Looking to the Past to Better Understand Threat Intelligence

Presented at BSidesDC 2019, Oct. 27, 2019, 2:30 p.m. (50 minutes)

Genealogy is a search through your family history. As you progress through your research you can fall down into rabbit holes and uncover family secrets long since forgotten or hidden. This, amazingly, is not all that different from threat intel research. We will step through the process of finding a Revolutionary War ancestor and compare how it relates to finding an unknown threat actor.

Presenters:

• John Laycock - Threat Intel Manager at White Ops
  Mr. Laycock has been involved with forensics for over 19 years. Starting out in the world of video forensics before moving over to computer forensics for the Department of Defense. He now works on the Satori Team for White Ops doing threat intel. Mr. Laycock lives in Maryland where he is a happily married father of 3 children and is a 5th generation Cubs fan who can't believe he finally got to see them win it all.

Links:

• https://bsidesdc2019.busyconf.com/schedule#activity_5d0a7e11b2ff2d1c95000151

Similar Presentations:

• BruCON 0x08 (2016) / Hello to the Dark Side: Understanding YOUR Adversaries without All Those Expensive Threat Intel Tools
• Texas Cyber Summit 2019 / TI-1044 Threat Intelligence: How to Focus Fire on the Bad Guys
• BruCON 0x07 (2015) / Creating REAL Threat Intelligence ... with Evernote