<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Many of you read with interest the F-Secure report on <a
href="https://www.f-secure.com/documents/996508/1030745/dukes_whitepaper.pdf">7
years of the Duke APT</a> campaign. One image struck out at me,
and probably at you as well:<br>
<br>
<div align="center"><img alt="(Image of Duke Campaigns from
F-Secure)" src="cid:part2.07010407.04050700@immunityinc.com"
height="306" width="346"><br>
</div>
<br>
As you can see above, this Russian team is running no less than 7
concurrent different toolsets. That's not because they want to.
Partially that is because operational security requires toolset
heterogeneity. But a large part of that is because every mission has
very different requirements. <br>
<br>
For example, there is a large tension between the level of
reliability and portability required by your main toolkit, and the
flexibility and rapid development required by your mission response
teams. You want your mission response scripts to take advantage of
the advanced security features of your main toolkit, but you can't
exactly have your line operators thinking about how they are going
to deal with the main thread-pool or worrying about memory usage in
random third party libraries they want to import. And we all know
the danger of having two developers working on two slightly
different sets of requirements: two entire toolchains built from the
ground up because the other person's code was not "clean".<br>
<br>
INNUENDO solves this problem for APT-level penetration testers in a
fairly unique way, which we are announcing today:<br>
<ul>
<li><a href="https://vimeo.com/139697912">https://vimeo.com/139697912</a>
(Active Directory Python Executor demo)</li>
<li><a href="https://vimeo.com/139697887">https://vimeo.com/139697887</a>
(INNUENDO Python Executor Introduction/Design Overview)</li>
<li><a href="https://vimeo.com/139697901">https://vimeo.com/139697901</a>
(Basic INNUENDO Python Executor Recipes)</li>
<li><a href="https://vimeo.com/139697907">https://vimeo.com/139697907</a>
(Executor Downloads)</li>
</ul>
<div align="center"><img alt="{{Python Executor Slide}}"
src="cid:part7.08060104.07020803@immunityinc.com" height="460"
width="741"><br>
</div>
<br>
<br>
Thanks,<br>
Dave Aitel<br>
Immunity, Inc.<br>
<br>
<br>
<br>
</body>
</html>