Andy Thompson

Andy will present the humble origins of ransomware, touch on the notable variants of yesteryear, the big hitters of today, and discuss the future of this profit-motivated malware type. It's no longer just for Windows anymore. Linux, macOS, and mobile platforms are all ripe for extortion. This humorous and entertaining talk teaches everyone, from Mom and Pop to large publicly-traded enterprises what's really happening and how to protect themselves.

This talk highlights the risk of Kerberos attacks against Active Directory, specifically the Golden Ticket attack. Andy demonstrates the phases of an advanced targeted attack against a SWIFT banking organization using nothing but PowerShell-Empire. After the demonstration, Andy will discuss best practices for defending against and responding to these attacks.

Addressing Insider Threat with Rainmaker Abstract: This talk discusses corporate espionage, sabotage, and insider threat in today's IT landscape. Discussion and analysis of psychological characteristics of a malicious insider are discussed as well as how they apply to the Insider Threat Kill-Chain. Most importantly, this talk discusses what technical controls apply to addressing insider threat and how others simply don't work.