VULNERABLE Kernel Drivers for Security Research
Source: YouTube · John Hammond · published Sep 28, 2023 · 23:36
Michael Haig discusses his cybersecurity projects including Atomic Red Team for testing attacker tradecraft and LOLDrivers for cataloging vulnerable drivers 0:38.
Key Takeaways:
• Atomic Red Team is a popular tool for simulating attacker techniques mapped to the MITRE ATT&CK framework, with over 800 stars and wide industry adoption 1:57
• LOLDrivers project originated from an incident involving a malicious driver at Red Canary, leading to a comprehensive database of vulnerable drivers 7:01
• The LOLDrivers platform provides downloads, metadata, Yara rules, Sigma rules, and Sysmon configurations for each driver, making detection easier for defenders 10:05
• Haig will present a workshop at Texas Cyber Summit featuring an HTA generator tool that helps test vulnerable drivers in a controlled environment 15:31
These open-source tools provide significant value to both offensive and defensive security professionals in understanding and detecting driver-based threats.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
alrighty hey thanks everyone for tuning in I am super excited to be hanging out with a great friend who is doing some incredible work these days Mike Mike hag I'm forgive me is that am I getting your name right dude I feel like it's been too long you're good well hey I know you're doing some incredible stuff with a whole lot of uh projects that are just available to the whole industry to the whole Community I know you've been cooking up with atomic red team I know you've been doing some phenomenal stuff with lull drivers could you just kind of help I don't know fill in in case folks aren't too familiar with who you are and what you're up to and all those awesome initiatives I'd love for you to I don't know take the take the floor my friend thanks um yeah my name is Michael Haig and um been…