Arizona PowerShell – January 3rd 2017

Topic: PowerShell Forensics

Tools that enable incident response and hunting operations remotely across all versions of windows.

Join us for our first session of the New Year.  Our speaker is known for some cool forensics tools or as he terms it – Security Research and Esoteric PowerShell Knowledge.

 Some of the past sessions he’s given:

     Omaha PSUG 11/11/2014 – Matt Graeber – PowerShell and .NET Malware Analysis

     Using PowerShell as a Reverse Engineering Tool – Matt Graeber – PowerShell Summit 2014

     Abusing Windows Management Instrumentation (WMI)

     Parsing Binary File Formats with PowerShell

Matt’s blog: http://www.exploit-monday.com/

Conferences Matt has been a speaker at:

BlueHat

   http://www.microsoftrnd.co.il/bluehat/Pages/speakers.aspx

BlackHat

   https://www.blackhat.com/us-15/speakers/Matthew-Graeber.html

About our Speaker: Matt Graeber

Matthew Graeber (@mattifestation) is the Manager of Research with Veris Group’s Adaptive Threat Division. He has a passion for reverse engineering, PowerShell and advocating the “living off the land” philosophy – tradecraft that makes heavy use of built-in, trusted applications.

In his spare time, he develops an offensive and reverse engineering framework for PowerShell:PowerSploit , CimSweep and PowerShellArsenal, respectively. He has also been designated a Microsoft ‘Most Valuable Professional’ (MVP) in PowerShell.

Sign up Eventbrite

Location:

Tek Systems 
2625 South Plaza Drive
Suite #301 : 3rd Floor in the main conference room.
Tempe
AZ