99 Reasons Your Perimeter Is Leaking - Evolution of CC
Explore the evolution of command and control (C2) capabilities in cybersecurity through this comprehensive conference talk from Derbycon 2018. Delve into the history of C2, examining various techniques such as bind shells, reverse shells, and IRC channels. Learn about advanced methods like DNS tunneling and domain fronting, as well as the increasing capabilities of red teams. Understand the key needs for reliability, concealment, and resilience in C2 operations. Examine the Hyperwave Architecture and its applications in transitivity and redundancy. Gain insights into red team operational concerns and C2 detection fundamentals. Discover various detection methods, including process-traffic correlation, unique domain activity, and payload patterns. Explore ways to detect abuse of services like Dropbox. Conclude with a discussion on blue team strategies and the importance of unit testing in cybersecurity operations.