A few tricks to Anonymizing your Red Team

Patrick Matthews

BSides NYC 2023 (0x04) · Day 1 · Talk - Red

In the dynamic and often adversarial landscape of cybersecurity, red teams and penetration testers are constantly striving to enhance their effectiveness while maintaining operational security. Patrick Matthews' talk, "A few tricks to Anonymizing your Red Team," delivered at BSides NYC, delves into the critical importance of anonymizing infrastructure and operations to better simulate advanced threat actors. This presentation is particularly relevant for security professionals working with clients who possess sophisticated detection and response capabilities, such as those in critical infrastructure sectors, which are increasingly targeted by state-sponsored and highly organized groups.

AI review

Competent, practitioner-level OpSec tradecraft talk that pulls together a coherent anonymization playbook for red teamers — prepaid infrastructure, self-destructing dropboxes, LoRa C2, breach-data social engineering. Nothing here is genuinely novel to anyone who's been paying attention, but it's well-organized and actionable enough to be useful for a BSides audience that hasn't systematized this stuff before.

Watch on YouTube