Singapore ICS Cyber Security Conference | 2019

Fileless attack techniques are being bypassed and even ignored by the defenders or so-called "Blue Teams" under their radar who just rely on their million-dollar arsenals and stay reactive until the average dwell time of 256-days lapses.

This presentation aims to enlighten not only the experienced incident responders but also the experts in digital forensics to a practical methodologies of dissecting phishing attacks to hunt Fileless attack and even discover zero-day malware on their targeted ICS/SCADA environment that mitigate the breach or lessen the dwell time using Free and Open Source Software (FOSS).

Key Takeaways:

• Demystify Zero-day and Fileless malware hunting.
• Share the seven Zero-Day Malware found by the speaker.
• Empower audiences and encourage to share findings in the community for awareness and prevention.
• Show the fun in Digital Forensics and Incident Response (DFIR) within the ICS/SCADA environment.
• Leverage Open Source tool for practical analysis.