NTXISSACSC4 - The Art of Evading Anti-Virus

•

1 j'aime•1,448 vues

North Texas Chapter of the ISSA

The Art of Evading Anti-Virus There are estimates that security analysts, to include penetration testers, are approximately 5 years behind malicious actors. Anti-virus by itself isn’t enough to stop a malicious individual from gaining access to your servers or computers anymore. In fact many of them have devised ways to evade anti-viruses. We as security professionals should understand how these individuals are doing this, and what tools are available for us to replicate these attacks. Tools such as veil-framework assist us with this. This talk will go over this tool, and how malicious individuals evade anti-viruses with ease. Quentin Rhoads-Herrera is a security analyst for State Farm. In this position he is responsible for risk analysis and application security assessments. He is accountable for ensuring risks are identified and properly mitigated throughout the organization. He previously served as the Information Security Director for Clearview Energy and Solarview. In this position he oversaw all information security activities. These included development of company-wide cyber security standards, development of layered defense approaches and the hardening and defense of all company systems. Mr. Rhoads-Herrera has worked in the Information Security space for a total of seven years serving in roles ranging from Security Consultant to Information Security Director.

@NTXISSA #NTXISSACSC4
The Art of Evading Antivirus
Quentin Rhoads-Herrera
Security Analyst
State Farm
9/28/2016

@NTXISSA #NTXISSACSC4
Background
• Worked in the following roles:
• System administrator
• Developer (.net / mobile)
• Regulatory/compliance analyst
• Security Analyst
• Pentesting Hobbyist J
NTX ISSA Cyber Security Conference – October 7-8, 2016 2

@NTXISSA #NTXISSACSC4
The Problem
• Pen-testers are caught by antivirus
programs.
• Antivirus programs catch stock Metasploit
payloads.
• Malicious malware creators have already
solved this problem.
NTX ISSA Cyber Security Conference – October 7-8, 2106 3

@NTXISSA #NTXISSACSC4
How Antivirus Works
• Signature-based detection
• Heuristic-based detection
• Behavioral-based detection
• Sandbox detection
• Data mining techniques
NTX ISSA Cyber Security Conference – October 7-8, 2106 4

@NTXISSA #NTXISSACSC4
Is Antivirus Dead?
• In 2014 the senior vice president of
Symantec Brian Dye declared to the Wall
Street Journal that antivirus “is dead.” – Brian Dye,
Senior Vice President, Symantec
Source:
http://online.wsj.com/news/article_email/SB1000142405270230341710457954214
0235850578-lMyQjAxMTA0MDAwNTEwNDUyWj
NTX ISSA Cyber Security Conference – October 7-8, 2106 5

@NTXISSA #NTXISSACSC4
Is Antivirus Dead?
• “Relying solely on antivirus is a dead end-
and it has been for at least 8 years now. But
that’s like saying that aspirin is dead
because it’s not the cure for cancer, AIDS,
and all of humanity's other illnesses.” –Bogdan
Domitru, Chief Technology Officer, Bitdefender
Source: http://securitywatch.pcmag.com/security/
NTX ISSA Cyber Security Conference – October 7-8, 2106 6

@NTXISSA #NTXISSACSC4
Evading Antivirus Ways
• Changing the signature
• Encode (A LOT)
• Encrypt
• Leverage your own executable, or one that is
already trusted by Windows (notepad.exe)
• Veil-Framework
NTX ISSA Cyber Security Conference – October 7-8, 2106 7

@NTXISSA #NTXISSACSC4
The Veil-Framework
NTX ISSA Cyber Security Conference – October 7-8, 2106 8

@NTXISSA #NTXISSACSC4
HD Moore
• “The strongest case for information
disclosure is when the benefit of releasing
the information outweighs the possible risks.
In this case, like many others, the bad guys
already won.” – HD Moore
Source:
https://community.rapid7.com/community/metasploit/blog/2009/02/23/the-best-
defense-is-information
NTX ISSA Cyber Security Conference – October 7-8, 2106 9

@NTXISSA #NTXISSACSC4
Checking your Payloads
• Virustotal is a website that allows you to
check how successful your payload is when
evading antiviruses.
• Antivirus vendors receive information about
what was uploaded to Virustotal.
NTX ISSA Cyber Security Conference – October 7-8, 2106 10

@NTXISSA #NTXISSACSC4
Virustotal
NTX ISSA Cyber Security Conference – October 7-8, 2106 11
Source: https://www.virustotal.com/

@NTXISSA #NTXISSACSC4
Meterpreter is Caught
NTX ISSA Cyber Security Conference – October 7-8, 2106 12

@NTXISSA #NTXISSACSC4
Encoded Meterpreter
NTX ISSA Cyber Security Conference – October 7-8, 2106 13

@NTXISSA #NTXISSACSC4
The Veil Way
• The Veil hash check method!!! (Really slick)
• Recommended to check the hash which is
located at /veil/output/hashes through the API
on virustotal instead of submitting files.
• checkvt will spawn all hashes and check via API
with Virustotal.
NTX ISSA Cyber Security Conference – October 7-8, 2106 14

@NTXISSA #NTXISSACSC4
Demo
NTX ISSA Cyber Security Conference – October 7-8, 2106 15

@NTXISSA #NTXISSACSC4
When it is Caught
NTX ISSA Cyber Security Conference – October 7-8, 2106 16

@NTXISSA #NTXISSACSC4
Veil-Evasion
• Integrated with Metasploit
• Leverages encryption (AES encrypted
shellcode)
• Can leverage your own payloads
• Uses non-standard languages for Windows
binaries
• Can integrate into your own project
NTX ISSA Cyber Security Conference – October 7-8, 2106 17

@NTXISSA #NTXISSACSC4
Languages Used
• Python
• Perl
• PowerShell
• C
• C#
• Go
• Ruby
NTX ISSA Cyber Security Conference – October 7-8, 2106 18

@NTXISSA #NTXISSACSC4
Shellcodes
• Void Pointer casting:
• Not a guarantee that your shellcode will drop
into executable memory.
• Virtual Alloc:
• Allocates memory (shellcode size)
• Determines permissions needed
• HeapAlloc:
• Manually drop shellcode
NTX ISSA Cyber Security Conference – October 7-8, 2106 19

@NTXISSA #NTXISSACSC4
DEMO
NTX ISSA Cyber Security Conference – October 7-8, 2106 20

@NTXISSA #NTXISSACSC4
Veil-Ordnance
• Generates shellcode that can be copied into
your payload.
• Created due to shellcode being “broken”
when leveraging msfvenom making a non-
working payload.
NTX ISSA Cyber Security Conference – October 7-8, 2106 21

@NTXISSA #NTXISSACSC4
Veil-Ordnance
NTX ISSA Cyber Security Conference – October 7-8, 2106 22

@NTXISSA #NTXISSACSC4
Veil-Catapult
• Payload Delivery tool
• Payloads:
• PowerShell
• Barebones Python
• Sethc backdoor
• Can auto spawn the Metasploit handler
script.
NTX ISSA Cyber Security Conference – October 7-8, 2106 23

@NTXISSA #NTXISSACSC4
DEMO
NTX ISSA Cyber Security Conference – October 7-8, 2106 24

@NTXISSA #NTXISSACSC4
How to Stop Veil
• API Scanners (Ambush IPS)
• Predictable Behaviors
• Enhanced Mitigation Experience Toolkit
(EMET)
NTX ISSA Cyber Security Conference – October 7-8, 2106 25

@NTXISSA #NTXISSACSC4
Other AV Evading Tools
• Hyperion: This is used to encrypt the binary
• peCloak: Automated tool that attempts
multiple tricks to evade antiviruses
NTX ISSA Cyber Security Conference – October 7-8, 2106 26

@NTXISSA #NTXISSACSC4
Q&A
NTX ISSA Cyber Security Conference – October 7-8, 2106 27

@NTXISSA #NTXISSACSC4@NTXISSA #NTXISSACSC4
The Collin College Engineering Department
Collin College Student Chapter of the North Texas ISSA
North Texas ISSA (Information Systems Security Association)
NTX ISSA Cyber Security Conference – October 7-8, 2016 28
Thank you

Contenu connexe

Tendances

It comes to no surprise, that any micro-services, any security controls you use to build applications – will eventually be broken (or fail). Under certain pressure, some components will fail together. The question is – how do we build our systems in a way that security incidents won't happen even if some components fail. And the data leaks won't occur even if penetration tests are successful. "Defense in depth is a security engineering pattern, that suggests building an independent set of security controls aimed at mitigating more risks even if the attacker crosses the outer perimeter. During the talk, we will model threats and risks for the modern web application, and improve it by building multiple lines of defense. We will overview high-level patterns and exact tools from the security engineering world and explain them to the modern web devs ;)

JS Fest 2019. Анастасия Войтова. "Defense in depth": trench warfare principle...

JS Fest 2019. Анастасия Войтова. "Defense in depth": trench warfare principle...

JS Fest 2019. Анастасия Войтова. "Defense in depth": trench warfare principle...

Cybersecurity is the Future of Computing

Cybersecurity is the Future of Computing

Cybersecurity is the Future of Computing

Ntxissacsc5 purple 5-insider threat-_andy_thompson

Ntxissacsc5 purple 5-insider threat-_andy_thompson

Ntxissacsc5 purple 5-insider threat-_andy_thompson

North Texas Chapter of the ISSA

PKI is widely understood and accepted as golden standard for Authentication, Non-repudiation and Integrity. It secures protocols for emails, web, software distributions, replaces ink with electronic signature, infrastructure, financial and other transactions. While obtaining the private key or gaining access to its usage is the first thought when attacking PKI based systems, there are usually easier ways and a multitude of attack vectors.

"Is your browser secure? Breaking cryptography in PKI based systems, opening ...

"Is your browser secure? Breaking cryptography in PKI based systems, opening ...

"Is your browser secure? Breaking cryptography in PKI based systems, opening ...

In search of unique behaviour

In search of unique behaviour

In search of unique behaviour

Today’s attackers are more brazen and patient than ever – often masquerading as legitimate users while they search the victim’s environment for their most prized data. And the longer these attackers remain undetected, the greater the cost to the business, be that your reputation or loss of IP. Therefore, organizations must detect and respond to incidents as quickly, efficiently and accurately as possible. In this webinar, we provide unique insights into how one Fortune 500 organization successfully responded to a sustained and sophisticated breach. You’ll hear from the incident responders and digital forensics experts who actually worked the case, and learn the the cutting-edge techniques that were used. We will cover topics such as: * Typical infrastructure weaknesses prevalent in organizations today * How attackers exploit IT infrastructure weaknesses * The prevalence of attacker attempts to re-enter environments, even after full remediation * How state-of-the-art digital detection and forensics tools like * Falcon Host & Falcon Forensics speed remediation by providing immediate visibility AND rear-view mirror look at past activities incident response, DFIR, reducing dwell time, cybersecurity, cyber security, best practices

CrowdStrike Webinar: Taking Dwell-Time Out of Incident Response

CrowdStrike Webinar: Taking Dwell-Time Out of Incident Response

CrowdStrike Webinar: Taking Dwell-Time Out of Incident Response

Brendon Macaraeg

CrowdStrike Falcon with next-gen AV protects your Mac-based organization If your organization has moved to a Mac-based platform, or are considering it, you may be aware that threats targeting Mac devices are on the rise. A new webcast from CrowdStrike, "Defending Against Threats Targeting the Mac Platform" discusses how the increase in Mac adoptions has given rise to a new class of targeted threats and explains why standard security solutions can't protect you. In this CrowdCast, Peter Ingebrigtsen, as discussed why more companies are switching to the Mac platform, the new threats targeting Macs, and what you can do to better protect your organization. Download the slides to learn: Why more IT departments are switching to the Mac platform How new threats targeting Macs are able to bypass standard security measures How CrowdStrike's next-gen AV employs machine learning and behavioral analytics to defend against threats aimed at the Mac platform On-Demand CrowdCast Link: https://www.crowdstrike.com/resources/crowdcasts/defending-threats-targeting-mac-platform/

DEFENDING AGAINST THREATS TARGETING THE MAC PLATFORM

DEFENDING AGAINST THREATS TARGETING THE MAC PLATFORM

DEFENDING AGAINST THREATS TARGETING THE MAC PLATFORM

THE TIME HAS COME TO REPLACE YOUR ANTIVIRUS SOLUTION Legacy AV products are failing to stop modern threats. That’s why AV replacement is a hot topic in the industry and why enterprises in every sector are looking for answers. As breaches continue to dominate the headlines, you need to know that there is a new approach that can close the wide security gap left by yesterday’s AV solutions. Defending against today’s sophisticated polymorphic threats requires new weapons and that’s just what the CrowdStrike Falcon Platform delivers. The key to this new approach is going beyond malware to addressing the most complex and persistent cyber threats at every stage of the kill chain. CrowdStrike does this by combining next-gen antivirus, endpoint detection and response (EDR), and a managed threat hunting service – all cloud-delivered with a single lightweight agent. In this CrowdCast, Dan Larson, VP, Product Marketing will discuss: --The typical challenges with legacy antivirus, from efficacy to complexity & bulky architecture --How CrowdStrike stands above competitive offerings by providing robust threat prevention leveraging artificial intelligence and machine learning --How Falcon’s lightweight sensor and cloud architecture dramatically reduces operational burden --How you can seamlessly migrate from legacy antivirus to CrowdStrike Falcon --Why CrowdStrike was positioned as a “Visionary” in the 2017 Gartner Magic Quadrant for Endpoint Protection Solutions and what it says about our standing as an effective AV replacement

How to Replace Your Legacy Antivirus Solution with CrowdStrike

How to Replace Your Legacy Antivirus Solution with CrowdStrike

How to Replace Your Legacy Antivirus Solution with CrowdStrike

Steven Hatfield, Vulnerability Management Senior Advisor, Dell Social Engineering 101 or the Art of How You Got Owned by That Stranger Steven will be covering the basics of Social Engineering, different attack vectors that have worked with real world examples from friends currently conducting such tests, provide different sources to gather information on this topic, and present ways to prevent such attacks from happening in the future.

