2020-021- Derek Rook, redteam tactics, blue/redteam comms, and detection of testing

<p>**If Derek told you about us at SANS, send a DM to @brakeSec or email <a href= "mailto:bds.podcast@gmail.com">bds.podcast@gmail.com</a> for an invite to our slack**</p> <p><span style="font-weight: 400;">OSCP/HtB/VulnHub is a game... d</span><span style="font-weight: 400;">esigned to have a tester find a specific nugget of information to pivot or gain access to greater power on the system. </span></p> <p><span style="font-weight: 400;">Far different in the 'real' world.</span></p> <p> </p> <p><span style="font-weight: 400;">Privilege escalation in Windows:</span></p> <p><em><span style="font-weight: 400;">*as of June 2020, many of these items still work, may not work completely in the future*</span></em></p> <p><em><span style="font-weight: 400;">*even so, many of these may not work if other mitigating controls are in place*</span></em></p> <p> </p> <p><span style="font-weight: 400;">PENTEST METHODOLOGY : </span></p> <p><span style="font-weight: 400;">PTES -</span><a href= "http://www.pentest-standard.org/index.php/PTES_Technical_Guidelines"><span style="font-weight: 400;">http://www.pentest-standard.org/index.php/PTES_Technical_Guidelines</span></a></p> <p><span style="font-weight: 400;">OSSTMM -</span> <a href= "https://www.isecom.org/OSSTMM.3.pdf"><span style= "font-weight: 400;">https://www.isecom.org/OSSTMM.3.pdf</span></a></p> <p> </p> <p><span style="font-weight: 400;">Redteam methodology:</span> <a href= "https://www.synopsys.com/glossary/what-is-red-teaming.html"><span style="font-weight: 400;"> https://www.synopsys.com/glossary/what-is-red-teaming.html</span></a></p> <p> </p> <p><a href= "https://www.fuzzysecurity.com/tutorials/16.html"><span style= "font-weight: 400;">https://www.fuzzysecurity.com/tutorials/16.html</span></a></p> <p> </p> <p><a href= "https://medium.com/@Shorty420/enumerating-ad-98e0821c4c78"><span style="font-weight: 400;"> https://medium.com/@Shorty420/enumerating-ad-98e0821c4c78</span></a></p> <p> </p> <p><a href= "https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/M