BEGIN:VCALENDAR
PRODID:-//vBulletin 6//EN
VERSION:2.0
CALSCALE:GREGORIAN
BEGIN:VEVENT
UID:d2f48703-a0d4-4c00-934e-db4b56a79b1a
DTSTAMP:20260521T003636Z
SUMMARY:Can't Touch This: Detecting Lateral Movement in Zero-Touch Environm
 ents
DESCRIPTION:Title: Can't Touch This: Detecting Lateral Movement in Zero-Tou
 ch Environments\n\nDescription:\nAttackers frequently use valid accounts t
 o access servers with sensitive data. This gives them ninja-like stealth i
 n most environments\, but this session will show you how to turn the table
 s and use a zero-touch environment to catch them.\n\nZero-touch environmen
 ts are a product of the fast-moving world of DevOps which is being adopted
  by an increasing number of successful companies including Google. This se
 ssion will show that by leveraging the constraints of this environment\, w
 e can identify malicious network traffic which would otherwise blend into 
 the noise.\n\nThis proposal is based on active research and new details ma
 y emerge during preparation of the final session. A brief overview of expe
 cted included topics:\n\n• Why care about DevOps and Zero-Touch?\n• Ho
 w application servers are deployed in traditional environments\n• What l
 ateral movement with valid credentials looks like in traditional environme
 nts\n• How deployment works in Zero-Touch environments\n• What lateral
  movement with valid credentials looks like in zero-touch\n• Detecting t
 he lateral movement with existing network sensors\n\nSpeaker(s): Phillip M
 arlow\n\nLocation: Cloud Vlg\n\nDiscord: https://discord.com/channels/7082
 08267699945503/732733373172285520\n\nEvent starts: 2020-08-07 13:25 (01:25
  PM) PDT (UTC -07:00)\n\nEvent ends: 2020-08-07 14:10 (02:10 PM) PDT (UTC 
 -07:00)\n\nFor the most up-to-date information\, please either visit https
 ://info.defcon.org\, or use HackerTracker\, which is available for iOS and
  Android. This is an automated message\, and this data was last modified 2
 020-08-07T00:36 (UTC).
URL:https://forum.defcon.org/node/234716
DTSTART:20200807T212500Z
DTEND:20200807T221001Z
LOCATION:Cloud Vlg
END:VEVENT
END:VCALENDAR