AI-Enhanced Purple Teaming
40:11
Using modern C++ in implants
32:39
How did they respond so fast?
36:02
Leveraging AI for Attack
26:05
Ай бұрын
Пікірлер
@IceDruid23
@IceDruid23 4 ай бұрын
Thanks for the presentation! Is there a list of all the articles written without requiring going to twitter hashtag search?
@SANSOffensiveOperations
@SANSOffensiveOperations 4 ай бұрын
You would have to ask the presenter. They may be able to help you with that.
@t3chb1te
@t3chb1te 4 ай бұрын
Niiice
@IceDruid23
@IceDruid23 4 ай бұрын
What do you feel about mind maps as learning tool?
@karengomez3143
@karengomez3143 5 ай бұрын
Takeaways: Attacks: -Injection (silly activities could defeat an AI model, since this data is not in the training data). -Grounding (allows an AI to show false outputs, through data creation, (Search, Engine, Optimization) and then the result is shown by the AI. -Prompt Hijacking (when the context is modified by someone that does not have the authority to do it, like a user's input being treated as a developers). Exploits: -Conversation attacks to Business flaws (wrong discounts, upgrades, math) -Guardrails attacks
@karengomez3143
@karengomez3143 5 ай бұрын
Takeaways: GPT is making many structured relation placement between words in different levels (layers) so different inputs could bring a set of outputs, but it's not a DB, and it's not searching for patterns within a created DB. Within the GPT answers are the alignment response rules, what would be if a response is following the user's request in spite of company intent or social or compliance rules. GPT models are not that good at making a whole story or remembering a conversation, so it's not good in making novels, but it has a window response that would be good from a user's point of view aligning to their intend. Guardrails are limits or ways to make a system in place to follow alignments. Grounding as a hallucination mechanism, providing context to the user's query through a database management (large language model), so whenever the user is asking a question that needs more info about, or that is recent, the app would bring another page, just like google would retrieve twitter webpage when someone is asking for it. AI application: Scammer response generator
@eagerjhoe2314
@eagerjhoe2314 5 ай бұрын
Awesome videos learned a lot. I couldn't find the law bas project online you talked about, could you help me out? Thanks
@jolin1947
@jolin1947 6 ай бұрын
May I use the video as the training material? Thank you.
@VEVO500
@VEVO500 7 ай бұрын
How is a portal entered
@شهابامیرخانی-ث6ق
@شهابامیرخانی-ث6ق 7 ай бұрын
I wish the movies had subtitles because I am deaf and I hardly understand and I have hearing problems
@8starsAND
@8starsAND 9 ай бұрын
Sans is very overrated, I don’t know how they got so big
@Carnyride79
@Carnyride79 9 ай бұрын
Good talk but you like to stroke your ego quite often and to say Elon doesn't know what he's talking about is a stretch
@Peethemayan4516
@Peethemayan4516 7 ай бұрын
How so?
@ChrisLeftBlank
@ChrisLeftBlank 10 ай бұрын
This is true AI Safety, all the closed-sourced policy holders guiding the system is doing is showing the AI how to say no to end-user. I mean alignment is not a bad thing but the block box approach is just tuning models to select what human alignment is for the user.
@lydiacornelia5181
@lydiacornelia5181 10 ай бұрын
Thank you 🎉🎉🎉
@d_lom9253
@d_lom9253 11 ай бұрын
This is only helpful for a very niche crowd. If your have to protect your network or anything like that, wasting time
@hannahprobably5765
@hannahprobably5765 Жыл бұрын
Huge thanks
@DillPickl3_
@DillPickl3_ Жыл бұрын
NGL this is probably my favourite SANS presentations ever. Retention has always been an issue of mine. With ANKI I've been able to take Tests and Exams with a high level of confidence. thanks Josh!
@su8z3r03
@su8z3r03 Жыл бұрын
@4:54 The statement "Kerberos uses shared secrets for authentication in a Windows domain, there is only one, the NTLM hash" is not entirely accurate. While it is true that NTLM (NT LAN Manager) is a legacy authentication protocol used in Windows environments, Kerberos is the primary authentication protocol used in Active Directory domains. Kerberos does not rely on shared secrets in the same way as NTLM. Instead, it uses a trusted third-party authentication system and symmetric key cryptography to verify the identities of users and services within a network. Kerberos authentication involves the use of tickets and does not directly rely on the storage of password hashes. Furthermore, the statement overlooks the fact that Kerberos also involves the use of a Kerberos hash, which is derived from the user's password and is used in the authentication process. In summary, the statement oversimplifies the authentication mechanisms used in Windows domains and does not accurately represent the role of Kerberos and the use of shared secrets in the context of Windows domain authentication.
