Coursera Spring Sale
40% Off Coursera Plus Annual!
Grab it
Explore the sophisticated concealment methods cybercriminals use to maintain anonymity in this conference talk from DFIR Prague 2025. Discover the CLOAK (Concealment Layers for Online Anonymity and Knowledge) framework, developed through qualitative analysis of over 1,300 operational security guides from both clear and dark web sources. Learn about the extensive concealment measures employed by threat actors that make cybercrime attribution one of the greatest challenges for investigators today. Examine unique concealment tactics, techniques, and procedures (TTPs) spanning technical, behavioral, and physical domains that criminals use to hide their identities and activities. Understand the limitations of current frameworks like MITRE ATT&CK when it comes to addressing concealment practices. Gain practical insights into how the CLOAK framework can be applied in intelligence gathering, cybersecurity operations, and law enforcement investigations to better understand and counter criminal anonymity techniques.