NTXISSACSC2 - Social Engineering 101 or The Art of How You Got Owned by That ...

NTXISSACSC2 - Social Engineering 101 or The Art of How You Got Owned by That ...

NTXISSACSC2 - Social Engineering 101 or The Art of How You Got Owned by That ...

North Texas Chapter of the ISSA

Falcon OverWatch Experts Hunt 24/7 To Stop Incidents Before They Become Breaches Is your IT security team suffering from alert fatigue? For many organizations, chasing down every security alert can tax an already overburdened IT department, often resulting in a breach that might have been avoided. Adding to this challenge is an increase in sophisticated threats that strike so fast and frequently, traditional methods of investigation and response can’t offer adequate protection. A new webcast from CrowdStrike, “Proactive Threat Hunting: Game-Changing Endpoint Protection Above and Beyond Alerting,” discusses why so many organizations are vulnerable to unseen threats and alert fatigue, and why having an approach that is both reactive and proactive is key. You’ll also learn about Falcon OverWatch™, CrowdStrike’s proactive threat hunting service that investigates and responds to threats immediately, dramatically increasing your ability to react before a damaging breach occurs. Download the webcast slides to learn: --How constantly reacting to alerts prevents you from getting ahead of the potentially damaging threats designed to bypass standard endpoint security --Why an approach that includes proactive threat hunting, sometimes called Managed Detection and Response, is key to increasing protection against new and advanced threats --How CrowdStrike Falcon OverWatch can provide 24/7 managed threat hunting, augmenting your security efforts with a team of cyber intrusion detection analysts and investigators who proactively identify and prioritize incidents before they become damaging breaches

Proactive Threat Hunting: Game-Changing Endpoint Protection Beyond Alerting

Proactive Threat Hunting: Game-Changing Endpoint Protection Beyond Alerting

Proactive Threat Hunting: Game-Changing Endpoint Protection Beyond Alerting

As the cost and complexity of deploying and maintaining on-premises security continues to rise, many endpoint security providers have embraced the cloud as the ideal way to deliver their solutions. Yet, incorporating cloud services into legacy architectures limits their ability to fully engage the tremendous power the cloud offers. CrowdStrike Falcon recognized the value of cloud-delivery from the beginning, developing architecture built from the ground up to take full advantage of the cloud. CrowdStrike’s cloud-powered endpoint security not only ensures rapid deployment and infinite scalability, it increases your security posture by enabling real-time advanced threat protection across even the largest, distributed enterprises. In this CrowdCast, Jackie Castelli, Sr. Product Manager will discuss: •The advantages of endpoint protection purpose-built for the cloud – why it allows you to take full advantage of the cloud’s power •The common concerns organizations face when evaluating cloud-based endpoint security - can privacy and control be assured? •Real-world examples demonstrating the unique advantages offered by CrowdStrike Falcon’s innovative cloud-powered platform

Cloud-Enabled: The Future of Endpoint Security

Cloud-Enabled: The Future of Endpoint Security

Cloud-Enabled: The Future of Endpoint Security

Dreaming of IoCs Adding Time Context to Threat Intelligence

Dreaming of IoCs Adding Time Context to Threat Intelligence

Dreaming of IoCs Adding Time Context to Threat Intelligence

CrowdCasts Monthly: When Pandas Attack

CrowdCasts Monthly: When Pandas Attack

CrowdCasts Monthly: When Pandas Attack

We have all heard that threat intelligence can help level the battlefield against advanced persistent threats whether criminal or nation state attackers. But what is Threat Intelligence? How does it fit into your organization’s security operations? And how can you develop your own Threat Intelligence? In this presentation you'll learn: - How to leverage Threat Intelligence to identify potential adversaries and take appropriate action - How to develop Threat Intelligence using the Diamond Model - How ThreatConnect investigated Chinese state-sponsored threats using the Diamond Model - How to operationalize Threat Intelligence using Splunk and ThreatConnect

Operationalizing Threat Intelligence to Battle Persistent Actors

Operationalizing Threat Intelligence to Battle Persistent Actors

Operationalizing Threat Intelligence to Battle Persistent Actors

When Edward Snowden leaked classified information to the mainstream media, it brought the dangers posed by insider threats to the forefront of public consciousness, and not without reason. Today’s agencies are drowning in fears surrounding sophisticated cyber-attacks but perhaps the most concerning type of attack out there – the insider threat. According to Forrester, abuse by malicious insiders makes up 25% of data breaches. Learn about the best practices and technologies you should be implementing now to avoid becoming the next victim of a high-profile attack. - Become aware of the different types of insider threats, including their motives and methods of attack - Understand why conventional security tools like firewalls, antivirus and IDS/IPS are powerless in the face of the insider threat - Gain clarity on the various technologies, policies and best practices that should be put in place to help detect and thwart insider threats - Discover how network logs, particularly NetFlow, can be used to cost-effectively monitor for suspicious insider behaviors that could indicate an attack - Know about emerging attack methods such as muleware that could further escalate insider threats in the coming years

Combating Insider Threats – Protecting Your Agency from the Inside Out

Combating Insider Threats – Protecting Your Agency from the Inside Out

Combating Insider Threats – Protecting Your Agency from the Inside Out

Please view our webinar to learn the basics of our Maltego integration. https://attendee.gotowebinar.com/recording/2960337559231715841 Malformity Labs has developed a full transform set that allows for data from ThreatConnect™ to be integrated with the capabilities of Maltego. All ThreatConnect customers can take advantage of the Maltego transform set through the ThreatConnect™ API and a provided transform server. They can use this to: • Visualize the relationship between incidents, threats, adversaries, and indicators, • Leverage attributes belonging to indicators and threats to create Maltego Graphs without losing any of the contextual data within ThreatConnect, and • Pivot from ThreatConnect data and external open source data sources using other transform sets within Maltego.

Maltego Webinar Slides

Maltego Webinar Slides

Maltego Webinar Slides

In today’s threat environment, adversaries are constantly profiling and attacking your corporate infrastructure to access and collect your intellectual property, proprietary data, and trade secrets. Now, more than ever, Threat Intelligence is increasingly important for organizations who want to proactively defend against advanced threat actors. While many organizations today are collecting massive amount of threat intelligence, are they able to translate the information into an effective defense strategy? View the slides now to learn about threat intelligence for operational purposes, including real-world demonstrations of how to consume intelligence and integrate it with existing security infrastructure. Learn how to prioritize response by differentiating between commodity and targeted attacks and develop a defense that responds to specific methods used by advanced attackers.

CrowdCast Monthly: Operationalizing Intelligence

CrowdCast Monthly: Operationalizing Intelligence

CrowdCast Monthly: Operationalizing Intelligence

Sqrrl 2.0 Launch Webinar

Sqrrl 2.0 Launch Webinar

Sqrrl 2.0 Launch Webinar

CrowdCasts Monthly: Going Beyond the Indicator

CrowdCasts Monthly: Going Beyond the Indicator

CrowdCasts Monthly: Going Beyond the Indicator

NTXISSACSC1 Conference - Security is Doomed by Jesse Lee

NTXISSACSC1 Conference - Security is Doomed by Jesse Lee

NTXISSACSC1 Conference - Security is Doomed by Jesse Lee

North Texas Chapter of the ISSA

Tendances (20)

JS Fest 2019. Анастасия Войтова. "Defense in depth": trench warfare principle...

JS Fest 2019. Анастасия Войтова. "Defense in depth": trench warfare principle...

JS Fest 2019. Анастасия Войтова. "Defense in depth": trench warfare principle...

Cybersecurity is the Future of Computing

Cybersecurity is the Future of Computing

Cybersecurity is the Future of Computing

Ntxissacsc5 purple 5-insider threat-_andy_thompson

Ntxissacsc5 purple 5-insider threat-_andy_thompson

Ntxissacsc5 purple 5-insider threat-_andy_thompson

"Is your browser secure? Breaking cryptography in PKI based systems, opening ...

"Is your browser secure? Breaking cryptography in PKI based systems, opening ...

"Is your browser secure? Breaking cryptography in PKI based systems, opening ...

In search of unique behaviour

In search of unique behaviour

In search of unique behaviour

CrowdStrike Webinar: Taking Dwell-Time Out of Incident Response

CrowdStrike Webinar: Taking Dwell-Time Out of Incident Response

CrowdStrike Webinar: Taking Dwell-Time Out of Incident Response

DEFENDING AGAINST THREATS TARGETING THE MAC PLATFORM

DEFENDING AGAINST THREATS TARGETING THE MAC PLATFORM

DEFENDING AGAINST THREATS TARGETING THE MAC PLATFORM

How to Replace Your Legacy Antivirus Solution with CrowdStrike

How to Replace Your Legacy Antivirus Solution with CrowdStrike

How to Replace Your Legacy Antivirus Solution with CrowdStrike

NTXISSACSC2 - Social Engineering 101 or The Art of How You Got Owned by That ...

NTXISSACSC2 - Social Engineering 101 or The Art of How You Got Owned by That ...

NTXISSACSC2 - Social Engineering 101 or The Art of How You Got Owned by That ...

Proactive Threat Hunting: Game-Changing Endpoint Protection Beyond Alerting

Proactive Threat Hunting: Game-Changing Endpoint Protection Beyond Alerting

Proactive Threat Hunting: Game-Changing Endpoint Protection Beyond Alerting

Cloud-Enabled: The Future of Endpoint Security

Cloud-Enabled: The Future of Endpoint Security

Cloud-Enabled: The Future of Endpoint Security

Dreaming of IoCs Adding Time Context to Threat Intelligence

Dreaming of IoCs Adding Time Context to Threat Intelligence

Dreaming of IoCs Adding Time Context to Threat Intelligence

CrowdCasts Monthly: When Pandas Attack

CrowdCasts Monthly: When Pandas Attack

CrowdCasts Monthly: When Pandas Attack

Operationalizing Threat Intelligence to Battle Persistent Actors

Operationalizing Threat Intelligence to Battle Persistent Actors

Operationalizing Threat Intelligence to Battle Persistent Actors

Combating Insider Threats – Protecting Your Agency from the Inside Out

Combating Insider Threats – Protecting Your Agency from the Inside Out

Combating Insider Threats – Protecting Your Agency from the Inside Out

Maltego Webinar Slides

Maltego Webinar Slides

Maltego Webinar Slides

CrowdCast Monthly: Operationalizing Intelligence

CrowdCast Monthly: Operationalizing Intelligence

CrowdCast Monthly: Operationalizing Intelligence

Sqrrl 2.0 Launch Webinar

Sqrrl 2.0 Launch Webinar

Sqrrl 2.0 Launch Webinar

CrowdCasts Monthly: Going Beyond the Indicator

CrowdCasts Monthly: Going Beyond the Indicator

CrowdCasts Monthly: Going Beyond the Indicator

NTXISSACSC1 Conference - Security is Doomed by Jesse Lee

NTXISSACSC1 Conference - Security is Doomed by Jesse Lee

NTXISSACSC1 Conference - Security is Doomed by Jesse Lee

En vedette

A Day in the Life of a CISO The intent of this presentation is to present the diverse nature of being a CISO today within the context of a public, regulated and targeted organization. The content is to both inspire and warn those whose career choices may include the CISO destination. Mark Nagiel SVP/CISO, PrimeLending (4th. largest mortgage company in the US) Director, Information Security (MetroPCS/T-Mobile) VP, Technology/VP Information Security (InCharge Institute - Financial Services) Co-Founder, Network Audit Systems, Inc. (Acquired by Armor Holdings (NYSE company) InfoSec Chief (Niagara Mohawk Power Corp.)

