A Cyber Attack Journey – from the perspective of the attacker

In this presentation you'll be taken on a cyberattack journey as viewed from the perspective of the attacker. From the initial reconnaissance, attack preparation, distribution, malware execution, command and control establishment and finally exfiltration of data.

Throughout the journey attacker techniques will be identified with the help of the MITRE ATT&CK framework. Additionally, specific security measures will be identified that can prevent, detect and/or deceive the attacker.

The lecture attempts to weave together the theoretical framework of building a cyber defence capability with the perspective of a real-life attack. Hopefully this should provide both an entertaining tale and informative lecture and provide you with a defensive mindset and the necessary skills to efficiently protect your organisation from a cyberattack.

After the presentation you will have a deeper understanding of MITRE ATT&CK, how to utilise it in order to build a defensive cyber capability, while having been reasonably entertained throughout.