50 Minute WatchDevon Ackerman | Global Services Leader, DFIR, LevelBluePaul Asadoorian | Principal Security Researcher, Eclypsium
With 300+ incident response experts responding to more than 1,500 engagements each year, LevelBlue sees how modern attackers evade detection by abusing trusted tools, processes, and human behavior.
Join Devon Ackerman, Global Services Leader of DFIR and former FBI Supervisory Special Agent, as he shares three real-world cases: Microsoft Graph API abuse for stealth data exfiltration, SEO poisoning that creates accidental insider threats, and help desk social engineering tied to MFA reset.
We discuss how each one could have been detected and the steps you can take to prevent similar attacks.
You’ll learn:
How attackers exploit trusted tools and everyday business processes to evade detection
Lessons from three real incident-response engagements and the indicators defenders may miss
Practical steps to close visibility gaps and strengthen detection against trust-based attacks