NTXISSACSC4 - A Day in the Life of a CISO

NTXISSACSC4 - A Day in the Life of a CISO

NTXISSACSC4 - A Day in the Life of a CISO

North Texas Chapter of the ISSA

NTXISSACSC4 - Security for a New World

NTXISSACSC4 - Security for a New World

NTXISSACSC4 - Security for a New World

North Texas Chapter of the ISSA

Layered Security / Defense in Depth One area that I have found that even seasoned security professionals have a problem with articulating is layered security (defense in depth). Most are familiar with their area of expertise (servers, networks, pen testing, etc.), but have never viewed security as a heterogeneous process. In my presentation I use a layered diagram to highlight what controls are in what layers, what controls interact across layers, and what a complete layered security model would look like vs. what a more typical company security model does look like. Nathan Shepard CISSP, CISM, CRISC, CISA 33 Years in IT. 21 Years in Information Security. Information Security consulting at the corporate governance level. Information Security management for outsourced InfoSec delivery.

NTXISSACSC4 - Layered Security / Defense in Depth

NTXISSACSC4 - Layered Security / Defense in Depth

NTXISSACSC4 - Layered Security / Defense in Depth

North Texas Chapter of the ISSA

NTXISSACSC4 - How Not to Build a Trojan Horse

NTXISSACSC4 - How Not to Build a Trojan Horse

NTXISSACSC4 - How Not to Build a Trojan Horse

North Texas Chapter of the ISSA

Between The Keyboard And The Chair - Cybersecurity's Secret Weapon People are usually dismissed as Cybersecurity's weakest link, but what if they weren't? What if instead they could be a secret weapon? This session will focus on moving away from basic cybersecurity awareness toward building a comprehensive cybersecurity wellness program that uses communication, recognition, and incentives to build relationships with employees. In turn, the presentation will also examine the measurable return on investment for cybersecurity education as compared with the traditional investment in technology controls. George Finney, J.D., has worked in Cybersecurity for over 15 years and is the author of the book No More Magic Wands: Transformative Cybersecurity Change for Everyone. He is currently the Chief Information Security Officer for Southern Methodist University where he has also taught on the subject of Corporate Cybersecurity and Information Assurance. Mr. Finney is an attorney and is a Certified Information Privacy Professional as well as a Certified Information Security Systems Professional and has spoken on Cybersecurity topics across the country.

NTXISSACSC4 - Between The Keyboard And The Chair - Cybersecurity's Secret Weapon

NTXISSACSC4 - Between The Keyboard And The Chair - Cybersecurity's Secret Weapon

NTXISSACSC4 - Between The Keyboard And The Chair - Cybersecurity's Secret Weapon

North Texas Chapter of the ISSA

Artifacts Are for Archaeologists: Why Hunting for Malware Isn't Enough Spoiler Alert: It's because attackers can (and do) abuse legitimate software, administrative tools, and scripting environments which are considered benign and not caught by traditional antivirus software. Since attackers can use legitimate software to conduct their nefarious behavior, how do you catch them? Itâ€™s simple: Look for the behavior. LightCyber's Behavioral Attack Detection platform detects and highlights the network behaviors of attackers that have penetrated the perimeter. This provides visibility that allows security teams to locate and eradicate network intruders quickly, regardless of what tools the attackers are using to achieve their goals. With LightCyber's Network-to-Process Association technology, attacker behaviors can be tracked back to the exact process that originated the behavior. We will discuss the top tools that have been detected and associated with attacker behavior inside of LightCyber customer environments, all of which are legitimate software. There will also be an overview of how LightCyber Magna works. Mark Overholser has been a lifelong technology enthusiast, and made his passion his career. After working for many years at a multi-billion-dollar medical supply manufacturer and distributor using technology to achieve business goals, he started to wonder about what sorts of controls were in place to help make sure technology would only do good, not harm. One thing led to another, and he then was one of the first members of the new information security team. After working hard to grow the team and build the information security practice, he left to take a breather and now is working to help information security teams everywhere understand threats and get the most out of their defensive technologies.

NTXISSACSC4 - Artifacts Are for Archaeologists: Why Hunting Malware Isn't Enough

NTXISSACSC4 - Artifacts Are for Archaeologists: Why Hunting Malware Isn't Enough

NTXISSACSC4 - Artifacts Are for Archaeologists: Why Hunting Malware Isn't Enough

North Texas Chapter of the ISSA

NTXISSACSC4 - World of Discovery

NTXISSACSC4 - World of Discovery

NTXISSACSC4 - World of Discovery

North Texas Chapter of the ISSA

User and Entity behavior analytics (UEBA) and identity analytics (IdA) created from behavior-based machine learning models are changing security methodologies and architecture in many domains. UEBA and IdA are converging with SIEM, IAM, DLP, CASB and EDR solution areas to impact security solution design and functionality. The shift includes moving from a declarative rules and roles-based environment into behavior-based risk scoring to determine intelligent roles, adaptive access, plus predicting and detecting insiders, account hijacking, data exfiltration and cloud access and abuse. We are surrounded by many uses of machine learning in our daily lives and until only recently are security solutions catching up to this force multiplier. Attendees will learn the following: • The shift from declarative rules and roles to machine learning models • Understanding excess access risks, outliers and intelligent roles • How machine learning models predict and detect unknown threats • The importance of dynamic peer groups in clustering and outlier machine learning • Migrating to adaptive access and risk-based access reviews • Driving deterrence and detection with self-audits for employees and partners Mark Timothy Mandrino GURUCUL Sales Director of User Entity Behavior Analytics at Gurucul Mark is an accomplished sales professional with over 25 successful years in the Security and Information Technology space. 5 plus years in sales management and 2 years in business development startup ownership venture. He runs the practice for Gurucul in a 7 state region educating Fortune 100 and up customers in the Identity Detection Intelligence and the UEBA market. He is ITIL certified, has worked in the eDiscovery space, security services space and is associated with many of the top security vendors in the world. For fun Mark likes to hunt, fish, cook and spend time with his family. Loves sports and has coached little league baseball for 10 plus years before moving to Texas in 2015 from Boston, MA. Mark has traveled the world as a missionary’s son and lived in 22 states and 4 countries before he was 18. He enjoys the daily challenges of information security and IT. Loves helping his clients tackle the tough issues.

NTXISSACSC4 - Identity as a Threat Plane Leveraging UEBA and IdA

NTXISSACSC4 - Identity as a Threat Plane Leveraging UEBA and IdA

NTXISSACSC4 - Identity as a Threat Plane Leveraging UEBA and IdA

North Texas Chapter of the ISSA

Intellectual Property Protection― Cross Roads between Ethics, Information Security, and Internal Audit Richard (Rick) Brunner has more than 40 years experience in information security and technology, specializing in secure systems/application design and development, system architectures, information risks and controls, testing, and strategy and program management. Rick’s past assignment was as an Assistant Vice President, Security Strategy and Architecture at GM Financial and has worked in Healthcare, Finance, Human Resources, Military, and Intelligence. Rick has 32 years of military service, both active and reserves, rising to the rank of Colonel (0-6). He holds an Executive Jurist Doctorate degree, concentration in Law and Technology from Concord Law School; Master of Science degree in Computer Science, concentration in Information Systems Security from James Madison University; and a Bachelor of Science degree in Mathematics and Computer Science from University of Texas at San Antonio. Rick is an Assistant Faculty member at Collin College, instructing courses in their cyber security program and is an active member of Collin’s Cyber Security Advisory Board. Rick holds the following certifications: • Certified Information Systems Security Professional (CISSP) (Certification Number: 375658) • SABSA Chartered Security Architect - Foundation Certificate (SCF) (License SCF14020703) • ITIL Foundation Certificate in IT Service Management (Certification Number: 37823)

NTXISSACSC4 - Intellectual Property Protection― Cross Roads between Ethics, I...

NTXISSACSC4 - Intellectual Property Protection― Cross Roads between Ethics, I...

NTXISSACSC4 - Intellectual Property Protection― Cross Roads between Ethics, I...

North Texas Chapter of the ISSA

A Brief History of Cryptographic Failures Cryptography is hard. It's not hard in the way a challenging video game is, or hard like getting through War and Peace without falling asleep, or even hard like learning a new skill. Cryptography is hard because it's both a system and a technical implementation, and failures in either part can have catastrophic (and sometimes existential) impacts. In this talk we'll take a look at some of the many ways that cryptographic systems have failed over the years, from accidental design flaws like the Data Encryption Standard (DES) defeat so elegantly demonstrated by the Electronic Frontier Foundation to intentional design flaws such as the reported National Security Agency (NSA) backdoor in the Dual Elliptic Curve (EC) Deterministic Random Bit Generator (DRBG). This talk will be a high-level discussion... no PhD in mathematics is required! Brian Mork is the Chief Information Security Officer for Celanese, where he acts as a senior level executive reporting to the Chief Information Officer (CIO) and leading the strategy and operations of Information and Systems Security. His areas of responsibility include the Security Operations Center (SOC), SAP security, global security architecture, Industrial Control Systems (ICS) security architecture and governance, and the firewalls. He is responsible for establishing and maintaining an enterprise wide information security program to ensure that data information assets are adequately protected. Responsible for identifying, evaluating and reporting on information security risks in a manner that meets company needs, compliance and regulatory requirements. Mr. Mork oversees all technology risk management activities and acts as an advocate for all information security and business continuance best practices.

NTXISSACSC4 - A Brief History of Cryptographic Failures

NTXISSACSC4 - A Brief History of Cryptographic Failures

NTXISSACSC4 - A Brief History of Cryptographic Failures

North Texas Chapter of the ISSA

Day in the Life of a Security Solutions Architect I'd like to present my "Day in the Life of a Security Solutions Architect" at Hewlett Packard Enterprise. In this presentation, I'll go into detail of what exactly I do as a security architect, and my career progression which got me there. I'll speak about my daily activities, successful client engagements, skills required, etc. I'm happy to answer any questions from the audience, share insights, what I wish I had done earlier in my career, etc. Marco Fernandes is a Security Solutions Architect at Hewlett Packard Enterprise. Prior to that I worked in IT in the defense industry and security consulting in the commercial world. I'm also President of the North Texas Cyber Security Association. I was born in Dallas, TX, and I obtained my Bachelor of Science in Business Computer Information Systems from the University of North Texas. I've In my free time I enjoy card games, reading, fitness, watching WWE wrestling, & helping my community.

NTXISSACSC4 - Day in the Life of a Security Solutions Architect

NTXISSACSC4 - Day in the Life of a Security Solutions Architect

NTXISSACSC4 - Day in the Life of a Security Solutions Architect

North Texas Chapter of the ISSA

Hacking Performance Management, the Blue Green Game - With a live demo! Dr. Branden R. Williams has almost twenty years of experience in technology and information security, both as a consultant and an executive. Branden co-founded a technology services company that provided the foundation to a prominent e-learning company. He has vast experience as a practitioner and consultant which included helping companies create user-centric security controls and models. His specialty is navigating complex landscapes—be it compliance, security, technology, or business—and finding innovative solutions that save companies money while reducing risk and improving performance. Along the way, he was a Consulting Director for VeriSign/AT&T, one of four CTOs at RSA, ISSA Distinguished Fellow, elected to the PCI Board of Advisors, and author of four books. Assuming people are rational, we all do things to maximize our payoffs. It's why things like Enron, and the Sub Prime mortgage crisis happen. This demonstration will show you a key element to designing performance management systems that employees will hack to their advantage.

NTXISSACSC4 - Hacking Performance Management, the Blue Green Game

NTXISSACSC4 - Hacking Performance Management, the Blue Green Game

NTXISSACSC4 - Hacking Performance Management, the Blue Green Game

North Texas Chapter of the ISSA

F-Secure Radar offers you complete control over vulnerability management. It lets you: - Map your true attack surface, before someone else does - Measure yourself against PCI compliance - Improve your security measures with easy management - Get customized reports that fit your company’s needs - Scale and adapt F-Secure Radar to your needs - Use seamless API integration with 3rd party solutions F-Secure Radar is a European solution that can be implemented on premise or be used from the cloud.

