Tales from the trenches: Cyber brawl with an Advanced Threat Actor

Ahmad is DFIR Lead at Ebryx Pvt Ltd with expertise in digital forensics and studying adversary trade-craft. He has a background of hunting down cyber-criminals, digging into suspected intrusions and conducting cyber threat intelligence operations.For the past couple of years, he has been a part of several cyber-ops with Pakistan’s financial and private sector organizations. Syed Ishaq has been in Cybersec scene for over 8 years, with experience spanning the Defense, Banking and Tech sectors.Having worked in a variety of red/blue roles, he found his new passion in DevSecOps. Currently working to improve detection and response capabilities in the micro-services based environments hosted on AWS/GCP clouds.Previously he's helped unicorn tech companies architect their security infrastructures and led DFIR efforts against some of the large-scaled breaches in the GCC region.When not working, he likes to travel, see new places and meet new people Ahmed & Ishaq talked about forensic assessments of 20 South Asian financial institutions carried out in last 2 years. These assessments (and incident response in some cases) were carried out as a mandatory requirement by the federal governing body for FI following the infamous $6m Bank’s heist. #BSidesIslamabad2020