Solarwinds Orion was perhaps the most devastating attack in recent memory. A highly skilled crew of hackers, having compromised a widely-used piece of networking software, gained deep access into the US government for a period of fourteen months. This talk takes you on a deep dive into this attack- from what the attackers did to gain access to the remarkably simple way the whole operation was brought down. We’ll see excellent red and blue tradecraft and gain insight into how real-world networks are attacked and defended.