Ch33r10

Blue Team Village·56 min

• DEF CON
• Threat Intel
• Date: Aug 2021
• Location: Las Vegas

Ch33r10 · Jorge Orchilles

Ch33r10 and Jorge Orchilles turn standard threat reports into actionable intelligence, demonstrating advanced TTP extraction, adversary emulation, and hunting pivots.

Blue Team Village·36 min

• DEF CON
• Threat Intel
• Date: Aug 2020
• Location: Online

ch33r10

Proposes extracting indicators of emulation from cyber threat intelligence to model adversary behaviors more accurately.

Red Team Village·45 min

• DEF CON
• Red Team
• Date: Aug 2020
• Location: Online

Ch33r10 · haydnjohnson

Indicators of Emulation: Extra Spicy Adversary Emulation - Ch33r10 & haydnjohnson.

Red Team Village·45 min

• DEF CON
• Adversary Emulation
• Date: Aug 2020
• Location: Online

Ch33r10

Ch33r10 explains how to transform cyber threat intelligence (CTI) from static indicators of compromise into dynamic 'Indicators of Emulation' for red teams.

Blue Team Village·26 min

• DEF CON
• Blue Team
• Date: Aug 2019
• Location: Las Vegas

ch33r10

What if I told you that it is possible for blue teamers to practice CTI everyday?! With minimal guidance and insight, blue teamers can learn how to see things through the eyes of a cyber threat intel analyst. We’ll st...