I want my RPC

Presented at BalCCon2k22 - Loading (2022), Sept. 24, 2022, 1:15 p.m. (30 minutes)

We will take you to the journey of RPC technology in Windows Internals world, and why this technology is so precious for TAs (Threat Actors) and Defenders. The story will be told from both perspectives, the antagonists (TA) on one side, and the protagonist (Defender) on the other. We will take you to the journey of RPC technology in Windows Internals world, and why this technology is so precious for TAs (Threat Actors) and Defenders. The story will be told from both perspectives, the antagonists (TA) on one side, and the protagonist (Defender) on the other.

Presenters:

• Mato
  Mato is a skilled security professional with extensive experience in incident response, threat hunting and purple teaming practices. He has been helping clients in Adriatic region to efficiently kick out Threat Actors from the computer systems through his Hunting activities. He strongly believes that in order to have a good understanding of information security, you need to have a firm grasp on the fundamentals of computer science. It's not only important to understand how things work, but also why things work the way they work. Mato holds a number of security certificates, including GCFA, GDAT and CISSP.

Links:

• https://cfp.balccon.org/balccon2k22/talk/VSLFF8/
• https://infocon.org/cons/BalCCon/BalCCon 2k22/Mato - I want my RPC.mp4
• https://infocon.org/cons/BalCCon/BalCCon 2k22/Mato - I want my RPC.eng.srt (subtitles)

Similar Presentations:

• Black Hat Europe 2021 / Burning Bridges - Stopping Lateral Movement via the RPC Firewall
• ToorCon: Seattle (Beta) (2007) / RPC Auditing Tools and Techniques
• DEF CON 30 (2022) / Exploring Ancient Ruins to Find Modern Bugs: Discovering a 0-Day in an MS-RPC Service