in the DNC Hack

More documents

Recommendations

Info

Infrastructure (2) • Quickly pivoted from reported IP 185.100.84.134 • Taking a look at domains related to this IP – nothing from Domain Tools (C) 2016 Rendition Infosec - Jake Williams
Infrastructure • Being from Romania isn’t necessarily bad (C) 2016 Rendition Infosec - Jake Williams
Page 1 and 2: Potential for false flag operations
Page 3 and 4: Agenda • Why do we care? • Over
Page 5 and 6: Attack Timeline • 14JUN - DNC hac
Page 7 and 8: CrowdStrike Stands by Analysis (C)
Page 9 and 10: On Validating Attribution Observabl
Page 11 and 12: Our Diamond Model Russia??? Other a
Page 13: Infrastructure • Quickly pivoted
Page 17 and 18: Let’s try another IP • Looks li
Page 19 and 20: Why the focus on C2? • The attack
Page 21 and 22: Malware Artifacts of Interest • T
Page 23 and 24: Document Metadata (C) 2016 Renditio
Page 25 and 26: False Flag Opportunities • Copyin
Page 27 and 28: False Flag Puppet Blogs • I went
Page 29 and 30: So Whodunnit? • With the data pub

in the DNC Hack

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?