Avoiding Attribution Techniques Workshop

Workshop Highlights

1. Introduction to Evasion and Anti-Attribution
   Begin with an overview of common evasion techniques, why they are used, and the challenges they pose to cybersecurity teams. Understand how attackers leverage these methods to disguise their identities and motives.

2. Obfuscation and Anonymisation Tactics
   Delve into tactics like IP spoofing, encryption, and use of proxy networks that attackers use to obscure their location and identity. Learn how to identify signs of obfuscation and anonymisation and how to respond effectively.

3. Disguising Tactics, Techniques, and Procedures (TTPs)
   Attackers often modify their tactics to appear as a different threat actor or to avoid detection. Recognise these “masking” methods and develop skills to differentiate between genuine and altered TTPs.

4. Understanding “Living off the Land” Techniques
   Many adversaries use legitimate tools and systems to hide their activities. This module covers how attackers exploit native system functions, making it harder to detect their actions as malicious.

5. Advanced Anti-Forensics
   Learn how attackers erase evidence, modify logs, and use other anti-forensics techniques to hinder forensic analysis. Gain skills to identify tampering and recover partial evidence from compromised systems.

6. Hands-On Evasion Detection Exercises
   Engage in hands-on simulations that teach you how to detect evasive behaviours. Realistic scenarios enable participants to practise identifying and countering evasion tactics, ensuring they’re prepared to apply these skills in real-world incidents.