BEGIN:VCALENDAR VERSION:2.0 PRODID:Data::ICal 0.22 BEGIN:VEVENT DESCRIPTION: '\n\n\n Mind the Gap Between Attacking Windows and Mac: Br eaking In and Out of\n Protected MacOS environments\n\n Saturday\, 100 0-1400 in Flamingo\, Lake Mead I\n\n Richard Gold Hacker\n\n MacOS has a strong reputation for security and comes with many\n restrictions suc h as the usage of an App Store to prevent malicious\n code being install ed. However\, we have found that since MacOS is the\n minority platform for many software packages and security platforms\,\n it rarely gets the same attention from security vendors as Windows.\n This workshop will t each you to exploit that lack of attention from\n software like Microsof t Office and security platforms like a leading\n EDR solution to break i n and out of a MacOS estate. The principles\n also apply to other *nix e nvironments like Linux.\n\n We will walk you through how to use open sou rce tools\, both unmodified\n and customized\, can be used to take advan tage of the difference in\n capability\, e.g.\, script detection\, betwe en Windows and non-Windows\n platforms. We will show you how to map out an environment\, how to gain\n code execution in multiple ways\, grab cr edentials\, find files\, collect\n screenshots and webcam shots and exfi ltrate the loot while remaining\n undetected.\n\n The key takeaway is that despite the myriad of operating system\n security features present in MacOS and Linux\, and the addition of EDR\,\n protected MacOS or Linu x environments can still be compromised by a\n diligent attacker using o pen source tooling. This workshop will show\n you how!\n\n [Unfortunat ely we cannot provide an EDR system for you to play with\,\n so please b ring your own or practice the techniques without that\n particular oppon ent.]\n\n Skill Level Intermediate\n\n Prerequisites: Intermediate com mand line skills with *nix-style\n environments like MacOS or Linux\n\n Materials: Their own MacOS laptop. Preferably with an EDR solution in\n place\, but the principals will still be valid without one. Microsoft\n Office is strongly recommended for the client-side attacks.\n\n Max st udents: 40\n\n Registration: [1] p-between-attacking-windows-and-mac-breaking-in-and-out-of-protected-macos -environments-tickets-63608046379\n (Opens 8-Jul-19)\n\n Richard Gold\ n Richard Gold is a hands-on information security professional\, who has \n over a decade's worth of experience in understanding and securing\n computer networks. With his background as a Certified SCADA Security\n Architect and a Ph.D. in Computer Networking\, Richard uses knowledge\n he's gained from breaking into systems to better detect and protect\n ne tworks\, as well as build custom tooling. He regularly speaks on\n these topics at industry events\, universities\, and in the media.\n\n '\n\n 1. nd-mac-breaking-in-and-out-of-protected-macos-environments-tickets-6360804 6379\n\n\n DTEND:20190810T205900Z DTSTART:20190810T170000Z LOCATION:WS - Flamingo - Lower Level - Lake Mead I SUMMARY:Mind the Gap Between Attacking Windows and Mac: Breaking In and Out of Protected MacOS environments END:VEVENT END:VCALENDAR