F secure Radar vulnerability scanning and management

F secure Radar vulnerability scanning and management

F secure Radar vulnerability scanning and management

F-Secure Corporation

Cyber Security

Cyber security threats for 2017

Cyber security threats for 2017

Cyber security threats for 2017

Cyber Security 2017 Challenges

Cyber Security 2017 Challenges

Cyber Security 2017 Challenges

Leandro Bennaton

Introduction to Cyber Security

Introduction to Cyber Security

Introduction to Cyber Security

Stephen Lahanas

En vedette (17)

NTXISSACSC4 - A Day in the Life of a CISO

NTXISSACSC4 - A Day in the Life of a CISO

NTXISSACSC4 - A Day in the Life of a CISO

NTXISSACSC4 - Security for a New World

NTXISSACSC4 - Security for a New World

NTXISSACSC4 - Security for a New World

NTXISSACSC4 - Layered Security / Defense in Depth

NTXISSACSC4 - Layered Security / Defense in Depth

NTXISSACSC4 - Layered Security / Defense in Depth

NTXISSACSC4 - How Not to Build a Trojan Horse

NTXISSACSC4 - How Not to Build a Trojan Horse

NTXISSACSC4 - How Not to Build a Trojan Horse

NTXISSACSC4 - Between The Keyboard And The Chair - Cybersecurity's Secret Weapon

NTXISSACSC4 - Between The Keyboard And The Chair - Cybersecurity's Secret Weapon

NTXISSACSC4 - Between The Keyboard And The Chair - Cybersecurity's Secret Weapon

NTXISSACSC4 - Artifacts Are for Archaeologists: Why Hunting Malware Isn't Enough

NTXISSACSC4 - Artifacts Are for Archaeologists: Why Hunting Malware Isn't Enough

NTXISSACSC4 - Artifacts Are for Archaeologists: Why Hunting Malware Isn't Enough

NTXISSACSC4 - World of Discovery

NTXISSACSC4 - World of Discovery

NTXISSACSC4 - World of Discovery

NTXISSACSC4 - Identity as a Threat Plane Leveraging UEBA and IdA

NTXISSACSC4 - Identity as a Threat Plane Leveraging UEBA and IdA

NTXISSACSC4 - Identity as a Threat Plane Leveraging UEBA and IdA

NTXISSACSC4 - Intellectual Property Protection― Cross Roads between Ethics, I...

NTXISSACSC4 - Intellectual Property Protection― Cross Roads between Ethics, I...

NTXISSACSC4 - Intellectual Property Protection― Cross Roads between Ethics, I...

NTXISSACSC4 - A Brief History of Cryptographic Failures

NTXISSACSC4 - A Brief History of Cryptographic Failures

NTXISSACSC4 - A Brief History of Cryptographic Failures

NTXISSACSC4 - Day in the Life of a Security Solutions Architect

NTXISSACSC4 - Day in the Life of a Security Solutions Architect

NTXISSACSC4 - Day in the Life of a Security Solutions Architect

NTXISSACSC4 - Hacking Performance Management, the Blue Green Game

NTXISSACSC4 - Hacking Performance Management, the Blue Green Game

NTXISSACSC4 - Hacking Performance Management, the Blue Green Game

F secure Radar vulnerability scanning and management

F secure Radar vulnerability scanning and management

F secure Radar vulnerability scanning and management

Cyber Security

Cyber security threats for 2017

Cyber security threats for 2017

Cyber security threats for 2017

Cyber Security 2017 Challenges

Cyber Security 2017 Challenges

Cyber Security 2017 Challenges

Introduction to Cyber Security

Introduction to Cyber Security

Introduction to Cyber Security

Similaire à NTXISSACSC4 - The Art of Evading Anti-Virus

NTXISSACSC3 - Find, Fix, Finish ... Tracking the Real Bad Guys in Cyberspace ...

NTXISSACSC3 - Find, Fix, Finish ... Tracking the Real Bad Guys in Cyberspace ...

NTXISSACSC3 - Find, Fix, Finish ... Tracking the Real Bad Guys in Cyberspace ...

North Texas Chapter of the ISSA

NTXISSACSC3 - HELP! My Vulnerability Management Program is Failing! by Kevin ...

NTXISSACSC3 - HELP! My Vulnerability Management Program is Failing! by Kevin ...

NTXISSACSC3 - HELP! My Vulnerability Management Program is Failing! by Kevin ...

North Texas Chapter of the ISSA

At Avast, we believe everyone has the right to be safe. We are dedicated to creating a world that provides safety and privacy for all, not matter where you are, who you are, or how you connect. With over 1.5 billion attacks stopped and 30 million new executable files monthly, big data pipelines are crucial for the security of our customers. At Avast we are leveraging Apache Spark machine learning libraries and TensorflowOnSpark for a variety of tasks ranging from marketing and advertisement, through network security to malware detection. This talk will cover our main cybersecurity usecases of Spark. After describing our cluster environment we will first demonstrate anomaly detection on time series of threats. Having thousands of types of attacks and malware, AI helps human analysts select and focus on most urgent or dire threats. We will walk through our setup for distributed training of deep neural networks with Tensorflow to deploying and monitoring of a streaming anomaly detection application with trained model. Next we will show how we use Spark for analysis and clustering of malicious files and large scale experimentation to automatically process and handle changes in malware. In the end, we will give comparison to other tools we used for solving those problems.

AI on Spark for Malware Analysis and Anomalous Threat Detection

AI on Spark for Malware Analysis and Anomalous Threat Detection

AI on Spark for Malware Analysis and Anomalous Threat Detection

NTXISSACSC3 - Security at the Point of Storage by Todd Barton

NTXISSACSC3 - Security at the Point of Storage by Todd Barton

NTXISSACSC3 - Security at the Point of Storage by Todd Barton

North Texas Chapter of the ISSA

Harold Toomey, Principal Product Security Architect; McAfee, Part of Intel Security My Other Marathon When it comes to enterprise IT applications, what happens before you purchase the software can significantly impact your business even after it is installed with the best security controls. Learn what software developers should be doing to ensure their code is free from vulnerabilities before you ever put their products into an operational environment. People, processes, and technology needed to run a successful software security program and incident response team (PSIRT) will be covered. The tasks required to do this have been adapted to both waterfall and agile development methodologies. Each task will be compared to my recent journey of running my first 100 mile ultra-marathon. I will answer the question: “Which is less painful, developing secure software or running a 100 mile race?”

NTXISSACSC2 - Software Security - My Other Marathon by Harold Toomey

NTXISSACSC2 - Software Security - My Other Marathon by Harold Toomey

NTXISSACSC2 - Software Security - My Other Marathon by Harold Toomey

North Texas Chapter of the ISSA

A Brief History of Cryptographic Failures - Mork

A Brief History of Cryptographic Failures - Mork

A Brief History of Cryptographic Failures - Mork

Nothing Nowhere

A Brief History of Cryptographic Failures

A Brief History of Cryptographic Failures

A Brief History of Cryptographic Failures

Nothing Nowhere

Security incidents are increasing dramatically and becoming more sophisticated, making it almost impossible for security analysts to keep up. A cognitive solution that can learn about security from structured and unstructured information sources is essential. It can be applied to empower security analysts with insights to qualify incidents and investigate risks quickly and accurately. (Source : RSA Conference 2017)

Applied cognitive security complementing the security analyst

Applied cognitive security complementing the security analyst

Applied cognitive security complementing the security analyst

Ntxissacsc5 blue 2-herding cats and security tools-harold_toomey

Ntxissacsc5 blue 2-herding cats and security tools-harold_toomey

Ntxissacsc5 blue 2-herding cats and security tools-harold_toomey

North Texas Chapter of the ISSA

NTXISSACSC3 - Metasploit Year in Review by James Lee

NTXISSACSC3 - Metasploit Year in Review by James Lee

NTXISSACSC3 - Metasploit Year in Review by James Lee

North Texas Chapter of the ISSA

CV | Michele Spagnuolo

CV | Michele Spagnuolo

CV | Michele Spagnuolo

Michele Spagnuolo

NTXISSACSC3 - Critical Criteria for (Cloud) Workload Security by Steve Armend...

NTXISSACSC3 - Critical Criteria for (Cloud) Workload Security by Steve Armend...

NTXISSACSC3 - Critical Criteria for (Cloud) Workload Security by Steve Armend...

North Texas Chapter of the ISSA

ISACA Ethical Hacking Presentation 10/2011

ISACA Ethical Hacking Presentation 10/2011

ISACA Ethical Hacking Presentation 10/2011

NTXISSACSC3 - Vulnerability Management Isn't Simple ... (or How to Make Your ...

NTXISSACSC3 - Vulnerability Management Isn't Simple ... (or How to Make Your ...

NTXISSACSC3 - Vulnerability Management Isn't Simple ... (or How to Make Your ...

North Texas Chapter of the ISSA

Did you know that today's cyber threat landscape costs companies BILLIONS in damages each year? We want to help protect your company, employees and customers from the rising threat landscape! This presentation includes: • The state of cybersecurity and the threat landscape • How a threat-focused approach is changing the ability to detect and respond to breaches • How to develop a security game plan around a proven process • How to automatically defend your network with Cisco’s Advanced Malware Protection (AMP) http://www.utgsolutions.com/solutions/security-compliance

CYBERSECURITY: Game Planning for Success lunch and learn event, April 10th

CYBERSECURITY: Game Planning for Success lunch and learn event, April 10th

CYBERSECURITY: Game Planning for Success lunch and learn event, April 10th

United Technology Group (UTG)

Unravelling The World of Viruses.pdf

Unravelling The World of Viruses.pdf

Unravelling The World of Viruses.pdf

Defending the Endpoint with Next-Gen Security

Defending the Endpoint with Next-Gen Security

Defending the Endpoint with Next-Gen Security

ATAGTR2017 Security Testing / IoT Testing in Real World

ATAGTR2017 Security Testing / IoT Testing in Real World

ATAGTR2017 Security Testing / IoT Testing in Real World

Agile Testing Alliance

Cryptolocker

Cysinfo Cyber Security Community

Understanding CryptoLocker (Ransomware) with a Case Study

Understanding CryptoLocker (Ransomware) with a Case Study

Understanding CryptoLocker (Ransomware) with a Case Study

securityxploded

Similaire à NTXISSACSC4 - The Art of Evading Anti-Virus (20)

NTXISSACSC3 - Find, Fix, Finish ... Tracking the Real Bad Guys in Cyberspace ...

NTXISSACSC3 - Find, Fix, Finish ... Tracking the Real Bad Guys in Cyberspace ...

NTXISSACSC3 - Find, Fix, Finish ... Tracking the Real Bad Guys in Cyberspace ...

NTXISSACSC3 - HELP! My Vulnerability Management Program is Failing! by Kevin ...

NTXISSACSC3 - HELP! My Vulnerability Management Program is Failing! by Kevin ...

NTXISSACSC3 - HELP! My Vulnerability Management Program is Failing! by Kevin ...

AI on Spark for Malware Analysis and Anomalous Threat Detection

AI on Spark for Malware Analysis and Anomalous Threat Detection

AI on Spark for Malware Analysis and Anomalous Threat Detection

NTXISSACSC3 - Security at the Point of Storage by Todd Barton

NTXISSACSC3 - Security at the Point of Storage by Todd Barton

NTXISSACSC3 - Security at the Point of Storage by Todd Barton

NTXISSACSC2 - Software Security - My Other Marathon by Harold Toomey

NTXISSACSC2 - Software Security - My Other Marathon by Harold Toomey

NTXISSACSC2 - Software Security - My Other Marathon by Harold Toomey

A Brief History of Cryptographic Failures - Mork

A Brief History of Cryptographic Failures - Mork

A Brief History of Cryptographic Failures - Mork

A Brief History of Cryptographic Failures

A Brief History of Cryptographic Failures

A Brief History of Cryptographic Failures

Applied cognitive security complementing the security analyst

Applied cognitive security complementing the security analyst

Applied cognitive security complementing the security analyst

Ntxissacsc5 blue 2-herding cats and security tools-harold_toomey

Ntxissacsc5 blue 2-herding cats and security tools-harold_toomey

Ntxissacsc5 blue 2-herding cats and security tools-harold_toomey

NTXISSACSC3 - Metasploit Year in Review by James Lee

NTXISSACSC3 - Metasploit Year in Review by James Lee

NTXISSACSC3 - Metasploit Year in Review by James Lee

CV | Michele Spagnuolo

CV | Michele Spagnuolo

CV | Michele Spagnuolo

NTXISSACSC3 - Critical Criteria for (Cloud) Workload Security by Steve Armend...

NTXISSACSC3 - Critical Criteria for (Cloud) Workload Security by Steve Armend...

NTXISSACSC3 - Critical Criteria for (Cloud) Workload Security by Steve Armend...

ISACA Ethical Hacking Presentation 10/2011

ISACA Ethical Hacking Presentation 10/2011

ISACA Ethical Hacking Presentation 10/2011

NTXISSACSC3 - Vulnerability Management Isn't Simple ... (or How to Make Your ...

