SANS@MIC - WinSCP: Yeah you know me!

  • Monday, 01 Jun 2020 8:30PM EDT (02 Jun 2020 00:30 UTC)
  • Speaker: Mari DeGrazia

This presentation covers the artifacts related to WinSCP. WinSCP has traditionally been associated with external access and exfiltration. However, with some recent changes to Windows 10, WinSCP is an attractive option for attackers to leverage to fly under the radar to conduct lateral movement. Join me on a trip through the 90s as we cover WinSCP and the forensic artifacts associated with it.