@ram_bam
@ram_bam Жыл бұрын
Would SEC504 provide enough preparation for this course?
@AniketChauhan-pw4lz
@AniketChauhan-pw4lz Жыл бұрын
i think SEC560 will be
@SumanRoy.official
@SumanRoy.official Жыл бұрын
Please use dark backgrounds
@georgeb8637
@georgeb8637 Жыл бұрын
8:00 - all letters in English language 9:41 neural network 22:13 - AI confessing love 26:58 Hallucination 32:06 prompt engineering 40:53 - AI apology 😂 46:58 - Go game beat by human 54:00 - sequencing attack
@HainChildhaven
@HainChildhaven Жыл бұрын
Hi there, can I use your video for training purposes at a non for profit?
@pentester-ethicalhacker
@pentester-ethicalhacker Жыл бұрын
Excellent content!
@alfredoneves3976
@alfredoneves3976 Жыл бұрын
Here from tryhackme
@rumpelstiltskin9729
@rumpelstiltskin9729 Жыл бұрын
The news segments were so cringe
@vanthinhnguyen3335
@vanthinhnguyen3335 Жыл бұрын
Please !! Discount for this course
@manamsetty2664
@manamsetty2664 Жыл бұрын
Awesome talk 👏 Really good explanation about what AI is doing Great animations Was always engaged throughout the talk Questions need to be audible though that was the only issue
@shpockboss3834
@shpockboss3834 Жыл бұрын
Thats informative
@shpockboss3834
@shpockboss3834 Жыл бұрын
Thats informative
@shpockboss3834
@shpockboss3834 Жыл бұрын
Thats informative
@achunaryan3418
@achunaryan3418 Жыл бұрын
AAAA
@manamsetty2664
@manamsetty2664 Жыл бұрын
At the beginning of the talk i thought this was a random comment but the end made it clear.
@tanker7757
@tanker7757 Жыл бұрын
I wish the courses where cheaper😢 kids like me would go broke getting this
@fafmekfmaefeaf
@fafmekfmaefeaf Жыл бұрын
May we use this in our staff training on security awareness for our company employee annual training?
@gpdally-tupa
@gpdally-tupa Жыл бұрын
thank you!
@hackwithsumit
@hackwithsumit Жыл бұрын
anyone say how to increase font size or decrease font size on burp suite
@joshdagda2847
@joshdagda2847 Жыл бұрын
When is this course going to be available?
@TheBenJiles
@TheBenJiles Жыл бұрын
Fascinating stuff! Thanks for the well communicated and in-depth presentation.
@piotrstasinskij2929
@piotrstasinskij2929 2 жыл бұрын
Thank You for this learning material
@shaenorelation7175
@shaenorelation7175 2 жыл бұрын
This is really good
@dereklewinson3018
@dereklewinson3018 2 жыл бұрын
Very informative; thanks!!!
@MusicLover-bp2cc
@MusicLover-bp2cc 2 жыл бұрын
Great video. Just a quick question, why were the reasons you did not choose Caldera as a suitable open source C2 option ? Codially
@manums__
@manums__ 2 жыл бұрын
TNice tutorials is my tNice tutorialrd ti watcNice tutorialng tNice tutorials video. I'm switcNice tutorialng over from soft One 4 to soft for my production and your video was the first one I
@moralestrading
@moralestrading 2 жыл бұрын
BROTHER, YOU ARE THE BEST!!! You oooh really helped me!! THANK YOU VERY MUCH!
@dominickiplangat1921
@dominickiplangat1921 2 жыл бұрын
This burpsuite is so useful
@hannahprobably5765
@hannahprobably5765 2 жыл бұрын
♥ thank you
@ThePaulSIN
@ThePaulSIN 2 жыл бұрын
Great presentation. Very insightful and educational!
@jabra1946
@jabra1946 2 жыл бұрын
Very Informative! Thank you,
@tiagotavi
@tiagotavi 2 жыл бұрын
Go Packers!
@sotecluxan4221
@sotecluxan4221 2 жыл бұрын
@ConstruccionesValades
@ConstruccionesValades 2 жыл бұрын
Thanks for the tutorial
@orionbekesi
@orionbekesi 2 жыл бұрын
You saved me. I didn't find the ctrl+space keyboard shortcut to send the request for the repeater tab anywhere googling