NTXISSACSC3 - Vulnerability Management Isn't Simple ... (or How to Make Your ...

NTXISSACSC3 - Vulnerability Management Isn't Simple ... (or How to Make Your ...

CYBERSECURITY: Game Planning for Success lunch and learn event, April 10th

CYBERSECURITY: Game Planning for Success lunch and learn event, April 10th

CYBERSECURITY: Game Planning for Success lunch and learn event, April 10th

Unravelling The World of Viruses.pdf

Unravelling The World of Viruses.pdf

Unravelling The World of Viruses.pdf

Defending the Endpoint with Next-Gen Security

Defending the Endpoint with Next-Gen Security

Defending the Endpoint with Next-Gen Security

ATAGTR2017 Security Testing / IoT Testing in Real World

ATAGTR2017 Security Testing / IoT Testing in Real World

ATAGTR2017 Security Testing / IoT Testing in Real World

Cryptolocker

Understanding CryptoLocker (Ransomware) with a Case Study

Understanding CryptoLocker (Ransomware) with a Case Study

Understanding CryptoLocker (Ransomware) with a Case Study

Plus de North Texas Chapter of the ISSA

Purple seven-ntxissacsc5 walcutt

Purple seven-ntxissacsc5 walcutt

Purple seven-ntxissacsc5 walcutt

North Texas Chapter of the ISSA

Ntxissacsc5 yellow 7 protecting the cloud with cep

Ntxissacsc5 yellow 7 protecting the cloud with cep

Ntxissacsc5 yellow 7 protecting the cloud with cep

North Texas Chapter of the ISSA

Ntxissacsc5 gold 4 beyond detection and prevension remediation

Ntxissacsc5 gold 4 beyond detection and prevension remediation

Ntxissacsc5 gold 4 beyond detection and prevension remediation

North Texas Chapter of the ISSA

Ntxissacsc5 gold 1 mimecast e mail resiliency

Ntxissacsc5 gold 1 mimecast e mail resiliency

Ntxissacsc5 gold 1 mimecast e mail resiliency

North Texas Chapter of the ISSA

Ntxissacsc5 yellow 6-abusing protocols for dynamic addressing in space-jacenr...

Ntxissacsc5 yellow 6-abusing protocols for dynamic addressing in space-jacenr...

Ntxissacsc5 yellow 6-abusing protocols for dynamic addressing in space-jacenr...

North Texas Chapter of the ISSA

Ntxissacsc5 yellow 2-evidence driven infosec compliance strategy-garrettp1

Ntxissacsc5 yellow 2-evidence driven infosec compliance strategy-garrettp1

Ntxissacsc5 yellow 2-evidence driven infosec compliance strategy-garrettp1

North Texas Chapter of the ISSA

Ntxissacsc5 yellow 1-beginnerslinux bill-petersen

Ntxissacsc5 yellow 1-beginnerslinux bill-petersen

Ntxissacsc5 yellow 1-beginnerslinux bill-petersen

North Texas Chapter of the ISSA

Ntxissacsc5 red 6-diy-pentest-lab dustin-dykes

Ntxissacsc5 red 6-diy-pentest-lab dustin-dykes

Ntxissacsc5 red 6-diy-pentest-lab dustin-dykes

North Texas Chapter of the ISSA

Ntxissacsc5 red 1 & 2 basic hacking tools ncc group

Ntxissacsc5 red 1 & 2 basic hacking tools ncc group

Ntxissacsc5 red 1 & 2 basic hacking tools ncc group

North Texas Chapter of the ISSA

Ntxissacsc5 purple 4-threat detection using machine learning-markszewczul

Ntxissacsc5 purple 4-threat detection using machine learning-markszewczul

Ntxissacsc5 purple 4-threat detection using machine learning-markszewczul

North Texas Chapter of the ISSA

Ntxissacsc5 purple 3-cyber insurance essentials-shawn_tuma.pptx

Ntxissacsc5 purple 3-cyber insurance essentials-shawn_tuma.pptx

Ntxissacsc5 purple 3-cyber insurance essentials-shawn_tuma.pptx

North Texas Chapter of the ISSA

Ntxissacsc5 purple 1-eu-gdpr_patrick_florer

Ntxissacsc5 purple 1-eu-gdpr_patrick_florer

Ntxissacsc5 purple 1-eu-gdpr_patrick_florer

North Texas Chapter of the ISSA

Ntxissacsc5 gold 1--mimecast email resiliency- erez-haimowicz

Ntxissacsc5 gold 1--mimecast email resiliency- erez-haimowicz

Ntxissacsc5 gold 1--mimecast email resiliency- erez-haimowicz

North Texas Chapter of the ISSA

Ntxissacsc5 blue 7-zerotrust more effective approach to security-ed higgins

Ntxissacsc5 blue 7-zerotrust more effective approach to security-ed higgins

Ntxissacsc5 blue 7-zerotrust more effective approach to security-ed higgins

North Texas Chapter of the ISSA

Ntxissacsc5 blue 6-securityawareness-laurianna_callaghan

Ntxissacsc5 blue 6-securityawareness-laurianna_callaghan

Ntxissacsc5 blue 6-securityawareness-laurianna_callaghan

North Texas Chapter of the ISSA

Ntxissacsc5 blue 5-holistic approach to cybersecurity-abu_sadeq

Ntxissacsc5 blue 5-holistic approach to cybersecurity-abu_sadeq

Ntxissacsc5 blue 5-holistic approach to cybersecurity-abu_sadeq

North Texas Chapter of the ISSA

Ntxissacsc5 blue 3-shifting from incident to continuous response bill white

Ntxissacsc5 blue 3-shifting from incident to continuous response bill white

Ntxissacsc5 blue 3-shifting from incident to continuous response bill white

North Texas Chapter of the ISSA

Ntxissacsc5 blue 4-the-attack_life_cycle_erich_mueller

Ntxissacsc5 blue 4-the-attack_life_cycle_erich_mueller

Ntxissacsc5 blue 4-the-attack_life_cycle_erich_mueller

North Texas Chapter of the ISSA

Ntxissacsc5 blue 1-nine cybersecurity habits-george_finney

Ntxissacsc5 blue 1-nine cybersecurity habits-george_finney

Ntxissacsc5 blue 1-nine cybersecurity habits-george_finney

North Texas Chapter of the ISSA

Plus de North Texas Chapter of the ISSA (19)

Purple seven-ntxissacsc5 walcutt

Purple seven-ntxissacsc5 walcutt

Purple seven-ntxissacsc5 walcutt

Ntxissacsc5 yellow 7 protecting the cloud with cep

Ntxissacsc5 yellow 7 protecting the cloud with cep

Ntxissacsc5 yellow 7 protecting the cloud with cep

Ntxissacsc5 gold 4 beyond detection and prevension remediation

Ntxissacsc5 gold 4 beyond detection and prevension remediation

Ntxissacsc5 gold 4 beyond detection and prevension remediation

Ntxissacsc5 gold 1 mimecast e mail resiliency

Ntxissacsc5 gold 1 mimecast e mail resiliency

Ntxissacsc5 gold 1 mimecast e mail resiliency

Ntxissacsc5 yellow 6-abusing protocols for dynamic addressing in space-jacenr...

Ntxissacsc5 yellow 6-abusing protocols for dynamic addressing in space-jacenr...

Ntxissacsc5 yellow 6-abusing protocols for dynamic addressing in space-jacenr...

Ntxissacsc5 yellow 2-evidence driven infosec compliance strategy-garrettp1

Ntxissacsc5 yellow 2-evidence driven infosec compliance strategy-garrettp1

Ntxissacsc5 yellow 2-evidence driven infosec compliance strategy-garrettp1

Ntxissacsc5 yellow 1-beginnerslinux bill-petersen

Ntxissacsc5 yellow 1-beginnerslinux bill-petersen

Ntxissacsc5 yellow 1-beginnerslinux bill-petersen

Ntxissacsc5 red 6-diy-pentest-lab dustin-dykes

Ntxissacsc5 red 6-diy-pentest-lab dustin-dykes

Ntxissacsc5 red 6-diy-pentest-lab dustin-dykes

Ntxissacsc5 red 1 & 2 basic hacking tools ncc group

Ntxissacsc5 red 1 & 2 basic hacking tools ncc group

Ntxissacsc5 red 1 & 2 basic hacking tools ncc group

Ntxissacsc5 purple 4-threat detection using machine learning-markszewczul

Ntxissacsc5 purple 4-threat detection using machine learning-markszewczul

Ntxissacsc5 purple 4-threat detection using machine learning-markszewczul

Ntxissacsc5 purple 3-cyber insurance essentials-shawn_tuma.pptx

Ntxissacsc5 purple 3-cyber insurance essentials-shawn_tuma.pptx

Ntxissacsc5 purple 3-cyber insurance essentials-shawn_tuma.pptx

Ntxissacsc5 purple 1-eu-gdpr_patrick_florer

Ntxissacsc5 purple 1-eu-gdpr_patrick_florer

Ntxissacsc5 purple 1-eu-gdpr_patrick_florer

Ntxissacsc5 gold 1--mimecast email resiliency- erez-haimowicz

Ntxissacsc5 gold 1--mimecast email resiliency- erez-haimowicz

Ntxissacsc5 gold 1--mimecast email resiliency- erez-haimowicz

Ntxissacsc5 blue 7-zerotrust more effective approach to security-ed higgins

Ntxissacsc5 blue 7-zerotrust more effective approach to security-ed higgins

Ntxissacsc5 blue 7-zerotrust more effective approach to security-ed higgins

Ntxissacsc5 blue 6-securityawareness-laurianna_callaghan

Ntxissacsc5 blue 6-securityawareness-laurianna_callaghan

Ntxissacsc5 blue 6-securityawareness-laurianna_callaghan

Ntxissacsc5 blue 5-holistic approach to cybersecurity-abu_sadeq

Ntxissacsc5 blue 5-holistic approach to cybersecurity-abu_sadeq

Ntxissacsc5 blue 5-holistic approach to cybersecurity-abu_sadeq

Ntxissacsc5 blue 3-shifting from incident to continuous response bill white

Ntxissacsc5 blue 3-shifting from incident to continuous response bill white

Ntxissacsc5 blue 3-shifting from incident to continuous response bill white

Ntxissacsc5 blue 4-the-attack_life_cycle_erich_mueller

Ntxissacsc5 blue 4-the-attack_life_cycle_erich_mueller

Ntxissacsc5 blue 4-the-attack_life_cycle_erich_mueller

Ntxissacsc5 blue 1-nine cybersecurity habits-george_finney

Ntxissacsc5 blue 1-nine cybersecurity habits-george_finney

Ntxissacsc5 blue 1-nine cybersecurity habits-george_finney

Dernier

Russian Call girl in Ajman +971563Russian Call girl in Ajman +971563133746 Ajman Call girl Service Russian Call girl in Ajman +971563133746 Ajman Call girl Service Russian Call girl in Ajman +971563133746 Ajman Call girl Service Russian Call girl in Ajman +971563133746 Ajman Call girl Service Russian Call girl in Ajman +971563133746 Ajman Call girl Service Russian Call girl in Ajman +971563133746 Ajman Call girl Service Russian Call girl in Ajman +971563133746 Ajman Call girl Service Russian Call girl in Ajman +971563133746 Ajman Call girl Service Russian Call girl in Ajman +971563133746 Ajman Call girl Service Russian Call girl in Ajman +971563133746 Ajman Call girl Service Russian Call girl in Ajman +971563133746 Ajman Call girl Service 133746 Ajman Call girl Service

Russian Call girl in Ajman +971563133746 Ajman Call girl Service

Russian Call girl in Ajman +971563133746 Ajman Call girl Service

Russian Call girl in Ajman +971563133746 Ajman Call girl Service

VVIP Pune Call Girls Mohammadwadi WhatSapp Number 8005736733 With Elite Staff And Reasonable Packages Near You Booking Now open +91- 8005736733 Why you Choose Us- +91- 8005736733 HOT⇄ 8005736733 Mr ashu ji Call Mr ashu Ji +91- 8005736733 𝐇𝐨𝐭𝐞𝐥 𝐑𝐨𝐨𝐦𝐬 𝐈𝐧𝐜𝐥𝐮𝐝𝐢𝐧𝐠 𝐑𝐚𝐭𝐞 𝐒𝐡𝐨𝐭𝐬/𝐇𝐨𝐮𝐫𝐲🆓 .█▬█⓿▀█▀ 𝐈𝐍𝐃𝐄𝐏𝐄𝐍𝐃𝐄𝐍𝐓 𝐆𝐈𝐑𝐋 𝐕𝐈𝐏 𝐄𝐒𝐂𝐎𝐑𝐓 Hello Guys ! High Profiles young Beauties and Good Looking standard Profiles Available , Enquire Now if you are interested in Hifi Service and want to get connect with someone who can understand your needs. Service offers you the most beautiful High Profile sexy independent female Escorts in genuine ✔✔✔ To enjoy with hot and sexy girls ✔✔✔$V15 ★providing:- • Models • vip Models • Russian Models • Foreigner Models • TV Actress and Celebrities • Receptionist • Air Hostess • Call Center Working Girls/Women • Hi-Tech Co. Girls/Women • Housewife

VVIP Pune Call Girls Mohammadwadi WhatSapp Number 8005736733 With Elite Staff...

