$400 Amazon Gift Card with OnDemand Training thru March 10 - Register Today!

Northern VA Winter - Reston 2018

Reston, VA | Mon, Jan 15 - Sat, Jan 20, 2018
This event is over,
but there are more training opportunities.

Kill Chain

  • Paul Henry
  • Wednesday, January 17th, 7:15pm - 8:15pm

For 20 years we have been installing security products that do little more then stare up the Internet pipe at the gateway looking at the big bad Internet trying to prevent that inevitable initial compromise. Suddenly someone drops a Spear Phishing email, or comes in via VPN partner connection, or a USB Drop or send a malicious attachment via Google email direct to the desktop - bypassing your gateway defenses - GAME OVER.

In this presentation we examine the kill chain from both a defensive and first responder perspective so you can better direct your efforts:

  • Initial Recon
  • Initial Compromise
  • Establish Foothold
  • Escalate Privileges
  • Internal Recon
  • Move Laterally (Gather PII)
  • Maintain Presence (Prepare for exfiltration)
  • Complete Mission

Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
  • Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
Monday, January 15
Session Speaker Time Type
General Session - Welcome to SANS Paul Henry Monday, January 15th, 8:00am - 8:30am Special Events
OBSESSED - How to Be Wildly Successful Dr. Eric Cole Monday, January 15th, 7:15pm - 9:15pm Keynote
Tuesday, January 16
Session Speaker Time Type
Blockchain: the New Digital Swiss Army Knife? G. Mark Hardy Tuesday, January 16th, 7:15pm - 8:15pm SANS@Night
Wednesday, January 17
Session Speaker Time Type
Kill Chain Paul Henry Wednesday, January 17th, 7:15pm - 8:15pm SANS@Night
Thursday, January 18
Session Speaker Time Type
Monitoring and Incident Response on a Shoestring Budget Joff Thyer Thursday, January 18th, 7:15pm - 8:15pm SANS@Night