Windows Based Exploit Chains and Their Detection Mechanism - DefCamp - 2019

Windows Based Exploit Chains and Their Detection Mechanism - DefCamp - 2019

Explore a comprehensive conference talk from DefCamp 2019 focusing on Windows-based exploit chains and their detection mechanisms. Delve into topics such as single vulnerability exploitation, lateral movement detection, security priorities, and advanced analysis techniques including machine learning and natural language processing. Learn about major processes, algorithms, and event logs crucial for identifying and mitigating threats. Gain insights from real-world examples like the Japan Shot exploit and PowerPoint vulnerabilities. Discover how cybersecurity exercises and cutting-edge research contribute to improving defense strategies against sophisticated attacks on Windows systems.