Exciting Times for GoSecure

GoSecure Research group’s vision is simple: if we can raise the costs to online adversaries, everyone wins. We accomplish that by having good products, excellent service and by providing tools and training. We do it for clients but being one is not strictly necessary: if the ecosystem is more resistant it will discourage attackers. Helping anyone indirectly benefits our clients.

So, avoiding this year’s shiny object syndrome* (what’s next after the Minecraft sword?), we decided to highlight our significant open source contributions to the community in a booth presentation. We will cover three key open source projects created or maintained by GoSecure to help achieve the aforementioned vision:
• Malboxes: Safer Malware Analysis in the Cloud
• Find-Security-Bugs: Resolving Problems at the Source
• PyRDP: Advanced Offensive and Defenses Use Cases for RDP

Join us to hear about what we are doing with these and how you can use these in your organization!

Discuss the realities behind cybersecurity assessments and what GoSecure learned when building our own methodology.

Good analysts are essential to any cybersecurity team’s success. Join Katie as she recounts some of her experiences with poor security practices, malware, and insider threat as a member of GoSecure’s MDR service.

This presentation will discuss the Incident Response lessons learned by hacks attributed to APT groups from Russia. Russian APT groups have been attributed to major hacks such as DNC hack in 2016. However, Russian was the first country to use military and cyber warfare in conjunction during Crimea annexation. Russian actors have been known to leverage mostly living off the land capabilities to compromise a system. The wold of cybersecurity is known to rinse and repeat methodology, hence these techniques are now leveraged by other APT groups as well. This talk will focus these techniques used by Russian Actors and focus on key system attributes to analyze when responding to an Incident.