01. Keynote: How I Met Your Beacon by Dominic Chell
Presents 01. Keynote: how teams Met Your Beacon by Dominic Chell and evaluates key implications for security practitioners.
Summary
Overview: Dominic Chell of MDSec delivers the x33fcon keynote on detecting C2 beacons on Windows through behavioral, in-memory, and network analysis techniques.
Key Topics: Beacon initialization via reflective DLL injection; behavioral IOCs during C2 setup; in-memory analysis for detecting injected code; network interaction patterns; and improving both red team tradecraft and blue team detection.
Technical Details: Chell walks through each beacon lifecycle stage—from process injection through C2 communication—identifying detection opportunities at behavioral, memory, and network layers. He shares IOCs useful for threat hunting exercises.
Takeaways: Effective beacon detection requires multi-layered analysis across behavior, memory, and network. Red teamers should understand detection surfaces to improve tradecraft; blue teamers should hunt across all three layers.
Related talks
The Linux Foundation·14 min
Christopher “Crob” Robinson · Eddie Knight
Outlines keynote: All Your Base Are Belong to teams and evaluates key implications for security practitioners.
The Linux Foundation·5 min
Madelyn Olson
Presents keynote: Your Core Infrastructure Should Be Vendor Neutral and Open Source and evaluates key implications for security practitioners.
x33fcon·40 min
Engineers explore architecture and security mechanisms for 13. Erkan Ekici and Shanti Lindström: Offensive SIEM: When the Blue Team Switches Perspective.