Daniel Kapellmann Zafra's guest appearances

Daniel Kapellmann Zafra

jivetalking

@BEERISAC: OT/ICS Security Podcast Playlist

Nexus: A Claroty Podcast

Richard Thomas

Gary E. Miller

Tom VanNorman

Martin Scheu

Justin Searle

Tom Tervoort

Don C. Weber

Joe Gardiner

Dustin Childs

Dan Ricci

Sharon Brizinov

Dan Gunter

Patrick Miller

Mike Rogers

Tom Pace

OwlTail

Podcast: Nexus: A Claroty Podcast (LS 25 · TOP 10% what is this?)Episode: Daniel Kapellmann Zafra on Incontroller/Pipedream ICS Attack ToolsPub date: 2022-05-04Mandiant senior technical analysis manager Daniel Kapellmann Zafra joins the Claroty Aperture podcast to discuss the Incontroller/Pipedream attack tool. Incontroller is alleged to be a state-sponsored tool specifically designed to target industrial control systems. Incontroller was discovered before it was employed on a victim's network, yet nonetheless it remains one of the most sophisticated, dangerous ICS attack platforms ever developed. Kapellman Zafra discusses Incontroller's three components—Tagrun, Codecall, and OmShell—that give it extreme flexibility in targeting different ICS equipment and communication protocols. You'll also learn about how resilient potential victims may be, as well as some of the mitigations and defensive strategies that organizations should consider.  The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: <a href="https://www.listennotes.com/podcasts/nexus-a-claroty-podcast-claroty-zCh-SjZqY3A/" rel="nofollow" target="_blank">Nexus: A Claroty Podcast</a> (LS 25 · TOP 10% <a href="https://www.listennotes.com/listen-score/" rel="nofollow" target="_blank">what is this?</a>) Episode: <a href="https://www.listennotes.com/e/c1ce773ef1d04f90891efa8b39ea3b46/" rel="nofollow" target="_blank">Daniel Kapellmann Zafra on Incontroller/Pipedream ICS Attack Tools</a> Pub date: 2022-05-04 Mandiant senior technical analysis manager Daniel Kapellmann Zafra joins the Claroty Aperture podcast to discuss the <a href="https://www.mandiant.com/resources/incontroller-state-sponsored-ics-tool" rel="nofollow" target="_blank">Incontroller/Pipedream attack tool</a>. Incontroller is alleged to be a state-sponsored tool specifically designed to target industrial control systems. Incontroller was discovered before it was employed on a victim's network, yet nonetheless it remains one of the most sophisticated, dangerous ICS attack platforms ever developed.  Kapellman Zafra discusses Incontroller's three components—Tagrun, Codecall, and OmShell—that give it extreme flexibility in targeting different ICS equipment and communication protocols. You'll also learn about how resilient potential victims may be, as well as some of the mitigations and defensive strategies that organizations should consider.   The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Daniel Kapellmann Zafra on Incontroller/Pipedream ICS Attack Tools

Mandiant senior technical analysis manager Daniel Kapellmann Zafra joins the Claroty Aperture podcast to discuss the Incontroller/Pipedream attack tool. Incontroller is alleged to be a state-sponsored tool specifically designed to target industrial control systems. Incontroller was discovered before it was employed on a victim's network, yet nonetheless it remains one of the most sophisticated, dangerous ICS attack platforms ever developed. Kapellman Zafra discusses Incontroller's three components—Tagrun, Codecall, and OmShell—that give it extreme flexibility in targeting different ICS equipment and communication protocols. You'll also learn about how resilient potential victims may be, as well as some of the mitigations and defensive strategies that organizations should consider.  

Mandiant senior technical analysis manager Daniel Kapellmann Zafra joins the Claroty Aperture podcast to discuss the <a href="https://www.mandiant.com/resources/incontroller-state-sponsored-ics-tool" rel="nofollow" target="_blank">Incontroller/Pipedream attack tool</a>. Incontroller is alleged to be a state-sponsored tool specifically designed to target industrial control systems. Incontroller was discovered before it was employed on a victim's network, yet nonetheless it remains one of the most sophisticated, dangerous ICS attack platforms ever developed.  Kapellman Zafra discusses Incontroller's three components—Tagrun, Codecall, and OmShell—that give it extreme flexibility in targeting different ICS equipment and communication protocols. You'll also learn about how resilient potential victims may be, as well as some of the mitigations and defensive strategies that organizations should consider.

Episode 154 (14 Sep 2021): Daniel Kapellmann Zafra (www.kapell.tech) is a Technical Analysis Manager for Mandiant where he oversees the strategic coverage of cyber physical threat intelligence and coordinates the development of tools and solutions to collect and analyze data. He is a frequent speaker on industrial control systems and operational technology at international conferences. His background is multidisciplinary with work experience across various industries. As a former Fulbright scholar, he holds a master’s degree from the University of Washington specialized in Information Security and Risk Management. In 2017, he was awarded first place at Kaspersky Academy Talent Lab's competition for designing an application to address security beyond anti-virus."The Paris Call" principles for trust and security in cyberspacehttps://pariscall.international/en/principles The Tallin Manual for "cyber" conflict from NATOhttps://ccdcoe.org/research/tallinn-manual/Their toolkit on cybersecurity regulationhttps://cyberlaw.ccdcoe.org/wiki/Main_PageDaniel's favorite recent reflection on global cybersecurity challenges https://blogs.microsoft.com/on-the-issues/2020/12/17/cyberattacks-cybersecurity-solarwinds-fireeye/David's review of Future Crimes:http://kysq.org/aguanomics/2018/03/review-future-crimes/John Oliver on ransomwarehttps://www.youtube.com/watch?v=WqD-ATqw3js

Episode 154 (14 Sep 2021): Daniel Kapellmann Zafra (www.kapell.tech) is a Technical Analysis Manager for Mandiant where he oversees the strategic coverage of cyber physical threat intelligence and coordinates the development of tools and solutions to collect and analyze data. He is a frequent speaker on industrial control systems and operational technology at international conferences. His background is multidisciplinary with work experience across various industries. As a former Fulbright scholar, he holds a master’s degree from the University of Washington specialized in Information Security and Risk Management. In 2017, he was awarded first place at Kaspersky Academy Talent Lab's competition for designing an application to address security beyond anti-virus. "The Paris Call" principles for trust and security in cyberspace https://pariscall.international/en/principles The Tallin Manual for "cyber" conflict from NATO <a href="https://ccdcoe.org/research/tallinn-manual/" rel="nofollow" target="_blank">https://ccdcoe.org/research/tallinn-manual/</a> Their toolkit on cybersecurity regulation <a href="https://cyberlaw.ccdcoe.org/wiki/Main_Page" rel="nofollow" target="_blank">https://cyberlaw.ccdcoe.org/wiki/Main_Page</a> Daniel's favorite recent reflection on global cybersecurity challenges <a href="https://blogs.microsoft.com/on-the-issues/2020/12/17/cyberattacks-cybersecurity-solarwinds-fireeye/" rel="nofollow" target="_blank">https://blogs.microsoft.com/on-the-issues/2020/12/17/cyberattacks-cybersecurity-solarwinds-fireeye/</a> David's review of Future Crimes: <a href="http://kysq.org/aguanomics/2018/03/review-future-crimes/" rel="nofollow" target="_blank">http://kysq.org/aguanomics/2018/03/review-future-crimes/</a> John Oliver on ransomware <a href="https://www.youtube.com/watch?v=WqD-ATqw3js" rel="nofollow" target="_blank">https://www.youtube.com/watch?v=WqD-ATqw3js</a>