The Art of Attribution: Identifying and Pursuing your Cyber Adversaries
summary
Explains why attributing cyber intrusions matters for business security and describes methods for identifying who is behind breaches. Covers practical techniques for attribution and how to pursue adversaries using forensic analysis and investigative processes (as practiced by CrowdStrike).
AI-written summary · about
chapters (14)
- 0:00Introduction
- 0:22Who is Dmytro
- 1:07Who is the attacker
- 1:29What are their motivations
- 2:34Why is this important
- 4:33Threat actors
- 5:35Why is it so long
- 7:36Is attribution impossible
- 9:08The attribution paradox
- 11:32Who are these attackers
- 16:09Who are these criminal groups
- 16:47What do you want to know
- 17:46How do you identify them
- 19:17Conclusion
related talks
05mConceptualizing attribution and why it matters
15mLink by Link: Crafting the Attribution Chain
50mFrom Attribution to Accountability: Upholding International Rules Online
43mPanel: Cyber Operations, Doctrine, And Geo-Politics
43mWho Did It? And Why (insert any country here), but Only by 21.37%?
10mWho is Who During a Cyber Incident Response Investigation
51mTrack the Attacker’s Actions — Understanding and Investigating Cross‑Cutting Intrusions Based on Behavior Patterns
40mTotal Security: Investigative Perspectives from Public to Private Sector