I Simulate Therefore I Catch - Enhancing Detection Engineering with Adversary Simulation

I Simulate Therefore I Catch - Enhancing Detection Engineering with Adversary Simulation

Explore adversary simulation techniques to enhance detection engineering in this 50-minute conference talk from Derbycon 2019. Dive into building an attacker's playground, implementing prevention controls, and validating detection resilience. Learn about automated adversary simulation, password spraying, network share enumeration, and privilege escalation. Gain insights on measuring detection maturity and analyzing detection analytics to improve your blue team's capabilities.