VVIP Pune Call Girls Mohammadwadi WhatSapp Number 8005736733 With Elite Staff...

VVIP Pune Call Girls Mohammadwadi WhatSapp Number 8005736733 With Elite Staff...

VVVIP Call Girls In Connaught Place ➡️ Delhi ➡️ 9999965857 🚀 No Advance 24HRS Live Booking Contact Details :- WhatsApp Chat :- [+91-9999965857 ] The Best Call Girls Delhi At Your Service Russian Call Girls Delhi Doing anything intimate with can be a wonderful way to unwind from life's stresses, while having some fun. These girls specialize in providing sexual pleasure that will satisfy your fetishes; from tease and seduce their clients to keeping it all confidential - these services are also available both install and outcall, making them great additions for parties or business events alike. Their expert sex skills include deep penetration, oral sex, cum eating and cum eating - always respecting your wishes as part of the experience (07-May-2024(PSS)

VVVIP Call Girls In Connaught Place ➡️ Delhi ➡️ 9999965857 🚀 No Advance 24HRS...

VVVIP Call Girls In Connaught Place ➡️ Delhi ➡️ 9999965857 🚀 No Advance 24HRS...

VVVIP Call Girls In Connaught Place ➡️ Delhi ➡️ 9999965857 🚀 No Advance 24HRS...

Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure

Russian Call Girls Pune (Adult Only) 8005736733 Escort Service 24x7 Cash Payment Booking Now open +91- 8005736733 Why you Choose Us- +91- 8005736733 HOT⇄ 8005736733 Mr ashu ji Call Mr ashu Ji +91- 8005736733 𝐇𝐨𝐭𝐞𝐥 𝐑𝐨𝐨𝐦𝐬 𝐈𝐧𝐜𝐥𝐮𝐝𝐢𝐧𝐠 𝐑𝐚𝐭𝐞 𝐒𝐡𝐨𝐭𝐬/𝐇𝐨𝐮𝐫𝐲🆓 .█▬█⓿▀█▀ 𝐈𝐍𝐃𝐄𝐏𝐄𝐍𝐃𝐄𝐍𝐓 𝐆𝐈𝐑𝐋 𝐕𝐈𝐏 𝐄𝐒𝐂𝐎𝐑𝐓 Hello Guys ! High Profiles young Beauties and Good Looking standard Profiles Available , Enquire Now if you are interested in Hifi Service and want to get connect with someone who can understand your needs. Service offers you the most beautiful High Profile sexy independent female Escorts in genuine ✔✔✔ To enjoy with hot and sexy girls ✔✔✔$V15 ★providing:- • Models • vip Models • Russian Models • Foreigner Models • TV Actress and Celebrities • Receptionist • Air Hostess • Call Center Working Girls/Women • Hi-Tech Co. Girls/Women • Housewife

Russian Call Girls Pune (Adult Only) 8005736733 Escort Service 24x7 Cash Pay...

Russian Call Girls Pune (Adult Only) 8005736733 Escort Service 24x7 Cash Pay...

Russian Call Girls Pune (Adult Only) 8005736733 Escort Service 24x7 Cash Pay...

VVIP Pune Call Girls Sinhagad WhatSapp Number 8005736733 With Elite Staff And Reasonable Packages Near You Booking Now open +91- 8005736733 Why you Choose Us- +91- 8005736733 HOT⇄ 8005736733 Mr ashu ji Call Mr ashu Ji +91- 8005736733 𝐇𝐨𝐭𝐞𝐥 𝐑𝐨𝐨𝐦𝐬 𝐈𝐧𝐜𝐥𝐮𝐝𝐢𝐧𝐠 𝐑𝐚𝐭𝐞 𝐒𝐡𝐨𝐭𝐬/𝐇𝐨𝐮𝐫𝐲🆓 .█▬█⓿▀█▀ 𝐈𝐍𝐃𝐄𝐏𝐄𝐍𝐃𝐄𝐍𝐓 𝐆𝐈𝐑𝐋 𝐕𝐈𝐏 𝐄𝐒𝐂𝐎𝐑𝐓 Hello Guys ! High Profiles young Beauties and Good Looking standard Profiles Available , Enquire Now if you are interested in Hifi Service and want to get connect with someone who can understand your needs. Service offers you the most beautiful High Profile sexy independent female Escorts in genuine ✔✔✔ To enjoy with hot and sexy girls ✔✔✔$V15 ★providing:- • Models • vip Models • Russian Models • Foreigner Models • TV Actress and Celebrities • Receptionist • Air Hostess • Call Center Working Girls/Women • Hi-Tech Co. Girls/Women • Housewife

VVIP Pune Call Girls Sinhagad WhatSapp Number 8005736733 With Elite Staff And...

VVIP Pune Call Girls Sinhagad WhatSapp Number 8005736733 With Elite Staff And...

VVIP Pune Call Girls Sinhagad WhatSapp Number 8005736733 With Elite Staff And...

BooK Now Call us at +918448380779 to hire a gorgeous and seductive call girl for sex. Take a Delhi Escort Service. The help of our escort agency is mostly meant for men who want sexual Indian Escorts In Delhi NCR. It should be noted that any impersonator will get 100 attention from our Young Girls Escorts in Delhi. They will assume the position of reliable allies. VIP Call Girl With Original Photos Book Tonight +918448380779 Our Cheap Price 1 Hour not available 2 Hours 5000 Full Night 8000 TAG: Call Girls in Delhi, Noida, Gurgaon, Ghaziabad, Connaught Place, Greater Kailash Delhi, Lajpat Nagar Delhi, Mayur Vihar Delhi, Chanakyapuri Delhi, New Friends Colony Delhi, Majnu Ka Tilla, Karol Bagh, Malviya Nagar, Saket, Khan Market, Noida Sector 18, Noida Sector 76, Noida Sector 51, Gurgaon Mg Road, Iffco Chowk Gurgaon, Rajiv Chowk Gurgaon All Delhi Ncr Free Home Deliver

Enjoy Night⚡Call Girls Samalka Delhi >༒8448380779 Escort Service

Enjoy Night⚡Call Girls Samalka Delhi >༒8448380779 Escort Service

Enjoy Night⚡Call Girls Samalka Delhi >༒8448380779 Escort Service

Delhi Call girls

Top Rated Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Service At Affordable Rate Booking Contact Details WhatsApp Chat: +91-6297143586 pune Escort Service includes providing maximum physical satisfaction to their clients as well as engaging conversation that keeps your time enjoyable and entertaining. Plus they look fabulously elegant; making an impressionable. Independent Escorts pune understands the value of confidentiality and discretion - they will go the extra mile to meet your needs. Simply contact them via text messaging or through their online profiles; they'd be more than delighted to accommodate any request or arrange a romantic date or fun-filled night together. We provide - 01-may-2024(v.n)

Top Rated Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Servi...

Top Rated Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Servi...

Top Rated Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Servi...

Call Girls in Nagpur High Profile

Call Girl In Delhi ☎92055#41914 ¶¶ Indian,Russian Best Quality full Educated And Full Cooperative Independent Call Girls Escort Services In New Delhi- I Have Extremely Beautiful Broad Minded Cute Sexy & Hot Call Girls and Escorts, We Are Located in 3* 4* 5* Hotels in Delhi. Safe & Secure High Class Services Affordable Rate 100% Satisfaction, Unlimited Enjoyment. Any Time for Model/Teens Escort in Delhi High class luxury and premium escorts agency Indian Russian Call Girls In Delhi Booking Good High Profile Escorts (Call Girls) In Delhi 5 Star Hotel ,Incall Service,OutCall Service, We provide services by Call Girls,College Girls,Modals Get High Profile queens,Well Educated,Good Looking,Full Cooperative Model, Russian Models,Punjabi Girls Kashmeri Girls Services etc… We Provide Hottest Female With Safe And Consensual With Most Limits Respected Complete Satisfaction Guaranteed…Service. Call Me Spacial For Including Incall//outcall Service In New Delhi Indian Russian Escorts Service

Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...

Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...

Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...

Delhi Call girls

Call Girls Dubai Dubai Call Girls Agency +971525547819 Vip Call Girls Dubai Hot Call Girls Dubai Out Call Girls Dubai Best Call Girls Dubai Indian And Pakistani Call Girls Dubai Independent Call Girls Dubai Dubai Indian Call Girls Agency Class Call Girls In Dubai #First Class Call Girls In Dubai #Full Massage Services Call Girls In Dubai Full Night Call Girls Dubai Hourly Call Girls Dubai Call Girls Deira Dubai Dating Call Girls In Deira Dubai Silicon Oasis Call Girls Dubai International City Call Girls Dubai Al Jaddaf Al Satwa Al Quoz Al Barsha South Media City Discovery Garden Call Girls Dubai Al Jaffiliya,Business Bay,Al Karama,Bur Dubai,Deira,Dubai,Palm Jumeirah,Al Wasl,Trade Centre,Dubai Mall,JBR,JVC,JLT,Discovery Garden Al Nahda Call Girls Dubai Al Qusais Call Girls Dubai Dating Call Girls Dubai Dubai Call Girls Services Provide In Ajman_Dubai_RAK_UMQ_Fujairah_Abu_Dhabi#Indian #Tamil #Kerala #Russian #Philippine #Morocco #Thailand #English Models In Dubai #If You Want Serv#Dubai Pakistani Call Girls Agency #Beautiful Call Girls in Dubai #High ices Just Send Me Text On Whatsapp +971525547819 #Website Link http://Dubaicallgirls.pro https://chatwith.io/s/65d1df48b2992

Dubai Call Girls Milky O525547819 Call Girls Dubai Soft Dating

Dubai Call Girls Milky O525547819 Call Girls Dubai Soft Dating

Dubai Call Girls Milky O525547819 Call Girls Dubai Soft Dating

VIP Model Call Girls Hadapsar ( Pune ) Call ON 8005736733 Starting From 5K to 25K High Profile Escorts In Pune Booking Now open +91- 8005736733 Why you Choose Us- +91- 8005736733 HOT⇄ 8005736733 Mr ashu ji Call Mr ashu Ji +91- 8005736733 (V030524]N) 𝐇𝐨𝐭𝐞𝐥 𝐑𝐨𝐨𝐦𝐬 𝐈𝐧𝐜𝐥𝐮𝐝𝐢𝐧𝐠 𝐑𝐚𝐭𝐞 𝐒𝐡𝐨𝐭𝐬/𝐇𝐨𝐮𝐫𝐲🆓 .█▬█⓿▀█▀ 𝐈𝐍𝐃𝐄𝐏𝐄𝐍𝐃𝐄𝐍𝐓 𝐆𝐈𝐑𝐋 𝐕𝐈𝐏 𝐄𝐒𝐂𝐎𝐑𝐓 Hello Guys ! High Profiles young Beauties and Good Looking standard Profiles Available , Enquire Now if you are interested in Hifi Service and want to get connect with someone who can understand your needs. Service offers you the most beautiful High Profile sexy independent female Escorts in genuine ✔✔✔ To enjoy with hot and sexy girls ✔✔✔ ★providing:- • Models • vip Models • Russian Models • Foreigner Models • TV Actress and Celebrities • Receptionist • Air Hostess • Call Center Working Girls/Women • Hi-Tech Co. Girls/Women • Housewife

VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...

VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...

VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...

