I will discuss how to carry out phone pretexting calls for engagements, including how to begin reconnaissance, how to build a scenario, preparing for...

The Internet accessible single-factor attack surface is decreasing with the increased implementation of multi-factor. However, configuration of multi...

Present methods for potential detection of ScareCrow EDR Bypass payloads. Present pending work with EDR products, memory forensics, and share other...

In this talk, I will introduce the concepts of web scraping, how they apply to paste sites, and specific tools that I have used to gather data...

Many web applications use email as a mechanism for user verification, password resets, real time notifications and much more. But security testers and...

For the past two years, we have been facilitating purple team exercises for our clients using a framework that we developed that simulates insider...

The emergence of IoT (Internet of Things) and mobile devices has multiplied in the past five years. In this 30 minute presentation, the impact of this...

With the adoption of cloud infrastructure rapidly changing our attack landscape, we find ourselves with SOC and IR teams asking for some of the same...

Every organization takes part in some kind or remediation within their organization. Within Optiv's Threat, Vulnerability and Remediation practice, we...

Modern platforms are consistently developing new phishing detections to stop attackers and popular techniques are not going to cut it anymore. Aaron...

GraphQL, an open-source data query language for APIs, has been becoming more prevalent in modern applications. A brief overview of the technology as...

Whether you are a pro, or just getting starting, red team or blue team. Or maybe just want to learn how attackers can compromise various network...