Loading…
Back To Schedule
Friday, September 24 • 10:00am - 12:00pm
Parallel Workshop 2 :Scope X in action: Hunt threats in subdomains! by Dr. Meisam Eslahi, EC-Council Global Services (Limited Seats) 120 Minutes

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
Abstract:
There might be hundreds or thousands of subdomains behind our digital wonderland main domain. I asked many clients; do you know all existing subdomains? "We are not sure", they replied! In most cases, subdomains are unknown, not well maintained, might not inherit security controls, and not all are under the monitoring scope.

They are mysterious members of Scope X that provide cybercriminals with a larger attack surface consisting of security issues, sensitive information, vulnerabilities, unnoticed attack vectors, entry points, etc.

This hands-on workshop explains techniques and tools to discover subdomains, identify potential attack vectors, and determine associated risks. Assume we discover a long list of subdomains with different issues; the workshop will continue with a practical approach for data validation and classification, initial analysis, hypothesis formulation, and proactive threat hunting to address the risks.

10:00 AM – 10:10 AM Introduction to the Scope X and Threat Hunting
10:10 AM – 10:20 AM    Subdomains Security Challenges and Issues
10:20 AM – 10:35 AM    Subdomain Enumeration Techniques and Open Source Tools
10:35 AM – 10:45 AM    Data Validation and Classification with Scripting
10:45 AM – 11:15 AM    Manual Observation and Initial Analysis
11:15 AM – 11:45 AM    Hypothesis Formulation and Proactive Hunt
11:45 AM – 12:00 PM    Question and Answer



Speakers
avatar for Dr. Meisam Eslahi

Dr. Meisam Eslahi

EC-Council Global Services
Dr Meisam is a technical cybersecurity practitioner with solid expertise in providing strategies and technical directions, building new service/business lines, diverse teams, and capabilities. He has over 19 years of experience in information technology, with 15 years dedicated to... Read More →


Friday September 24, 2021 10:00am - 12:00pm IST