Similar Tracks
121 Invoke Obfuscation PowerShell obFUsk8tion Techniques How To Try To DeTect Them Daniel Bohannon
Adrian Crenshaw
302 Rotten Potato Privilege Escalation from Service Accounts to SYSTEM Stephen Breen Chris Mallz
Adrian Crenshaw
Start-Process PowerShell: Get Forensic Artifact- SANS DFIR Summit 2016
SANS Digital Forensics and Incident Response
404 No Easy Breach Challenges and Lessons from an Epic Investigation Matthew Dunwoody Nick Carr
Adrian Crenshaw