I have created TTPs and two tools to assist in manipulating generative AI which bypass all the ethical boundaries of ChatGPT. I have a heads-up display ratings system you can add into ChatGPT to understand how it thinks. This talk will include a live demo.

Reflection is a technique used in programming to inspect the running code at runtime. This allows for all sorts of weirdness, from simply reading private variables to modifying them directly and calling private methods. This talk goes over what reflection is, roughly how it works, and how it can be used to work around those pesky “private” access modifiers.

This talk covers the methodology used for hunting previously unknown security risks and how to go on an adventure to read between the lines and uncover the juicy secrets the documentation won’t directly tell you. This talk will also help show a way to estimate if a research project will take 50 hours or 50 years as well as strategies on how to effectively learn a new technology and peel back the layers of complexity until you can find out what is really going on under the hood. There will also be examples and discussion from real world case studies. Audience members should be ready to participate and are welcome to share their own stories and thoughts (assuming they are legally allowed).

Any organization with sensitive data can be the target of a cyberattack, regardless of size or industry sector. As more and more enterprises move to the cloud, the threat landscape is evolving at an accelerated rate in which adversaries deploy advanced tactics to reach their end goal. Incident response is critical in securing your data and preventing an attack from wreaking havoc on your organization.

After detecting an event in the detection phase of an incident response and analyzing it in the analysis phase — I will present a solution that you can use to automate the containment of the four supported AWS services: IAM User, IAM Roles, Lambda Functions, and EC2 instances.