Drop It Like It's Hot: Dissecting a Modern Attacker Deployment
A technical deep dive into a real deployment script from a recent attack campaign. John Kischel breaks down execution, persistence, Xray/VLESS tunneling, and defense evasion step by step. In doing so, he maps the individual techniques to the MITRE ATT&CK Framework and examines the traces they leave behind.
Topic
When & Where
Details
Format:
Technology lecture
Language:
German
Session description
Speaker: John Kischel
What really happens after an attacker gains an initial foothold? In this technical deep-dive session, John Kischel analyzes a real deployment script recovered from a recent attack campaign and breaks down every stage of the attacker's deployment process.
Using a real-world example, he examines how malicious components are executed, how persistence is established, and how attackers leverage Xray/VLESS tunneling to create covert command-and-control communication channels. The presentation also explores defense evasion techniques designed to bypass security controls and keep malicious activity hidden for as long as possible.
Each stage of the deployment is mapped to the MITRE ATT&CK framework, providing attendees with a structured view of modern ...
