Evil.Plumbing
A landing page for a conference talk, or an excuse to buy a cool domain?
Schedule
- DEF CON 27 Workshop - Friday, 1430-1830 in Flamingo, Red Rock VII
Action Needed
- Bring an SSH client.
- If you have a favorite IRC client, bring it. VMs provided have irssi.
- If possible, bring a Windows VM (2012 server and up, or Windows 10).
- If possible, bring a Ubuntu 18.04 VM in case the network goes down.
- Bonus: If you have a Mac, bring a maCOS VM or install osquery on it (we will not output data from it to anywhere but your screen during the workshop).
Other Resources
Downloads
osquery downloads for Mac and Linux (Do not use MSI for Windows)
Ubuntu: dpkg -i filename.debMac: Install Package
Chocolatey Package Manager for Windows - if you bring a Windows VM
Windows: choco install osqueryTesting
Mac/Linux: Run osqueryi in a shell. It should be in your path.In osqueryi, run select * from uptime;
Windows: Run osqueryi from C:\programdata\osquery - it will NOT be in your path.
In osqueryi, run select * from uptime;
Authors and Contributors
Guillaume Ross - @gepeto42