Hacke windows med windows - avanserte angrep

This document summarizes a presentation about advanced Windows attacks. It introduces the speaker and their background in IT and security. It then discusses traditional phishing attacks to gain initial access and shows examples of using legitimate Windows tools like REGSVR32.exe, RUNDLL32.exe, SYNCAPPVPUBLISHINGSERVER.exe, CERTUTIL.exe, and others to execute code and bypass defenses. Specific attacks demonstrated include using these tools to launch calculators, run PowerShell commands, and more. The presentation recommends defenses like application whitelisting, Device Guard, and AppLocker but notes bypass techniques. It emphasizes that while attacks can use basic methods, organizations still need robust security controls and detection.