Grant Bugher's guest appearances

Grant Bugher

DEF CON 23 [Audio] Speeches from the Hacker Convention

DEF CON 22 [Materials] Speeches from the Hacker Convention.

Mickey Shkatov

Colby Moore

John Menerick

Richard Thieme

Brian Gorenc

Phil Polstra

Dan Kaminsky

Patrick Wardle

Weston Hecker

Jesse Michael

Charlie Miller

Teddy Reed

Marc Rogers

Wesley McGrew

Michael Schrenk

OwlTail

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Grant-Bugher-Obtaining-and-Detecting-Domain-Persistence.pdf It's The Only Way To Be Sure: Obtaining and Detecting Domain Persistence Grant Bugher Perimeter Grid When a Windows domain is compromised, an attacker has several options to create backdoors, obscure his tracks, and make his access difficult to detect and remove. In this talk, I discuss ways that an attacker who has obtained domain administrator privileges can extend, persist, and maintain control, as well as how a forensic examiner or incident responder could detect these activities and root out an attacker. Grant Bugher has been hacking and coding since the early 90's and working professionally in information security for the last 11 years. He is currently a security consultant and engineer for a cloud service provider, and has previously been an architect, program manager and software engineer on a variety of online services, developer tools and platforms. Grant is a prior speaker at BlackHat and DEF CON and a regular DEF CON attendee since DEF CON 16. Most of his research and work is on cloud computing and storage platforms, application security, and detecting attacks against web-scale applications. Twitter: @fishsupreme Web: http://perimetergrid.com

Materials Available here: <a href="https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Grant-Bugher-Obtaining-and-Detecting-Domain-Persistence.pdf" rel="nofollow" target="_blank">https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Grant-Bugher-Obtaining-and-Detecting-Domain-Persistence.pdf</a> It's The Only Way To Be Sure: Obtaining and Detecting Domain Persistence Grant Bugher Perimeter Grid When a Windows domain is compromised, an attacker has several options to create backdoors, obscure his tracks, and make his access difficult to detect and remove. In this talk, I discuss ways that an attacker who has obtained domain administrator privileges can extend, persist, and maintain control, as well as how a forensic examiner or incident responder could detect these activities and root out an attacker. Grant Bugher has been hacking and coding since the early 90's and working professionally in information security for the last 11 years. He is currently a security consultant and engineer for a cloud service provider, and has previously been an architect, program manager and software engineer on a variety of online services, developer tools and platforms. Grant is a prior speaker at BlackHat and DEF CON and a regular DEF CON attendee since DEF CON 16. Most of his research and work is on cloud computing and storage platforms, application security, and detecting attacks against web-scale applications. Twitter: @fishsupreme Web: <a href="http://perimetergrid.com" rel="nofollow" target="_blank">http://perimetergrid.com</a>

Grant Bugher - It's The Only Way To Be Sure: Obtaining and Detecting Domain Persistence - 101 Track

Slides Here: https://www.defcon.org/images/defcon-22/dc-22-presentations/Bugher/DEFCON-22-Grant-Bugher-Detecting-Bluetooth-Surveillance-Systems-Updated.pdf Detecting Bluetooth Surveillance Systems Grant Bugher PERIMETER GRID Departments of Transportation around the United States have deployed "little white boxes" -- Bluetooth detectors used to monitor traffic speeds and activity. While they're supposedly anonymous, they detect a nearly-unique ID from every car, phone, and PC that passes by. In this presentation, I explore the documentation on these surveillance systems and their capabilities, then build a Bluetooth detector, analyzer, and spoofer with less than $200 of open-source hardware and software. Finally, I turn my own surveillance system on the DOT's and try to detect and map the detectors. Grant Bugher has been hacking since the early 90’s and working professionally in information security for the last 9 years. He is currently a security architect for a cloud computing provider, and has previously been a program manager and software engineer on a variety of widely-used developer tools and platforms. Grant is a prior speaker at BlackHat USA and a regular DefCon attendee since DefCon 16. Most of his research and work is on cloud compute and storage platforms, application security, and detecting attacks against web-scale applications. Twitter: @fishsupreme Web: http://perimetergrid.com

Slides Here: <a href="https://www.defcon.org/images/defcon-22/dc-22-presentations/Bugher/DEFCON-22-Grant-Bugher-Detecting-Bluetooth-Surveillance-Systems-Updated.pdf" rel="nofollow" target="_blank">https://www.defcon.org/images/defcon-22/dc-22-presentations/Bugher/DEFCON-22-Grant-Bugher-Detecting-Bluetooth-Surveillance-Systems-Updated.pdf</a> Detecting Bluetooth Surveillance Systems Grant Bugher PERIMETER GRID Departments of Transportation around the United States have deployed "little white boxes" -- Bluetooth detectors used to monitor traffic speeds and activity. While they're supposedly anonymous, they detect a nearly-unique ID from every car, phone, and PC that passes by. In this presentation, I explore the documentation on these surveillance systems and their capabilities, then build a Bluetooth detector, analyzer, and spoofer with less than $200 of open-source hardware and software. Finally, I turn my own surveillance system on the DOT's and try to detect and map the detectors. Grant Bugher has been hacking since the early 90’s and working professionally in information security for the last 9 years. He is currently a security architect for a cloud computing provider, and has previously been a program manager and software engineer on a variety of widely-used developer tools and platforms. Grant is a prior speaker at BlackHat USA and a regular DefCon attendee since DefCon 16. Most of his research and work is on cloud compute and storage platforms, application security, and detecting attacks against web-scale applications. Twitter: @fishsupreme Web: <a href="http://perimetergrid.com" rel="nofollow" target="_blank">http://perimetergrid.com</a>

Grant Bugher - Detecting Bluetooth Surveillance Systems