FIRSTCON21 - June 7 | Stream 1 (12:00-15:45 UTC)
summary
A set of five presentations covering: a keynote tracing how targeted espionage evolved into widespread cyber threats; specific attack techniques against ICS/SCADA and recommended defensive measures; analysis of a persistent botnet dubbed the Eternal Botnet; methods for ISP CSIRTs to handle incidents using network flow data, the ELK stack, and Team Cymru’s NIMBUS intelligence service; and practical lessons and strategies for responding to ransomware incidents.
AI-written summary · about
chapters (6)
- 0:00Start
- 7:20Keynote Presentation: An Unauthorized Exchange - From Targeted Espionage to the Global Cyber Pandemic
- 1:29:32Practical Attack Vectors and Their Ideal Defensive Strategies for ICS & SCADA
- 2:01:20The Rise of the Eternal Botnet
- 2:44:46Practical ISP CSIRT Incident Handling with Network Flows, ELK Stack and Cybersecurity Intelligence Signal - NIMBUS, A Community Service from Team Cymru
- 3:17:07Surviving a Ransomware Attack - Lessons from the Field
