Red Team Techniques for Evading, Bypassing & Disabling MS

Red Team Techniques for Evading, Bypassing, and Disabling MS Advanced Threat Protection and Advanced Threat Analytics

Windows Defender Advanced Threat Protection is now available for all Blue Teams to utilize within Windows 10 Enterprise and Server 2012/16, which includes detection of post breach tools, tactics and techniques commonly used by Red Teams, as well as behavior analytics.

By Chris Thompson

Full Abstract & Presentation Materials:
https://www.blackhat.com/eu-17/briefings.html#red-team-techniques-for-evading-bypassing-and-disabling-ms-advanced-threat-protection-and-advanced-threat-analytics

Видео Red Team Techniques for Evading, Bypassing & Disabling MS канала Black Hat