I was invited to speak at Go Hacking, a Brazilian cyber security community and training provider. If you have never heard of them, check out the great content on their YouTube page. Given their recent training on Command and Control, I did a talk and demonstration on performing a high-value adversary emulation. I used MITRE ATT&CK for obtaining Cyber Threat Intelligence on APT19. Then I leveraged VECTR to create an adversary emulation plan. Lastly, I used Empire3 with Starkiller, a free command and control framework, and then SCYTHE, an enterprise grade command and control framework to perform the adversary emulation.
31May, 2020