Ending Soon! Get an iPad Air with Smart Keyboard, Surface Go, or $300 Off thru Dec 11 with OnDemand or vLive Training!

London 2015

London, United Kingdom | Sat, Nov 14 - Mon, Nov 23, 2015
This event is over,
but there are more training opportunities.

Clean-Up in Datacentre Aisle 7

  • Steve Armstrong
  • Tuesday, November 17th, 6:00pm - 7:00pm

So you have had a breach and itās bad, real bad. The more you investigate the worse it gets until ā¦.. BOOM! There it is, innocently sat in a userās AppData\Local\Temp directory your entire AD database. Inside, a little part of you dies and for a few seconds you even contemplate you career choices and future options. Stealing yourself back to the task at hand you ask the universal question:- WTF do we do now?

If this is the stuff of your nightmares then come and listen to Steve Armstrong recount tales that will have you quaking in your sneakers. As a Principle Incident Responder with Logically Secure, Steve typically deals with the major breaches and having lead teams through the nightmare on several occasions Steve sees it as the opportunity to immediately build a better network. A practical and experience based presentation in which Steve will look at the activities that need to be completed in the immediate and short term, fleshing out the impact to the business that these will have.

If you are:

- an Incident Responder and have never lived through the nightmare of a serious breach, you need to come and hear how bad it gets.

- a penetration tester you should come and hear about some of the ramifications that follow an attackers use of MimiKatz so you can better debrief your clients.

- new to IT Security you should come along as Steve is usually an engaging and entertaining presenter, who this week is be teaching SEC504, Incident Response and Hacker Techniques.


Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
  • Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
Monday, November 16
Session Speaker Time Type
Welcome to SANS James Lyne Monday, November 16th, 8:15am - 8:45am Special Events
Evolving Threats & Defences Paul Henry Monday, November 16th, 6:00pm - 8:00pm Keynote
Tuesday, November 17
Session Speaker Time Type
Clean-Up in Datacentre Aisle 7 Steve Armstrong Tuesday, November 17th, 6:00pm - 7:00pm SANS@Night
How to bring some Advanced Persistent Trickery to your fight against Advanced Persistent Threats... Bryce Galbraith Tuesday, November 17th, 7:00pm - 8:00pm SANS@Night
Wednesday, November 18
Session Speaker Time Type
The Making of: The Good, The Bad and The Ugly Raul Siles Wednesday, November 18th, 6:00pm - 7:00pm SANS@Night
Hunting Your Adversary - How to Operate and Leverage an Incident Response Hunt Team Rob Lee Wednesday, November 18th, 7:00pm - 8:00pm SANS@Night
Thursday, November 19
Session Speaker Time Type
Secure at the (Software) Source Pieter Danhieux Thursday, November 19th, 6:00pm - 7:00pm SANS@Night
Dissecting the Latest and Greatest Malware Attacks Jess Garcia Thursday, November 19th, 7:00pm - 8:00pm SANS@Night