In reference to my talk at Ms Ignite: “Look under the hood: bypassing antimalware tactics and infrastructure response methods” I am sharing slides, tools and some extra step by step on how to elevate from regular user to the localsystem.

At Microsoft Ignite 2016 conference we had a pleasure to deliver a session about internal security! This time, we focused on scenarios related to the internal threats and on protection against them. We covered topics like security internals (security internals of internal security sounds cool for us), Windows network protocols security, stealing sensitive data from memory and malware analysis.