Upload File

about face defending organization penetration testing teams

  • Home
  • Documents
  • About Face Defending Organization Penetration Testing Teams
29
Interested in learning more about security? SANS Institute InfoSec Reading Room This paper is from the SANS Institute Reading Room site. Reposting is not permitted without express written permission. About Face: Defending Your Organization Against Penetration Testing Teams In this paper, we examine a series of techniques that a network administrator can use to frustrate external penetration testers while securing and obscuring the network under attack. We examine a deeper understanding of the penetration testing cycle performed by the team and the weaknesses that can be exposed in the cycle to survive a test. Throughout the paper, we document and enumerate several tools and scripts that can be of great value in surviving a penetration test. Copyright SANS Institute Author Retains Full Rights       A       D

Upload: donna-chambers

Post on 07-Apr-2018

221 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 1/29

http://www.sans.org/reading_room/images/click.php?id=494
http://www.sans.org/info/36914
http://www.sans.org/info/36909
http://www.sans.org/info/36923
Page 2: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 2/29

Page 3: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 3/29

Page 4: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 4/29

Page 5: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 5/29

Page 6: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 6/29

Page 7: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 7/29

Page 8: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 8/29

Page 9: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 9/29

Page 10: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 10/29

Page 11: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 11/29

Page 12: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 12/29

Page 13: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 13/29

Page 14: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 14/29

Page 15: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 15/29

Page 16: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 16/29

Page 17: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 17/29

Page 18: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 18/29

Page 19: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 19/29

Page 20: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 20/29

Page 21: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 21/29

Page 22: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 22/29

Page 23: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 23/29

Page 24: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 24/29

Page 25: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 25/29

Page 26: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 26/29

Page 27: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 27/29

Page 28: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 28/29

Page 29: About Face Defending Organization Penetration Testing Teams

8/6/2019 About Face Defending Organization Penetration Testing Teams

http://slidepdf.com/reader/full/about-face-defending-organization-penetration-testing-teams 29/29

http://www.sans.org/ondemand/about.php
http://www.sans.org/link.php?id=1032
http://www.sans.org/sec434-beta-2011
http://www.sans.org/link.php?id=24234
http://www.sans.org/northern-virginia-2011
http://www.sans.org/link.php?id=23368
http://www.sans.org/bali-2011
http://www.sans.org/link.php?id=23933
http://www.sans.org/sydney-scada-2011
http://www.sans.org/link.php?id=23178
http://www.sans.org/rhul-508-2011
http://www.sans.org/link.php?id=24373
http://www.sans.org/sans-2011
http://www.sans.org/link.php?id=10318
http://www.sans.org/barcelona-2011
http://www.sans.org/link.php?id=22453
http://www.sans.org/wellington-2011
http://www.sans.org/link.php?id=23628
http://www.sans.org/singapore-2011
http://www.sans.org/link.php?id=23758
http://www.sans.org/oman-2011
http://www.sans.org/link.php?id=24243
http://www.sans.org/phoenix-2011
http://www.sans.org/link.php?id=22853
http://www.sans.org/north-american-scada-2011
http://www.sans.org/link.php?id=23308
http://www.sans.org/india-2011
http://www.sans.org/link.php?id=23748
http://www.sans.org/rsa-conf-2011
http://www.sans.org/link.php?id=23358
http://www.sans.org/mgt442-beta-test-2011
http://www.sans.org/link.php?id=24238
http://www.sans.org/info/36919

Defending thesis (english)

Defending an Open Enrollment Appeal Making & Defending Good (Legal) Decisions

Defending Consequentialism Handout

Self Defending Network

Tiger Teams! The new face of Penetration Testing · The new face of Penetration Testing ... – Web Application Hacking ... •Consider defence in depth measures to protect against

Defending your Rights

Defending Mathematical Realism

2018 State of Cyber Resilience in Software & Platforms GAINING … … · defending against cyber attacks. Despite the rising pressure of targeted cyber attacks, security teams at

ABSTRACT  · Web view2020. 2. 2. · Penetration Testing Methodologies. In the realm of cybersecurity, there are two main roles; red team and blue team. Blue teams are the teams

Defending Infection

Defending Contested Mortgage Foreclosure Litigationmedia.straffordpub.com/products/defending-contested-mortgage... · Defending Contested Mortgage Foreclosure Litigation ... wrongful

defending violations 1

ESSAY DEFENDING WESTERN CIVILIZATION - Providenceprovidencemag.com/.../Mark-Tooley-Defending-Western-Civilization.pdf · Defending Western Civilization, once commonly called Christian

Defending Defenders

Defending your design

FYP 1st(Defending)

Defending Parents

DEFENDING HOPE

Defending my Disign

Defending Conventions

Defending your future - Robert Half...stepping stones 7 Talented teams to tackle threats 8 IT security checklist 13 Conclusion 14 CYBER-SECURITY Defending your future 1 wPC, The Global

Defending My Design

“WE ARE COMPLETELY INDEPENDENT” - Cage · “WE ARE COMPLETELY INDEPENDENT ... he began advising the legal teams involved in defending terrorism ... enterprises are ill …

EDINBURGH CONFERENCE - FIRST · 2019-06-17 · Bringing together Security and Incident Response teams Summer 2019 from around the globe. EDINBURGH CONFERENCE Defending the Castle:

Defending Prometheus

Defending Foreclosure

Defending Contractor Status

Self Defending Networks

Self Defending Applications

Defending my logo

Defending My Design!

Defending critical infrastructure

Defending the Earth

Defending Pipeline Drug Cases Handout (00090039.DOCX;1) · Web viewDefending Pipeline . Drug Cases . Defending Pipeline . Drug Cases . Defending Pipeline . Drug Cases . Defending

Defending Voice over IP Networks Defending Voice over IP Networks