Idan Ron

Idan Ron is a Senior Red Team Consultant in Mandiant’s U.K. office. As part of the Red Team team (also known as APT66), Idan specialises in adversary simulation, red and purple team assessments, and cloud assessments. Idan delivers proactive red team assessments to Mandiant’s clients across all industries.


Your friendly neighbourhood penguin: Using Linux and WSL to stay under the radar
Idan Ron, Max De Lacey

Special offer, Two for one! This talk will be composed of two research topics that Mandiant conducted recently regarding evasion of EDR's. In the first talk we will go over how to bypass Linux EDRs and lessons learned during. In the second part we will discuss how Windows EDR could be bypassed using WSL.

Track 3