Malware, C&C, and DNS Exfiltration

Friday, August 7 | 9:00 am EDT

What's behind those malicious Word macros that users just love to enable?

Watch our IR team convince a user to open an infected document, giving us a reverse shell. We'll use that connection to recon the network, run a pass-the-hash attack, and sneak some top-secret data out via DNS tunneling.


Then learn, step-by-step, how you can use Varonis to run a fast and conclusive investigation—without wasting hours stitching logs or running reports.

+1 CPE

Register Now

About this webinar

See how Varonis uncovers indicators of compromise at every turn as our adversary:

  • Gets their victim to open a malicious attachment
  • Drops malware via a Word macro
  • Establishes a reverse shell
  • Does network recon to find interesting hosts
  • Moves laterally and elevates privileges using pass the hash
  • Exfiltrates data via DNS tunneling
Ryan O'Boyle
Ryan O'Boyle Security Analytics Manager, Varonis

Ryan O’Boyle, GCIH is a Team Lead for the Incident Response and Security Architecture team at Varonis. Ryan has an engineering background with experience in IT infrastructure, Incident Response, and Data Protection. Varonis’ team of security professionals provide complementary Incident Response services to all existing customers. In addition, they work with customers to operationalize the Varonis Data Security Platform and integrate Varonis into the security ecosystem.

“Varonis gives me the ability to know what’s going on in our file systems at any given time. It’s not something I have to concentrate on because the software is doing it for me.”

Finance, Online US Bank

Want to see Varonis in action?