際際滷shows by User: AlexParsons13 / http://www.slideshare.net/images/logo.gif 際際滷shows by User: AlexParsons13 / Tue, 10 Sep 2019 19:44:28 GMT 際際滷Share feed for 際際滷shows by User: AlexParsons13 Office 365 Incident Response 2019 B-Sides Orlando /slideshow/office-365-incident-response-2019-bsides-orlando-170674862/170674862 office365incidentresponse2019bsidesorlandoupdated-190910194428
Re-upload of updated version in September 2019; originally presented in April 2019. Office 365 related incidents are at an all time high, and despite the high adoption rates across industries, most companies still lack the ability to enforce proper security controls and they also lack the knowledge to respond to incidents quickly and effectively. In this presentation, I will discuss attacker patterns in O365 environments, how to collect the data you need during an incident, and how to respond to questions from CISOs and lawyers, and tell some Incident Response war stories along the way. We will also look into some of the new techniques attackers are using to perform things like MFA bypass, new features that Microsoft is rolling out to assist Incident Responders (such as MailItemsAccessed operations), and ways to automate and prepare for such an attack.]]>

Re-upload of updated version in September 2019; originally presented in April 2019. Office 365 related incidents are at an all time high, and despite the high adoption rates across industries, most companies still lack the ability to enforce proper security controls and they also lack the knowledge to respond to incidents quickly and effectively. In this presentation, I will discuss attacker patterns in O365 environments, how to collect the data you need during an incident, and how to respond to questions from CISOs and lawyers, and tell some Incident Response war stories along the way. We will also look into some of the new techniques attackers are using to perform things like MFA bypass, new features that Microsoft is rolling out to assist Incident Responders (such as MailItemsAccessed operations), and ways to automate and prepare for such an attack.]]>
Tue, 10 Sep 2019 19:44:28 GMT /slideshow/office-365-incident-response-2019-bsides-orlando-170674862/170674862 AlexParsons13@slideshare.net(AlexParsons13) Office 365 Incident Response 2019 B-Sides Orlando AlexParsons13 Re-upload of updated version in September 2019; originally presented in April 2019. Office 365 related incidents are at an all time high, and despite the high adoption rates across industries, most companies still lack the ability to enforce proper security controls and they also lack the knowledge to respond to incidents quickly and effectively. In this presentation, I will discuss attacker patterns in O365 environments, how to collect the data you need during an incident, and how to respond to questions from CISOs and lawyers, and tell some Incident Response war stories along the way. We will also look into some of the new techniques attackers are using to perform things like MFA bypass, new features that Microsoft is rolling out to assist Incident Responders (such as MailItemsAccessed operations), and ways to automate and prepare for such an attack. <img style="border:1px solid #C3E6D8;float:right;" alt="" src="https://cdn.slidesharecdn.com/ss_thumbnails/office365incidentresponse2019bsidesorlandoupdated-190910194428-thumbnail.jpg?width=120&amp;height=120&amp;fit=bounds" /><br> Re-upload of updated version in September 2019; originally presented in April 2019. Office 365 related incidents are at an all time high, and despite the high adoption rates across industries, most companies still lack the ability to enforce proper security controls and they also lack the knowledge to respond to incidents quickly and effectively. In this presentation, I will discuss attacker patterns in O365 environments, how to collect the data you need during an incident, and how to respond to questions from CISOs and lawyers, and tell some Incident Response war stories along the way. We will also look into some of the new techniques attackers are using to perform things like MFA bypass, new features that Microsoft is rolling out to assist Incident Responders (such as MailItemsAccessed operations), and ways to automate and prepare for such an attack.