Call girls in delhi ✔️✔️🔝 9953056974 🔝✔️✔️Welcome To Vip Escort Services In Delhi [ ]Noida Gurgaon 24/7 Open Sex Escort Services With Happy Ending ServiCe Done By Most Attractive Charming Soft Spoken Bold Beautiful Full Cooperative Independent Escort Girls ServiCe In All-Star Hotel And Home Service In All Over Delhi, Noida, Gurgaon, Faridabad, Ghaziabad, Greater Noida, • IN CALL AND OUT CALL SERVICE IN DELHI NCR • 3* 5* 7* HOTELS SERVICE IN DELHI NCR • 24 HOURS AVAILABLE IN DELHI NCR • INDIAN, RUSSIAN, PUNJABI, KASHMIRI ESCORTS • REAL MODELS, COLLEGE GIRLS, HOUSE WIFE, ALSO AVAILABLE • SHORT TIME AND FULL TIME SERVICE AVAILABLE • HYGIENIC FULL AC NEAT AND CLEAN ROOMS AVAIL. IN HOTEL 24 HOURS • DAILY NEW ESCORTS STAFF AVAILABLE • MINIMUM TO MAXIMUM RANGE AVAILABLE. Call Girls in Delhi & Independent Escort Service – CALL GIRLS SERVICE DELHI NCR Vip call girls in Delhi Call Girls in Delhi, Call Girl Service 24×7 open Call Girls in Delhi Best Delhi Escorts in Delhi Low Rate Call Girls In Saket Delhi X~CALL GIRLS IN Ramesh Nagar Metro best Delhi call girls and Delhi escort service. CALL GIRLS SERVICE IN ALL DELHI … (Delhi) Call Girls in (Chanakyapuri) Hot And Sexy Independent Model Escort Service In Delhi Unlimited Enjoy Genuine 100% Profiles And Trusted Door Step Call Girls Feel Free To Call Us Female Service Hot Busty & Sexy Party Girls Available For Complete Enjoyment. We Guarantee Full Satisfaction & In Case Of Any Unhappy Experience, We Would Refund Your Fees, Without Any Questions Asked. Feel Free To Call Us Female Service Provider Hours Opens Thanks. Delhi Escorts Services 100% secure Services.Incall_OutCall Available and outcall Services provide. We are available 24*7 for Full Night and short Time Escort Services all over Delhi NCR. Delhi All Hotel Services available 3* 4* 5* Call Call Delhi Escorts Services And Delhi Call Girl Agency 100% secure Services in my agency. Incall and outcall Services provide. We are available 24*7 for Full Night and short Time Escort Services my agency in all over New Delhi Delhi All Hotel Services available my agency SERVICES [✓✓✓] Housewife College Girl VIP Escort Independent Girl Aunty Without a Condom sucking )? Sexy Aunty.DSL (Dick Sucking Lips)? DT (Dining at the Toes English Spanking) Doggie (Sex style from no behind)?? OutCall- All Over Delhi Noida Gurgaon 24/7 FOR APPOINTMENT Call/Whatsop / 9953056974

Call Girls in Prashant Vihar, Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service

Call Girls in Prashant Vihar, Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service

Call Girls in Prashant Vihar, Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service

9953056974 Low Rate Call Girls In Saket, Delhi NCR

Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha Thakur Booking Now open +91- 8005736733 Why you Choose Us- +91- 8005736733 HOT⇄ 8005736733 Mr ashu ji Call Mr ashu Ji +91- 8005736733 𝐇𝐨𝐭𝐞𝐥 𝐑𝐨𝐨𝐦𝐬 𝐈𝐧𝐜𝐥𝐮𝐝𝐢𝐧𝐠 𝐑𝐚𝐭𝐞 𝐒𝐡𝐨𝐭𝐬/𝐇𝐨𝐮𝐫𝐲🆓 .█▬█⓿▀█▀ 𝐈𝐍𝐃𝐄𝐏𝐄𝐍𝐃𝐄𝐍𝐓 𝐆𝐈𝐑𝐋 𝐕𝐈𝐏 𝐄𝐒𝐂𝐎𝐑𝐓 Hello Guys ! High Profiles young Beauties and Good Looking standard Profiles Available , Enquire Now if you are interested in Hifi Service and want to get connect with someone who can understand your needs. Service offers you the most beautiful High Profile sexy independent female Escorts in genuine ✔✔$V15 ✔✔To enjoy with hot and sexy girls ✔✔✔ ★providing:- • Models • vip Models • Russian Models • Foreigner Models • TV Actress and Celebrities • Receptionist • Air Hostess • Call Center Working Girls/Women • Hi-Tech Co. Girls/Women • Housewife

Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...

Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...

Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...

Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready For Sex At Your Doorstep Booking Contact Details WhatsApp Chat: +91-6297143586 pune Escort Service includes providing maximum physical satisfaction to their clients as well as engaging conversation that keeps your time enjoyable and entertaining. Plus they look fabulously elegant; making an impressionable. Independent Escorts pune understands the value of confidentiality and discretion - they will go the extra mile to meet your needs. Simply contact them via text messaging or through their online profiles; they'd be more than delighted to accommodate any request or arrange a romantic date or fun-filled night together. We provide - 02-may-2024(v.n)

Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...

Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...

Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...

Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵 (Simran) Call Girls in Chandigarh- 9053900678Escorts Service 50% Off with Cash ON Delivery★ 😋 Chandigarh Call girls ✂️ Service Hello my dear gentleman ❤️ Are you looking for a smart, beautiful Girl ? I will seduce you and intoxicate you from head to toe, with beautiful green eyes, soft pout, curly hair, big natural breasts, and flawless curves. I'm flirtatious, I exude confidence and incredible attractiveness, and I've mastered the art of seduction, which makes me the perfect companion for any occasion that calls for a little depraved play. Unforgettable appointment at your hotel or in my apartment. Call Girls in Chandigarh Chandigarh Call Girl Service call girl Chandigarh Chandigarh call girl escort in Chandigarh Chandigarh escort. Chandigarh escort service, Escort service in Chandigarh, Chandigarh escorts service, Chandigarh escorts agency. I Have Extremely Beautiful Broad Minded Cute Sexy & Hot Call Girls and Escorts, We Are Located in 3* 4* 5* Hotels in Chandigarh. Safe & Secure High-Class Services Affordable Rate 100% Satisfaction, Unlimited Enjoyment. Any Time for Model/Teens Escort in Chandigarh High-Class luxury and Premium Escorts ServiCe. Hot And Sexy Independent Model Escort Service In Chandigarh Unlimited Enjoy Genuine 100% Profiles And Trusted Door Step Call Girls Feel Free To Call Us Female Service Hot Busty & Sexy Party Girls Available For Complete Enjoyment. We Guarantee Full Satisfaction & In Case Of Any Unhappy Experience, We Would Refund Your Fees, Without Any Questions. Feel Free To Call Us Female Service Provider Hours Open Thanks. ★ CALL US High Class Luxury and Premium Escorts ServiCe We Provide Well Educated, Royal Class Female, High-Class Escorts Offering a Top High-Class Escorts Service In the & Several Nearby All Places Of . ★ Get The High Profile, Bollywood Queens , Well Educated , Good Looking , Full Cooperative Model Services. You Can See Me at My Comfortable Hotels or I Can Visit You In hotel Our Service Available IN All SERVICE, 3/4/5 STAR HOTEL , In Call /Out Call Services.24 hrs , ★ To Enjoy With Hot and Sexy Girls . ★ We Are Providing :- • Models • Vip Models • Russian Models • Foreigner Models • TV Actress and Celebrities • Receptionist • Air Hostess • Call Center Working Girls/Women • Hi-Tech Co. Girls/Women • Housewife • Collage Going Girls. • Travelling Escorts. • Ramp-Models • Foreigner And Many More.. Incall & Outcall Available… • INDEPENDENT GIRLS / HOUSE WIFES ★ I Guarantee You To Have An Unforgettable Experience With Me.A Curvy Body, long Hair and Silky Smooth Skin. She Is an Independent Escorts Model Will Give You More Pleasure & Full Satisfaction. ★OUR BEST SERVICES: – FOR BOOKING CALL Call/WhatsApp ☎+91-9115573837☎ ★ A-Level (5 Star Escort) ★ Strip-Tease ★ BBBJ (Bareback Blowjob) ★ Spending time in my rooms ★ BJ (Blowjob Without a Condom) ★ COF (Come On Face) ★ Completion ★ (Oral To Completion) ★ Special Massage ★ O-Level (Oral s

Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵

Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵

Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵

Chandigarh Call girls 9053900678 Call girls in Chandigarh

High Profile Call Girls In Punjab +919053900678 Punjab Call Girl (๏ 人 ๏) Punjab Call Girls provide you with erotic massage therapy Punjab Call Girls are well-trained in courtship and seduction. They can offer you true love and companionship. They can also. They can help you forget your problems and frustrations. They are also experts in playing several roles. ( • )( • )ԅ(≖⌣≖ԅ) Call Girls Punjab is also available for special occasions. They can take you to business meetings or business tours. They can also take you to public functions or any special occasion. These ladies are ready to serve their clients with care and respect. They have a wide range of experience and can also offer customized services. College Call Girls Punjab These websites can help you find escorts in your area. You can also find reviews about them and get recommendations. Their expertise allows them to reach the sensational areas of a man's body and release feelings more intensely with touches and adult words. You can full your all deserts with Punjab Call Girls Punjab Call Girls you can find the best escort girls to meet your sexual desires. There are many options, from cute college girls to sexy models. However, you should be careful when choosing an escort service because some will not offer quality services. Independent Call Girls Punjab will offer companionship services in addition to their sexual services. They can also accompany you to dinner or other social events. In addition, some escorts will perform intimate massages to increase your sensual pleasure another option is to hire a hot Russian escort. These girls are not only beautiful but also very talented in sex. In addition to orgasm, they can offer various erotic positions. These sexy babes are a perfect choice for a sexy night in town. They know all the sexy positions and will make you moan in delight. They can also play with your dick in the deep throat position and lick it like ice cream. There are plenty of Call girls in Punjab who are available for one-night stands. Just make sure that you use a trusted site and read reviews before booking. You can find a wide variety of gorgeous call girls in our city on the internet. These websites offer a safe and convenient way to meet a woman and enjoy her company for a night of fun. These sites typically offer a photo of the girl and her number. You can contact her through the phone or sexing to arrange a rendezvous. ★OUR BEST SERVICES: - FOR BOOKING A-Level (5 star escort) ★ Strip-tease ★ BBBJ (Bareback Blowjob) ★ Spending time in my rooms ★ BJ (Blowjob Without a Condom) ★ COF (Come On Face) ★ Completion ★ (Oral to completion) bjnonCovered ★ Special Massage ★ O-Level (Oral sex) ★ Blow Job; ★ Oral sex with a noncondom) ★ COB (Come On Body)

6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...

@Chandigarh #call #Girls 9053900678 @Call #Girls in @Punjab 9053900678

(Vivek)Call Us, 8448380779,Call girls in Delhi NCr – We Offer best in class call girls. escort Service At Affordable Price At low Rate with Space Night 8000 We Are One Of The Oldest Escort and Call girls Agencies in Delhi. You Will Find That Our Female Escorts Are Full Of Fun, Sexy And They Would Love Enjoy Your Company. We Have A Fantastic Selection Of Escort Ladies Available For In-Calls As Well As Out-Calls. Our Escorts Are Not Only Beautiful But All Have Great Personalities Making Them The Perfect Companion For Any Occasion. In-Call:- You Can Come At Our Place in Delhi Our place Which Is Very Clean Hygienic 100% safe Accommodation. Out-Call:- You have To Come Pick The Girl From My Place We Are Also Provide Door Step Services (Delhi Ncr, Noida, Gurgaon, Faridabad, Ghaziabad Note:- Pic Collectors Time Passers Bargainers Stay Away As We Respect The Value For Your Money Time And Expect The Same From You Hygienic:- Full Ac room And Clean Rooms Available In Hotel 24 * 7 Hourly In Delhi NCR More Details, With WhatsApp Number, +91-8448380779

WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)

WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)

WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)

Delhi Call girls

VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K High Profile Escorts In Pune Booking Now open +91- 8005736733 Why you Choose Us- +91- 8005736733 HOT⇄ 8005736733 Mr ashu ji Call Mr ashu Ji +91- 8005736733 (V030524]N) 𝐇𝐨𝐭𝐞𝐥 𝐑𝐨𝐨𝐦𝐬 𝐈𝐧𝐜𝐥𝐮𝐝𝐢𝐧𝐠 𝐑𝐚𝐭𝐞 𝐒𝐡𝐨𝐭𝐬/𝐇𝐨𝐮𝐫𝐲🆓 .█▬█⓿▀█▀ 𝐈𝐍𝐃𝐄𝐏𝐄𝐍𝐃𝐄𝐍𝐓 𝐆𝐈𝐑𝐋 𝐕𝐈𝐏 𝐄𝐒𝐂𝐎𝐑𝐓 Hello Guys ! High Profiles young Beauties and Good Looking standard Profiles Available , Enquire Now if you are interested in Hifi Service and want to get connect with someone who can understand your needs. Service offers you the most beautiful High Profile sexy independent female Escorts in genuine ✔✔✔ To enjoy with hot and sexy girls ✔✔✔ ★providing:- • Models • vip Models • Russian Models • Foreigner Models • TV Actress and Celebrities • Receptionist • Air Hostess • Call Center Working Girls/Women • Hi-Tech Co. Girls/Women • Housewife

VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...

VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...

VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...

