Ending Soon: Get a MacBook Air or Surface Pro 7 with 5 or 6 Day Training - Best Offers of the Year!

Jacksonville 2020

Jacksonville, FL | Mon, Feb 24 - Sat, Feb 29, 2020
This event is over,
but there are more training opportunities.

Threat Hunting, Quick and Dirty [S1/E3]:Do you C2? If you do, ICU.

  • Jonathan Ham
  • Monday, February 24th, 7:15pm - 9:15pm

Wherein an Evil Agent does what an Evil Agent has to. This time our adversary is no less than renowned ex-NSA operator @MalwareJake! With bespoke malware (of course) Jake establishes C2 never before seen in the world. No matter. We will run it down once more...

Meanwhile, back at the office, Steve Secretary clicks a link. Then a browser goes pop. A new Evil thread emerges in the world. It doesnâ't know what to do! Halp! It needs a meeting! It needs to call Mom. And when it does...

When it does, I will see it. Without spectacularly expensive tools. Without dark skills. I will see it just by looking. If you want to see how, come see it with me. I'll show you how I found Jake, step-by-step.

[Note: This is Episode 3 of a series of Threat Hunts. The previous two are:

S1/E1: 492063616E207374696C6C2073656520796F7521

S1/E2: Seriously, I Really Can Still See You

They can be found on the Wild West Hackin' Fest YouTube channel.]


Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
  • Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
Monday, February 24
Session Speaker Time Type
General Session - Welcome to SANS Chris Pizor Monday, February 24th, 8:00am - 8:30am Special Events
Threat Hunting, Quick and Dirty [S1/E3]:Do you C2? If you do, ICU. Jonathan Ham Monday, February 24th, 7:15pm - 9:15pm Keynote
Tuesday, February 25
Session Speaker Time Type
So, You Want To Be An Infosec Consultant? Ted Demopoulos Tuesday, February 25th, 7:15pm - 8:15pm SANS@Night