
We should have looked at access,
token manipulation, described
it, how it's been used and
mitigating and detection techniques.
Within that, we looked at elevated
execution with prompt, again,
describing what it was within Miner,
how we've seen it used or some
examples or vulnerabilities, their
mitigation techniques and detection
techniques.
We reviewed exploitation for
privilege, escalation, touching on
what it was.
Some use cases in areas
where that's been taken advantage
of. And then we jumped in to
mitigation and detection techniques
as well.
Filesystem permission, weaknesses,
touching on all of those core areas
that we've previously discussed,
scheduled tasks, looking at how
that's used, how you
can take advantage of scheduled test
run scripts and do things of that
nature. And then again, mitigation
and detection techniques.
We looked at Souto at a high level,
again, being specific to Linux
and Mac OS for essentially
running as administrator.
If the seducers group is taken
advantage of or that files
manipulated, that can be used
to do some damage.
We then rounded our discussions
out with webmail, describing
what that was, how systems
should be properly segmented, and
ensuring that if you do have an
externally facing server, that
it is limited in its privileged sets
and its capabilities.
Remember, throughout all of these
discussions, we've got some
reoccurring themes and things that
are happening. But it's important
that you realize that you can
consume this information
in a number of ways, that you can
break these modules up, these
discussions up into
individual categories as need
be. And so the mitigation techniques
that may dovetail into other areas
are always going to be
important across the board and
they're going to be worth mentioning
again and again.
So with that in mind, I want to
thank you for your time today, and
I look forward to seeing you again
soon.