20FEB21 Meeting

[cat-alyst]

• Continue to build out the MacOS Workshop Planning excel worksheet
• Review Read-Me with team AKA public release proposal
• Discuss how we want to incorporate CALDERA
• Use the navigator as a technique development heat map. We can use this to identify what techniques we need to add for mac, potentially create macOS windows equivalent techniques where it makes sense, map threat hunting data sources, map hunting techniques. We can use separate navigator views to collect each separately and then combine them together for coverage indicator.

Decisions

• Each take a behavior i.e. lateral movement, persistence, etc, do research and then come to the next meeting with proposed/favorite techniques we want to leverage in the scenario
• Lateral Movement/C2 - @ahhh
• Persistence/PrivEsc - @cat-alyst
• Initial infection/Execution - @plugxor
• We are also going to use a usb dongle to simulate physical access
• [ Get MG cables] @plugxor