Immerse yourself in hands-on cyber security training at SANS Santa Monica 2019! Save $350 thru 8/28.

Webcasts

To attend this webcast, login to your SANS Account or create your Account.

Offensive WMI

  • Tuesday, February 12th, 2019 at 3:30 PM EST (20:30:00 UTC)
  • Tim Medin
This webcast has been archived. You can view the webcast presentation and download the slides by logging into your SANS Portal Account or creating an Account. Click the Register Now button after you have logged in to view the Webcast.

You can now attend the webcast using your mobile device!

Overview

Windows Management Instrumentation (WMI) is the infrastructure for management data and operations on Windows-based operating systems. That couldnt sound more boring. WMI is great for monitoring, but it is also fantastic for offense. WMI can be used for lateral movement. It can also be used for file-less persistence. In this webcast, Tim Medin will discuss the fun that is WMI and how you can use it to have a more effective offense.

Speaker Bio

Tim Medin

Tim Medin is the founder and Principal Consultant at Red Siege, a company focused to adversary emulation and penetration testing. Tim is also the SANS MSISE Program Director and author of several SANS courses. Through the course of his career, Tim has performed penetration tests on a wide range of organizations and technologies. He gained information security experience in a variety of industries including previous positions in control systems, higher education, financial services, and manufacturing. Tim is an experienced international speaker, having presented to organizations around the world. Tim is also the creator of Kerberoasting, a technique to extract kerberos tickets in order to offline attack the password of enterprise service accounts. Tim earned his MBA through the University of Texas. 

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.