PIPEDREAM - Most Flexible & Capable ICS Malware To Date

[@tonio071273]

Great mapping of Pipedream along Purdue and MITRE, thx Mr. Lee!🙌

[@believe_it712]

Haha love the final part message to the adversaries

[@aryamargax]

Also a very good point by Robert in regards to predicting threat actors' targeting. It's a waste of time to debate whether you are likely to be targeted or not. Focus on deploying robust security controls and always be prepared for the unexpected.

[@HexaSquirrel]

Great talk, Rob!

[@aryamargax]

Schrodinger ICS, haha. Good point to invest more in detection and response as opposed to concentrating all resources on prevention.

[@aryamargax]

Very interesting that Dragos does not do attribution unless it affects the incident response process. It seems like an efficient way to approach things given that the priority should be to formulate how to properly defend the systems at hand.

[@aryamargax]

Lateral movement monitoring. Not just what comes in and goes out.

[@aryamargax]

These threat actors are really organized. I didn't know there were separate groups that specialized in access or the activity in itself.

[@ranikehat3913]

Great Talk

[@fredericoferreira5581]

Great talk

[@The-Blind-Witch]

Are you certain the adversaries' tradecraft error wasn't intentional as a warning signal from the adversary nation state to the USA?