[0x6D6F76206561782C203130] - The Meet

The last meetup was a fantastic celebration! A decade of community is something memorable, and once again, the spirit and energy in the room made it clear why this journey has lasted so long. Thank you all for being part of it. But the story continues with new chapters to be written. With the spring mood in the air, we're bringing a fresh selection of great content.

To kick things off, Gustavo Silva (@gsilvapt), a familiar face among us, will take us into the world of Detection Engineering. After a year working on a next-gen SIEM writing detections and collaborating with customers, he'll share practical insights on what detection engineering really means in the field, how to reduce alert fatigue, and how AI can help blue teams scale their defensive capabilities. Whether you're in the field or just curious, these practical lessons are a must, and you won't want to miss them!

And if that's not enough, a community veteran is back on the main stage. Ricardo Almeida (@vibrio) will guide us through an epic Red Team adventure. From a clever local privilege escalation involving LAPS to a BYOVD technique that keeps Defender ATP, Sysmon, and Tanium out of your way, the journey continues all the way to domain compromise through an AD CS ESC1 misconfiguration. And if you think the story ends there, it doesn't. The adventure continues with credential harvesting, deeper explorations, and unexpected turns that open new paths to pwnage. To wrap it all up, Ricardo will show that sometimes the simplest tools are the most effective to “finish the job” or for successfully exfiltrating data. Whether you want to level up your game or just sit back and enjoy a proper security engagement story, you want to be on this comeback.

Just a friendly reminder, this is an in-person event. Before RSVPing, please double-check that you can attend and be there in person. Good logistics rely on it!

In the meantime, you can join our Slack chat to discuss all kinds of hackish stuff and, of course, interact with other members.

Don't miss out. Your FOMO will be justified if you are looking to level up your security game.

[Goals]

Learn something new, get to know other g33ks, and, the most important thing, have fun.

[Agenda]

- "Detection Engineering in the AI Era" (PT/EN) by Gustavo Silva (@gsilvapt)

- "A Red Team Tale" (PT/EN) by Ricardo Almeida (@vibrio)

[Challenge]

TBA