Office 365 Incident Response 2019 B-Sides Orlando from Alex Parsons
]]>
1729 8 https://cdn.slidesharecdn.com/ss_thumbnails/office365incidentresponse2019bsidesorlandoupdated-190910194428-thumbnail.jpg?width=120&height=120&fit=bounds presentation Black http://activitystrea.ms/schema/1.0/post http://activitystrea.ms/schema/1.0/posted 0
Office 365 Incident Response 2019 B-Sides Orlando /slideshow/office-365-incident-response-2019-bsides-orlando/139886814 office365incidentresponse2019bsidesorlando-190407010524
Office 365 related incidents are at an all time high, and despite the high adoption rates across industries, most companies still lack the ability to enforce proper security controls and they also lack the knowledge to respond to incidents quickly and effectively. In this presentation, I will discuss attacker patterns in O365 environments, how to collect the data you need during an incident, and how to respond to questions from CISOs and lawyers, and tell some Incident Response war stories along the way. We will also look into some of the new techniques attackers are using to perform things like MFA bypass, new features that Microsoft is rolling out to assist Incident Responders (such as MailItemsAccessed operations), and ways to automate and prepare for such an attack.]]>

Office 365 related incidents are at an all time high, and despite the high adoption rates across industries, most companies still lack the ability to enforce proper security controls and they also lack the knowledge to respond to incidents quickly and effectively. In this presentation, I will discuss attacker patterns in O365 environments, how to collect the data you need during an incident, and how to respond to questions from CISOs and lawyers, and tell some Incident Response war stories along the way. We will also look into some of the new techniques attackers are using to perform things like MFA bypass, new features that Microsoft is rolling out to assist Incident Responders (such as MailItemsAccessed operations), and ways to automate and prepare for such an attack.]]>
Sun, 07 Apr 2019 01:05:24 GMT /slideshow/office-365-incident-response-2019-bsides-orlando/139886814 AlexParsons13@slideshare.net(AlexParsons13) Office 365 Incident Response 2019 B-Sides Orlando AlexParsons13 Office 365 related incidents are at an all time high, and despite the high adoption rates across industries, most companies still lack the ability to enforce proper security controls and they also lack the knowledge to respond to incidents quickly and effectively. In this presentation, I will discuss attacker patterns in O365 environments, how to collect the data you need during an incident, and how to respond to questions from CISOs and lawyers, and tell some Incident Response war stories along the way. We will also look into some of the new techniques attackers are using to perform things like MFA bypass, new features that Microsoft is rolling out to assist Incident Responders (such as MailItemsAccessed operations), and ways to automate and prepare for such an attack. <img style="border:1px solid #C3E6D8;float:right;" alt="" src="https://cdn.slidesharecdn.com/ss_thumbnails/office365incidentresponse2019bsidesorlando-190407010524-thumbnail.jpg?width=120&amp;height=120&amp;fit=bounds" /><br> Office 365 related incidents are at an all time high, and despite the high adoption rates across industries, most companies still lack the ability to enforce proper security controls and they also lack the knowledge to respond to incidents quickly and effectively. In this presentation, I will discuss attacker patterns in O365 environments, how to collect the data you need during an incident, and how to respond to questions from CISOs and lawyers, and tell some Incident Response war stories along the way. We will also look into some of the new techniques attackers are using to perform things like MFA bypass, new features that Microsoft is rolling out to assist Incident Responders (such as MailItemsAccessed operations), and ways to automate and prepare for such an attack.
