Turning to the Dark Side: Utilizing Offensive Techniques in Incident Response

Watch a 13-minute Security BSides London conference talk exploring how incident responders in the insurance industry leverage offensive security techniques when critical evidence is unavailable during investigations. Learn practical approaches for gathering intelligence through open source reconnaissance, analyzing leaked data repositories for compromised credentials, and identifying vulnerabilities in Active Directory configurations. Discover how to conduct targeted attacks against AD accounts and services to proactively uncover security weaknesses that could be exploited by threat actors. Master essential offensive security methods that can help determine likely attack vectors when traditional forensic evidence is inaccessible due to encryption, hardware failures, or premature recovery efforts.