What a Cluster: A Case Study in Threat Actor Collaboration & Framework for Comparative Attribution

What a Cluster: A Case Study in Threat Actor Collaboration & Framework for Comparative Attribution

Source: YouTube · SANS Digital Forensics and Incident Response · published Feb 28, 2025 · 34:44

Malware Analysis
No ratings yet Log in to rate
Transcript Available
Description

[BLUF] Jonno from PwC introduces a technical framework that helped his team analyze a specific case study involving AI, noting direct crossover with Unit 42's previous discussion on the topic 0:00.

Key Takeaways:

  • The speaker, a technical analyst at PwC, emphasizes that while he is more comfortable with technical details, the framework has been instrumental for his team in handling complex case studies 0:06.
  • There is significant overlap with the earlier Unit 42 talk, specifically regarding Artificial Intelligence (AI), ensuring that the content will directly address the same subjects 0:24.
  • The presentation acknowledges that the upcoming technical discussion will be "anathema" to his usual style but highlights the framework's utility in bridging technical and strategic analysis 0:10.
  • Jonno credits his team for the success of applying this framework, noting that the insights gained are a collective team effort rather than individual work 0:40.

Closing Statement
This segment sets the stage for a technical deep-dive into AI-related threats, leveraging a proven framework to ensure comprehensive analysis and collaboration within the PwC threat team.

Sources:

  • 0:00 Introduction of speaker and role
  • 0:06 Discussion of the technical framework
  • 0:24 Mention of crossover with Unit 42 talk
  • 0:40 Acknowledgment of team effort

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Malware Analysis. Commonly maps to: Security Operations, Security Architecture and Engineering. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

hello uh I'm jonno um I'm a technical analyst with the PWC threaten team um the technical part is going to become a little bit obvious because I am going to talk about a framework um but it's going to be quite anathema to me because I deal more with the technical side of things but the framework has really helped me and my team um with this kind of case study um Katie mentioned uh kind of some Crossover with a talk yesterday from unit 42 um that will uh there will be some direct crossover because we'll be talking about AA that they mentioned actually directly so um there will be some literally direct crossover um about me oh well there's the first slide um my team um as I mentioned um uh have come to really enjoy this framework that I'll be talking about um and I will mention that uh this …