Explore a decade-long investigation into a sophisticated cybercriminal gang with exceptional operational security in this 49-minute RSA Conference talk. Join FBI Supervisory Special Agent Ryan MacFarlane and Symantec Director Liam O'Murchu as they reveal the challenges and strategies employed to crack the case. Gain insights into investigating cybercriminals with strong OpSec, learn about traffic and malware analysis techniques, and understand the process of piecing together evidence. Discover the vulnerabilities in hacker OPSEC, computer security, and secure communications that ultimately led to the gang's downfall. Examine the activity timeline, infrastructure overview, and the crucial role of server search warrants in analyzing data and solving complex cybercrime cases.
Overview
Syllabus
RSAConference 2020
Putting the jigsaw puzzle together
Some good rules
The good news about hacker OPSEC
Computer OPSEC
Secure Comms
Activity Timeline
Infrastructure Overview
Raduspr Traffic Connection 1 (TCP)
Server Search Warrants
Analyzing Data
Taught by
RSA Conference