No Easy Breach DerbyCon 2016

The document details the difficulties faced by a security team in responding to a sophisticated cyber attack by APT29, illustrating challenges such as fast-paced, stealthy tactics, rapidly evolving attack methods, and advanced techniques like WMI and Kerberos ticket attacks. It outlines various responses and lessons learned, emphasizing the need for flexibility, improved visibility, and ongoing enhancement of detection methods. Key takeaways include the importance of matching attackers' strategies and continually refining incident response practices for effective security. - Download as a PDF or view online for free