Office 365 Incident Response 2019 B-Sides Orlando from Alex Parsons
]]>
5129 21 https://cdn.slidesharecdn.com/ss_thumbnails/office365incidentresponse2019bsidesorlando-190407010524-thumbnail.jpg?width=120&height=120&fit=bounds presentation Black http://activitystrea.ms/schema/1.0/post http://activitystrea.ms/schema/1.0/posted 0
Office 365 incident Response: BSides Vancouver 2018 /slideshow/office-365-incident-response-bsides-vancouver-2018/90872223 avi9tiljspq6ww9zncbw-signature-0b03c0360451467a6d82421d0a64fb1ae3967e6cf46026b78e674b603397ec57-poli-180316055231
As adoption for Office 365 increases, so will security incidents that involve Office 365. Despite the high adoption rates across industries, most companies still lack the ability to enforce proper security controls and they also lack the knowledge to respond to incidents quickly and effectively. In this presentation, we will focus on attacker patterns in O365 environments, how to collect the data you need during an incident, and how to respond to common requests and questions, especially during phishing related cases. We will also look into some of the advanced security features Office 365 has to offer and when it would make sense to invest in them.]]>

As adoption for Office 365 increases, so will security incidents that involve Office 365. Despite the high adoption rates across industries, most companies still lack the ability to enforce proper security controls and they also lack the knowledge to respond to incidents quickly and effectively. In this presentation, we will focus on attacker patterns in O365 environments, how to collect the data you need during an incident, and how to respond to common requests and questions, especially during phishing related cases. We will also look into some of the advanced security features Office 365 has to offer and when it would make sense to invest in them.]]>
Fri, 16 Mar 2018 05:52:31 GMT /slideshow/office-365-incident-response-bsides-vancouver-2018/90872223 AlexParsons13@slideshare.net(AlexParsons13) Office 365 incident Response: BSides Vancouver 2018 AlexParsons13 As adoption for Office 365 increases, so will security incidents that involve Office 365. Despite the high adoption rates across industries, most companies still lack the ability to enforce proper security controls and they also lack the knowledge to respond to incidents quickly and effectively. In this presentation, we will focus on attacker patterns in O365 environments, how to collect the data you need during an incident, and how to respond to common requests and questions, especially during phishing related cases. We will also look into some of the advanced security features Office 365 has to offer and when it would make sense to invest in them. <img style="border:1px solid #C3E6D8;float:right;" alt="" src="https://cdn.slidesharecdn.com/ss_thumbnails/avi9tiljspq6ww9zncbw-signature-0b03c0360451467a6d82421d0a64fb1ae3967e6cf46026b78e674b603397ec57-poli-180316055231-thumbnail.jpg?width=120&amp;height=120&amp;fit=bounds" /><br> As adoption for Office 365 increases, so will security incidents that involve Office 365. Despite the high adoption rates across industries, most companies still lack the ability to enforce proper security controls and they also lack the knowledge to respond to incidents quickly and effectively. In this presentation, we will focus on attacker patterns in O365 environments, how to collect the data you need during an incident, and how to respond to common requests and questions, especially during phishing related cases. We will also look into some of the advanced security features Office 365 has to offer and when it would make sense to invest in them.
Office 365 incident Response: BSides Vancouver 2018 from Alex Parsons
]]>
2890 6 https://cdn.slidesharecdn.com/ss_thumbnails/avi9tiljspq6ww9zncbw-signature-0b03c0360451467a6d82421d0a64fb1ae3967e6cf46026b78e674b603397ec57-poli-180316055231-thumbnail.jpg?width=120&height=120&fit=bounds presentation Black http://activitystrea.ms/schema/1.0/post http://activitystrea.ms/schema/1.0/posted 0
https://public.slidesharecdn.com/v2/images/profile-picture.png https://cdn.slidesharecdn.com/ss_thumbnails/office365incidentresponse2019bsidesorlandoupdated-190910194428-thumbnail.jpg?width=320&height=320&fit=bounds slideshow/office-365-incident-response-2019-bsides-orlando-170674862/170674862 Office 365 Incident Re... https://cdn.slidesharecdn.com/ss_thumbnails/office365incidentresponse2019bsidesorlando-190407010524-thumbnail.jpg?width=320&height=320&fit=bounds slideshow/office-365-incident-response-2019-bsides-orlando/139886814 Office 365 Incident Re... https://cdn.slidesharecdn.com/ss_thumbnails/avi9tiljspq6ww9zncbw-signature-0b03c0360451467a6d82421d0a64fb1ae3967e6cf46026b78e674b603397ec57-poli-180316055231-thumbnail.jpg?width=320&height=320&fit=bounds slideshow/office-365-incident-response-bsides-vancouver-2018/90872223 Office 365 incident Re...