Responding to Advanced Adversaries
25Advanced adversaries (a.k.a APTs ) are able to penetrate organizations and maintain access at will, and often for a long period of time. Advanced adversaries that launch targeted attacks on their victim, are often difficult to detect and eradicate from the environment. This talk will discuss the techniques that are used by threat actors to continue to maintain access in an environment and some key considerations that defenders should keep in mind when removing threat actors from their environment. I will talk about how Blue Teamers can detect, respond to and eradicate such threat actors from their environment.
ABOUT THE SPEAKER
Anurag Khanna is a Manager with CrowdStrike Services where he leads Incident Response and Consulting services in Asia Pacific and advises organizations when they are in midst of security incidents.
View upcoming Summits: http://www.sans.org/u/DuS
Download the presentation slides (SANS account required) at https://www.sans.org/u/1iaE
#BlueTeamSummit #BlueTeam #CyberDefense