Cyber Threat Workshop - Know Yourself: Attack Surface Intelligence

Awareness of your digital attack surface, its composition, and unique placement amid the global attack surface. Having complete visibility into each asset and connection across your digital footprint is vital.
Our team of security experts will show how to leverage internet intelligence and smart graphing to pinpoint relationships within the global attack surface: you and others, good and bad, adversaries and allies.
Hands-on exercises give you experience to know yourself utilizing RiskIQ’s Attack Surface Intelligence:
Investigate an organization's attack surface to determine their risks and exposures.
Investigate malicious infrastructure and where it might still reside in attack surfaces live on the internet.
Investigate applications and systems that are exposed on the internet to determine the vulnerabilities and the risks to your organization.
Hands-on labs and exercises will show how to expose real-life malicious and/or risky applications.
Hands-on exercises:
1. Investigation an old sinkhole domain that was used in a magecart attack and find the entanglements with attack surfaces that still exist.
2. Investigate a JavaScript Attack and learn how to find and identify the connections and how to determine victims and how to get a copy of the script that was used during the attack.
3. Investigate a recently published Magecart attack and determine how and who has been targeted. learn the TTP of the attack and examine the scripts being used.
4. Examine published vulnerabilities with IBM Qradar and Atlassian Confluence, CVEs, CWEs, remediation and patching recommendations and scope of the vulnerability (Your Attack Surface, Third-Party and Global attack surfaces.
5. Examining risks and exposures in an organizations and third-party attack surfaces.