Huntress Shares Security Lessons from hack_it 2021
Summary
Huntress recaps its hack_it 2021 training event, including attacker-planning exercises, IT security lessons, and demonstrations of antivirus evasion. The sessions emphasized security awareness and defense in depth.
Key points
- A tabletop exercise had participants plan a cyberattack, covering reconnaissance, phishing, initial access, information gathering, and data exfiltration.
- Panelists shared lessons involving poor patching policies and lack of multi-factor authentication.
- About a third of attendees attributed their own security incidents to phishing or poor security posture, according to the article.
- In an antivirus-evasion demonstration, presenters tested a self-developed payload against multiple modern antivirus programs.
- The article argues antivirus should not be the last line of defense and recommends layered security.
Article Details
- Topic
- Huntress hack_it 2021 cybersecurity training event sessions and lessons on adversary planning, security practices, and antivirus evasion
People
Barbara PaluszkiewiczGamemaster for the Making the Malware session.Felicia KingParticipant in the Tales from the Trenches panel.Jason SlagleCo-presenter of the Slipping Past Prevention session, demonstrating antivirus evasion.John FerrellParticipant in the Tales from the Trenches panel.Matt LeeParticipant in the Tales from the Trenches panel.