Making Breach & Attack Simulation Accessible: Open-Source Automation with infection_monkey
Shay Nehmad demonstrates how open-source Breach and Attack Simulation (BAS) tools like Infection Monkey make automated security validation accessible to any organization.
Summary
The Challenge of Communicating Enterprise Security Posture
Security leaders often struggle to objectively demonstrate how resilient their networks are against real-world lateral movement and ransomware propagation.
Democratizing Breach and Attack Simulation (BAS)
Shay Nehmad explores open-source BAS platforms—such as Infection Monkey—that automate safe, controlled adversary emulation inside internal networks.
Mapping Lateral Movement and Zero Trust Violations
Nehmad illustrates how the simulation agent identifies weak credentials, unpatched vulnerabilities, and missing network segmentation across hybrid environments.
Generating Actionable Telemetry and Executive Reports
The presentation demonstrates how BAS reports provide engineers and CISOs with concrete remediation roadmaps to achieve Zero Trust resilience.
Related talks
Red Team Village·55 min
Chris Cottrell
Chris Cottrell introduces the Guerrilla Red Team methodology, empowering distributed engineering teams to act as trusted internal ethical hackers.
Red Team Village·35 min
Erdener Uyan · Gökberk Gülgün
Erdener Uyan and Gökberk Gülgün present an open-source machine learning framework for generating dynamic, automated red team attack scenarios.
Red Team Village·57 min
Adam Pennington
MITRE ATT&CK lead Adam Pennington shares strategies for crafting realistic adversary emulation plans even when threat intelligence reports are incomplete or vague.