In a real-world attack, after accomplishing all their objectives, some threat actors perform impact actions to extort money from their clients or to obfuscate their traces. Those impact actions vary from shutting down systems all the way to destroying data. In this course, Impact with Caldera we will cover how to utilize the Caldera tool to perform some impact techniques in a red team environment. First, you’ll learn the basics about impact and how to use the Caldera tool. Next, you will use Caldera to remove access from some accounts to cause impact. Finally, you’ll learn how to shut down systems and destroy data using the Caldera tool. When you’re finished with this course, you’ll have the skills and knowledge to execute these techniques [Account Access Removal (T1531), System Shutdown (T1529), Data Destruction (T1485)] using Caldera. More importantly, knowing how these techniques can be used against you, will ultimately lend to your ability as an organization, or an individual, to detect and defend against specific attack vectors.
Author Name: Ricardo Reimao
Author Description:
Ricardo is a Cybersecurity Consultant based in Toronto (Canada). He has 14+ years of IT experience, 10 of them in the IT Security field. His main interests are: SIEM solutions (IBM QRadar), Enterprise Security Risk, Penetration Testing, Security processes/procedures and Network Security.