35+ Cyber Security Courses at SANS Cyber Defense Initiative® in Washington, DC! Save up to $300 thru 10/16.
Register by Tomorrow to Save $300 on 4-6 Day Courses at SANS Cyber Defense Initiative® in Washington, DC!

San Francisco Summer 2019

San Francisco, CA | Mon, Jul 22 - Sat, Jul 27, 2019
This event is over,
but there are more training opportunities.

The Offensive Defender | Cyberspace Trapping

  • Matthew Toussain
  • Thursday, July 25th, 7:15pm - 8:15pm

The attacker always wins because they have the advantage. Wrong!

Any seasoned red teamer knows that they need to succeed at each stage of their compromise to achieve the objective. As defenders, we only need to stop them along one point in the intrusion. By leveraging our Home Field Advantage and weaponizing our networks with traps and snares, we have the opportunity to take the initiative and bring the fight to the intrusion set.

Attackers may have an untold and ever-growing number of tools and techniques to use during the attack, but they have a limited set of tried and true tactics. Targeting the adversary and poisoning their tried and true tactics lets us weaponize our environments where the Threat's own decision making is their undoing. When an attacker can never be certain if their own, unique tools are safe for them to use, their decision making is disrupted and the fight is already won. This talk is about the strategy of cyberspace trapping and includes a library of scripts and demonstrations for attendees to take with them and apply on the day.


Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
  • Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
Monday, July 22
Session Speaker Time Type
General Session - Welcome to SANS Bryan Simon Monday, July 22nd, 8:00am - 8:30am Special Events
An Interactive Look at Software Exploitation & Today's Threat Landscape Stephen Sims Monday, July 22nd, 7:15pm - 9:15pm Keynote
Tuesday, July 23
Session Speaker Time Type
Are You Certifiable? Ron Hamann Tuesday, July 23rd, 7:15pm - 8:15pm SANS@Night
Wednesday, July 24
Session Speaker Time Type
Moving Past Just Googling It: Harvesting and Using OSINT Micah Hoffman Wednesday, July 24th, 7:15pm - 8:15pm SANS@Night
Thursday, July 25
Session Speaker Time Type
The Offensive Defender | Cyberspace Trapping Matthew Toussain Thursday, July 25th, 7:15pm - 8:15pm SANS@Night