Chapter
Tracking an adversary with clustering and kill chain analysis
57:38 - 1:04:17 (06:39)
Clustering on intrusions to form a group, or performing kill chain analysis, are effective ways to track an adversary and their methods, tools, and infrastructure used to make defensive recommendations. A state adversary that particularly doesn't like Saudi Arabia or their wealth in oil and gas could find attacking their oil plants an effective way to impact production and morale, especially since Saudi Aramco was getting ready to do their IPO at the time.
Clips
In the world of cybersecurity, trying to attribute attacks to a specific source can be a costly and time-consuming process.
57:38 - 58:45 (01:06)
Summary
In the world of cybersecurity, trying to attribute attacks to a specific source can be a costly and time-consuming process. Moreover, the information gained from successful attribution is often of little practical use to defenders.
ChapterTracking an adversary with clustering and kill chain analysis
Episode68: Triton
PodcastDarknet Diaries
Clustering on intrusions is an effective tool for tracking adversaries and the methods they use.
58:44 - 1:01:13 (02:28)
Summary
Clustering on intrusions is an effective tool for tracking adversaries and the methods they use. Once a set of intrusions with similar characteristics is identified, victimology and infrastructure patterns can be studied to reach attribution.
ChapterTracking an adversary with clustering and kill chain analysis
Episode68: Triton
PodcastDarknet Diaries
A targeted attack on the oil and gas industry in Saudi Arabia could have devastating effects on production, P.R., and morale in the region, making it an effective tactic for state adversaries.
1:01:13 - 1:04:17 (03:04)
Summary
A targeted attack on the oil and gas industry in Saudi Arabia could have devastating effects on production, P.R., and morale in the region, making it an effective tactic for state adversaries. Targeting human life and causing loss of life is a particularly dangerous and awful threat that puts the attackers in a special league of their own.