The Mirai botnet has brought public awareness to the danger of poorly secured embedded devices. Its ability to propagate, although crude, is fast and reliable. Its impact can be devastating and it will probably outlive us all. You need to identify it, stop it, and prevent its spread. I had the opportunity to become very familiar with the structure, design, and weaknesses of Mirai. At this talk you'll learn how to detect members of the botnet, sinkhole them to prevent further scanning, and setup a safe live fire lab environment for study. We'll even talk about joining a C2 server, how to collect new samples for study, and some changes that have already occurred.