DFIR Summit 2014 Keynote: Barbarians at Every Gate: Responding to a Determined Adversaryby Christopher Glyer via SANS Digital Forensics

In the last six months, Mandiant has helped an organization repel targeted attackers that utilized an increasingly sophisticated set of tactics to re-compromise their environment. These tactics included:

• Leveraging interfaces from third-party networks
• Use of the heartbleed exploit to bypass VPN authentication
• Phishing attacks using a zero-day exploit in IE

This presentation will focus on how Mandiant kept pace with a determined adversary, followed the breadcrumb trails from new attack vectors, and helped the client repel and remediate these attacks.