On October 8, 2020, OccamSec participated in a joint OWASP London and OWASP Suffolk meeting.
Part one was a presentation by Jason Sewell – “The Cloud Migration playbook – Part 1: A simple primer to complexity” In the talk, Jason went over an introductory overview on the common areas of AWS an organization should start to focus on as they prepare to migrate to the cloud, including both offensive techniques and defensive mitigation.
Part two (1:07:00) saw three of our team – Cayce Mahon, Ivano Bianco, and Nick Donarski, participate in a “pentester panel” where they answered questions on a range of penetration testing topics.
INSIGHTS
We like to help our clients learn how to better protect themselves. Here’s what we’re reading now.
- Apr 11,2024
5 min read
Our analysis of Microsoft's patch Tuesday releases for April 2024- what you need to be most concerned about.
- Mar 15,2024
10 min read
In this document, the first part of the results of our ongoing research into LLMs, we examine the efficacy of specific large language models for the generation of malicious software. Our focus is on open source models as these lend themselves more easily to malicious activities.
- Feb 19,2024
5 min read
Purple team engagements are an important part of any complete cybersecurity arsenal.
- Feb 16,2024
5 min read
Our analysis of Microsoft's patch Tuesday releases for February 2024- what you need to be most concerned about.
- Jan 25,2024
5 min read
Living off the Land (LotL) is a technique used by both red teams, and bad guys. It involves using existing tools, scripts, and resources that are already present in the target environment to achieve the objectives of the engagement. By using these built-in tools, red teams (and others) can reduce their visibility and decrease the likelihood of detection.
- Jan 16,2024
5 min read
Learn how the MITRE ATT&CK framework can be used in purple teaming to produce better outcomes.
