Building Containment Fields: How to Secure Containers

Links for my AtlSecCon talk: 

• My slides
• Docker: https://www.docker.com/
• Container Escape CVEs: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=container+escape
• CIS Docker Benchmark: https://www.cisecurity.org/benchmark/docker
• Docker Bench Security https://github.com/docker/docker-bench-security

Detecting Command and Control frameworks via Sysmon and Windows Event Logging

My talk: https://github.com/eric-conrad/c2-talk/ 

• Team Cymru - S2 Threat Research Team: Top C2 Frameworks
• My previous C2 detection talk: Leave Only Footprints: When Prevention Fails
• EVTX files from Leave Only Footprints: When Prevention Fails
• Sysmon: https://learn.microsoft.com/en-us/sysinternals/downloads/sysmon
• Impacket: https://github.com/fortra/impacket
• wmiexec,py: https://github.com/fortra/impacket/blob/master/examples/wmiexec.py
• Imphash: https://www.mandiant.com/resources/blog/tracking-malware-import-hashing