In this talk, I will discuss the process behind creating the Ransomware Diaries. I will share the methods and strategies I use in my research, which often involve encounters with criminals. Expect to hear previously undisclosed details about my adventures!
Additionally, I'll outline how to build trust with threat actors and how to use the information obtained, including falsehoods, in combination with Cyber Threat Intelligence (CTI) to uncover the truth.
Threat actors, like us, are human, flawed, and have vulnerabilities. I will share how to identify these weaknesses and manipulate criminals to disclose details that would otherwise remain hidden. Lastly, I'll explain how to correlate and discover unique insights by using the information gathered from these criminal interactions.
View upcoming Summits: www.sans.org/u/DuS
SANS Ransomware Summit 2024
Keynote | Behind the Screens: Decrypting the Ransomware Diaries
Jon DiMaggio, Chief Security Strategist, Analyst1