Gain Top-Notch Cyber Security Skills at SANS Miami 2019. Save $200 thru 12/19!

Paris November 2017

Paris, France | Mon, Nov 13 - Sat, Nov 18, 2017
This event is over,
but there are more training opportunities.


  • (The Blue Team has the Advantage.)
  • Jonathan Ham
  • Thursday, November 16th, 6:00pm - 7:00pm

Everything leaves footprints on the network, whether itās a frontal assault on an Internet-facing SMB, or a lateral move living off the land with harvested creds. The Red Team only has the advantage up until the window breaks (I heard that!). Once you are in my house, I have the advantage (I know that squeaky floorboard!). Hereās what it looks like when you think you can steal my stuff.

Obfuscate your Powershell 10x. Drop PEs via DDE and Word macros. DLL inject mimikatz. Evade AV. Fine. But to MitM you have to mess with L2/L3, and to move laterally you have to do things on L3/L4 that shouldnāt be.

And when you do, I can still see you.

Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
Tuesday, November 14
Session Speaker Time Type
Citrix penetration testing tool ICA2tcp or how to pivot on a Virtual Desktop Mouad Abouhali Tuesday, November 14th, 6:00pm - 7:00pm SANS@Night
Thursday, November 16
Session Speaker Time Type
492063616E207374696C6C2073656520796F7521 Jonathan Ham Thursday, November 16th, 6:00pm - 7:00pm SANS@Night