Lateral Movement Courses and Certifications

HackerSploit

Windows Red Team Lateral Movement Techniques - PsExec and RDP

Explore lateral movement techniques on Windows using PsExec and RDP. Learn how adversaries pivot through systems to gain access and achieve objectives stealthily.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Confreaks

Introducing LMDA - Enhancing Lateral Movement and Data Access Identification on Windows Systems

Discover LMDA artifacts for Velociraptor that streamline Windows DFIR investigations by aggregating forensic data to identify lateral movement and data access patterns efficiently.

• YouTube
• 36 minutes
• On-Demand
• Free Video

WEareTROOPERS

Hopping Across Devices - Expanding Lateral Movement through Pass the Certificate Attack

Discover advanced lateral movement techniques using Pass the Certificate attacks to expand access across networked devices and systems.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Confreaks

Trust Boundary Theater - Lateral Movement in the Age of Hybrid Cloud

Explore how adversaries exploit trust boundary breakdowns between on-premises Active Directory and Azure cloud environments to achieve lateral movement and privilege escalation.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Lateral Movement - Harlan Carvey

Explore lateral movement techniques in cybersecurity with expert Harlan Carvey, covering detection methods, prevention strategies, and key aspects of the kill chain.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Black Hat

The Industrial Revolution of Lateral Movement

Explore advancements in targeted attacks and lateral movement techniques, examining their impact on cybersecurity and potential parallels to the Industrial Revolution.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Black Hat

Account Jumping Post Infection Persistency & Lateral Movement in AWS

Explore AWS security vulnerabilities, infection methods, and post-infection techniques. Learn about account jumping, resource manipulation, and best practices for protecting cloud environments.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Black Hat

Lateral Movement and Privilege Escalation in GCP - Compromise Organizations without Dropping an Implant

Explore techniques for identity compromise, privilege escalation, and lateral movement in Google Cloud. Learn about GCP's unique security model and default permissions, with demonstrations and tool releases.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Nakatomi Space - Lateral Movement as L1 Post-Exploitation in OT

Explore lateral movement techniques in OT networks, focusing on vulnerabilities in L1 devices. Learn about BPCS/SIS architectures, exploit chains, and hardening strategies to enhance industrial control system security.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Cooper

Exploiting Group Policy Objects for Persistence and Lateral Movement

Explore how Group Policy Objects can be exploited for malware distribution and network persistence. Learn about PowershellEmpire modules and countermeasures for enhanced cybersecurity in enterprise environments.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Black Hat

Nakatomi Space - Lateral Movement as L1 Post-exploitation in OT

Exploring deep lateral movement in OT networks, focusing on TTPs for navigating through embedded device networks at the lowest levels, highlighting security vulnerabilities in industrial control systems.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

DefCamp

Abusing GCPW for Lateral Movement from Local to Cloud

Explore lateral movement techniques from local systems to cloud environments using GCPW, presented by a Bitdefender security researcher at DefCamp 2023.

• YouTube
• 19 minutes
• On-Demand
• Free Video

fwd:cloudsec

Pods Without Borders - Lateral Movement in Azure Kubernetes Service

Uncover lateral movement techniques in Azure Kubernetes Service, exploring network policy weaknesses, real-world misconfigurations, and practical hardening steps.

• YouTube
• 23 minutes
• On-Demand
• Free Video

fwd:cloudsec

Staying Sneaky in the Office 365 - Exploiting Hidden SharePoint APIs for Azure Lateral Movement

Explore hidden SharePoint APIs to understand attack vectors and defense strategies in Microsoft 365 environments, bypassing Graph API detection methods.

• YouTube
• 25 minutes
• On-Demand
• Free Video

x33fcon

Beyond PsExec - Stealthy Lateral Movement Techniques

Discover advanced lateral movement techniques that bypass modern EDR detection, moving beyond traditional tools like PsExec to execute stealthy payloads across compromised networks.

• YouTube
• 48 minutes
• On-Demand
• Free Video