Pune Airport ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready For Sex At Your Doorstep Booking Contact Details WhatsApp Chat: +91-6297143586 pune Escort Service includes providing maximum physical satisfaction to their clients as well as engaging conversation that keeps your time enjoyable and entertaining. Plus they look fabulously elegant; making an impressionable. Independent Escorts pune understands the value of confidentiality and discretion - they will go the extra mile to meet your needs. Simply contact them via text messaging or through their online profiles; they'd be more than delighted to accommodate any request or arrange a romantic date or fun-filled night together. We provide - 02-may-2024(v.n)

Pune Airport ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready...

Pune Airport ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready...

Pune Airport ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready...

Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Class Independent Escorts service Booking Now open +91- 8005736733 Why you Choose Us- +91- 8005736733 HOT⇄ 8005736733 Mr ashu ji Call Mr ashu Ji +91- 8005736733 𝐇𝐨𝐭𝐞𝐥 𝐑𝐨𝐨𝐦𝐬 𝐈𝐧𝐜𝐥𝐮𝐝𝐢𝐧𝐠 𝐑𝐚𝐭𝐞 𝐒𝐡𝐨𝐭𝐬/𝐇𝐨𝐮𝐫𝐲🆓 .█▬█⓿▀█▀ 𝐈𝐍𝐃𝐄𝐏𝐄𝐍𝐃𝐄𝐍𝐓 𝐆𝐈𝐑𝐋 𝐕𝐈𝐏 𝐄𝐒𝐂𝐎𝐑𝐓 Hello Guys ! High Profiles young Beauties and Good Looking standard Profiles Available , Enquire Now if you are interested in Hifi Service and want to get connect with someone who can understand your needs. Service offers you the most beautiful High Profile sexy independent female Escorts in genuine ✔✔$V15 ✔✔To enjoy with hot and sexy girls ✔✔✔ ★providing:- • Models • vip Models • Russian Models • Foreigner Models • TV Actress and Celebrities • Receptionist • Air Hostess • Call Center Working Girls/Women • Hi-Tech Co. Girls/Women • Housewife

Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...

Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...

Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...

𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready For Sex At Your Doorstep Call Mr Chirag Ji +91-7877925207 NORTH/SOUTH INDIANS HIGH CLASS MODELS/COLLEGE GIRLS/ HOUSEWIVES/BODY TO BODY MASSAGE, SANDWICH MASSAGE, SHOWER BATHING, BLOW JOB, LICKING, FRONT AND BACK SHOT, RUBBING, KISSING SMOOCHING ETC ETC... UNLIMITED FUN Call 24/7. Your assistance for your service... ☛ ✔✔ secure✔✔ 100% safe ✔✔ Vip Callgirl Service offers you the most beautiful High Profile sexy independent female Escorts in genuine ✔✔✔ To enjoy with hot and sexy girls ✔✔✔ A02524SW ★providing:- • Models • vip Models • Russian Models • Foreigner Models • TV Actress and Celebrities • Receptionist • Air Hostess • Call Center Working Girls/Women • Hi-Tech Co. Girls/Women • Housewife • Collage Going Girls. • Travelling Escorts. • Ramp-models • Foreigner And Many More.. ★OUR BEST SERVICES: - FOR BOOKING ★ A-Level (5 star escort) ★ Strip-tease ★ BBBJ (Bareback Blowjob)

𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...

𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...

𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...

Dernier (20)

Russian Call girl in Ajman +971563133746 Ajman Call girl Service

Russian Call girl in Ajman +971563133746 Ajman Call girl Service

Russian Call girl in Ajman +971563133746 Ajman Call girl Service

VVIP Pune Call Girls Mohammadwadi WhatSapp Number 8005736733 With Elite Staff...

VVIP Pune Call Girls Mohammadwadi WhatSapp Number 8005736733 With Elite Staff...

VVIP Pune Call Girls Mohammadwadi WhatSapp Number 8005736733 With Elite Staff...

VVVIP Call Girls In Connaught Place ➡️ Delhi ➡️ 9999965857 🚀 No Advance 24HRS...

VVVIP Call Girls In Connaught Place ➡️ Delhi ➡️ 9999965857 🚀 No Advance 24HRS...

VVVIP Call Girls In Connaught Place ➡️ Delhi ➡️ 9999965857 🚀 No Advance 24HRS...

Russian Call Girls Pune (Adult Only) 8005736733 Escort Service 24x7 Cash Pay...

Russian Call Girls Pune (Adult Only) 8005736733 Escort Service 24x7 Cash Pay...

Russian Call Girls Pune (Adult Only) 8005736733 Escort Service 24x7 Cash Pay...

VVIP Pune Call Girls Sinhagad WhatSapp Number 8005736733 With Elite Staff And...

VVIP Pune Call Girls Sinhagad WhatSapp Number 8005736733 With Elite Staff And...

VVIP Pune Call Girls Sinhagad WhatSapp Number 8005736733 With Elite Staff And...

Enjoy Night⚡Call Girls Samalka Delhi >༒8448380779 Escort Service

Enjoy Night⚡Call Girls Samalka Delhi >༒8448380779 Escort Service

Enjoy Night⚡Call Girls Samalka Delhi >༒8448380779 Escort Service

Top Rated Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Servi...

Top Rated Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Servi...

Top Rated Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Servi...

Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...

Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...

Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...

Dubai Call Girls Milky O525547819 Call Girls Dubai Soft Dating

Dubai Call Girls Milky O525547819 Call Girls Dubai Soft Dating

Dubai Call Girls Milky O525547819 Call Girls Dubai Soft Dating

VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...

VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...

VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...

Call Girls in Prashant Vihar, Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service

Call Girls in Prashant Vihar, Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service

Call Girls in Prashant Vihar, Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service

Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...

Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...

Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...

Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...

Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...

Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...

Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵

Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵

Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵

6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...

WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)

WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)

WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)

VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...

VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...

VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...

Pune Airport ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready...

Pune Airport ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready...

Pune Airport ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready...

Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...

Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...

Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...

𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...

𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...

𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...

NTXISSACSC4 - The Art of Evading Anti-Virus

1. @NTXISSA #NTXISSACSC4 The Art of Evading Antivirus Quentin Rhoads-Herrera Security Analyst State Farm 9/28/2016

2. @NTXISSA #NTXISSACSC4 Background • Worked in the following roles: • System administrator • Developer (.net / mobile) • Regulatory/compliance analyst • Security Analyst • Pentesting Hobbyist J NTX ISSA Cyber Security Conference – October 7-8, 2016 2

3. @NTXISSA #NTXISSACSC4 The Problem • Pen-testers are caught by antivirus programs. • Antivirus programs catch stock Metasploit payloads. • Malicious malware creators have already solved this problem. NTX ISSA Cyber Security Conference – October 7-8, 2106 3

4. @NTXISSA #NTXISSACSC4 How Antivirus Works • Signature-based detection • Heuristic-based detection • Behavioral-based detection • Sandbox detection • Data mining techniques NTX ISSA Cyber Security Conference – October 7-8, 2106 4

5. @NTXISSA #NTXISSACSC4 Is Antivirus Dead? • In 2014 the senior vice president of Symantec Brian Dye declared to the Wall Street Journal that antivirus “is dead.” – Brian Dye, Senior Vice President, Symantec Source: http://online.wsj.com/news/article_email/SB1000142405270230341710457954214 0235850578-lMyQjAxMTA0MDAwNTEwNDUyWj NTX ISSA Cyber Security Conference – October 7-8, 2106 5

6. @NTXISSA #NTXISSACSC4 Is Antivirus Dead? • “Relying solely on antivirus is a dead end- and it has been for at least 8 years now. But that’s like saying that aspirin is dead because it’s not the cure for cancer, AIDS, and all of humanity's other illnesses.” –Bogdan Domitru, Chief Technology Officer, Bitdefender Source: http://securitywatch.pcmag.com/security/ NTX ISSA Cyber Security Conference – October 7-8, 2106 6

7. @NTXISSA #NTXISSACSC4 Evading Antivirus Ways • Changing the signature • Encode (A LOT) • Encrypt • Leverage your own executable, or one that is already trusted by Windows (notepad.exe) • Veil-Framework NTX ISSA Cyber Security Conference – October 7-8, 2106 7

8. @NTXISSA #NTXISSACSC4 The Veil-Framework NTX ISSA Cyber Security Conference – October 7-8, 2106 8

9. @NTXISSA #NTXISSACSC4 HD Moore • “The strongest case for information disclosure is when the benefit of releasing the information outweighs the possible risks. In this case, like many others, the bad guys already won.” – HD Moore Source: https://community.rapid7.com/community/metasploit/blog/2009/02/23/the-best- defense-is-information NTX ISSA Cyber Security Conference – October 7-8, 2106 9

10. @NTXISSA #NTXISSACSC4 Checking your Payloads • Virustotal is a website that allows you to check how successful your payload is when evading antiviruses. • Antivirus vendors receive information about what was uploaded to Virustotal. NTX ISSA Cyber Security Conference – October 7-8, 2106 10

11. @NTXISSA #NTXISSACSC4 Virustotal NTX ISSA Cyber Security Conference – October 7-8, 2106 11 Source: https://www.virustotal.com/

12. @NTXISSA #NTXISSACSC4 Meterpreter is Caught NTX ISSA Cyber Security Conference – October 7-8, 2106 12

13. @NTXISSA #NTXISSACSC4 Encoded Meterpreter NTX ISSA Cyber Security Conference – October 7-8, 2106 13

14. @NTXISSA #NTXISSACSC4 The Veil Way • The Veil hash check method!!! (Really slick) • Recommended to check the hash which is located at /veil/output/hashes through the API on virustotal instead of submitting files. • checkvt will spawn all hashes and check via API with Virustotal. NTX ISSA Cyber Security Conference – October 7-8, 2106 14

15. @NTXISSA #NTXISSACSC4 Demo NTX ISSA Cyber Security Conference – October 7-8, 2106 15

16. @NTXISSA #NTXISSACSC4 When it is Caught NTX ISSA Cyber Security Conference – October 7-8, 2106 16

17. @NTXISSA #NTXISSACSC4 Veil-Evasion • Integrated with Metasploit • Leverages encryption (AES encrypted shellcode) • Can leverage your own payloads • Uses non-standard languages for Windows binaries • Can integrate into your own project NTX ISSA Cyber Security Conference – October 7-8, 2106 17

18. @NTXISSA #NTXISSACSC4 Languages Used • Python • Perl • PowerShell • C • C# • Go • Ruby NTX ISSA Cyber Security Conference – October 7-8, 2106 18

19. @NTXISSA #NTXISSACSC4 Shellcodes • Void Pointer casting: • Not a guarantee that your shellcode will drop into executable memory. • Virtual Alloc: • Allocates memory (shellcode size) • Determines permissions needed • HeapAlloc: • Manually drop shellcode NTX ISSA Cyber Security Conference – October 7-8, 2106 19

20. @NTXISSA #NTXISSACSC4 DEMO NTX ISSA Cyber Security Conference – October 7-8, 2106 20

21. @NTXISSA #NTXISSACSC4 Veil-Ordnance • Generates shellcode that can be copied into your payload. • Created due to shellcode being “broken” when leveraging msfvenom making a non- working payload. NTX ISSA Cyber Security Conference – October 7-8, 2106 21

22. @NTXISSA #NTXISSACSC4 Veil-Ordnance NTX ISSA Cyber Security Conference – October 7-8, 2106 22

23. @NTXISSA #NTXISSACSC4 Veil-Catapult • Payload Delivery tool • Payloads: • PowerShell • Barebones Python • Sethc backdoor • Can auto spawn the Metasploit handler script. NTX ISSA Cyber Security Conference – October 7-8, 2106 23

24. @NTXISSA #NTXISSACSC4 DEMO NTX ISSA Cyber Security Conference – October 7-8, 2106 24

25. @NTXISSA #NTXISSACSC4 How to Stop Veil • API Scanners (Ambush IPS) • Predictable Behaviors • Enhanced Mitigation Experience Toolkit (EMET) NTX ISSA Cyber Security Conference – October 7-8, 2106 25

26. @NTXISSA #NTXISSACSC4 Other AV Evading Tools • Hyperion: This is used to encrypt the binary • peCloak: Automated tool that attempts multiple tricks to evade antiviruses NTX ISSA Cyber Security Conference – October 7-8, 2106 26

27. @NTXISSA #NTXISSACSC4 Q&A NTX ISSA Cyber Security Conference – October 7-8, 2106 27

28. @NTXISSA #NTXISSACSC4@NTXISSA #NTXISSACSC4 The Collin College Engineering Department Collin College Student Chapter of the North Texas ISSA North Texas ISSA (Information Systems Security Association) NTX ISSA Cyber Security Conference – October 7-8, 2016 28 Thank you