How LUCR-3 (Scattered Spider) Orchestrates Identity-Based Attacks Across Environments

Advanced threat actors are compromising the identity infrastructure of some of the largest organizations in the world with ease. Upon gaining access to the identity provider, they are able to move laterally into Iaas, PaaS, and SaaS environments and steal data – all in the course of 2-3 days.

Join Ian Ahl, SVP of P0 labs and former Head of Advanced Practices at Mandiant, as he shares knowledge stemming from responding to hundreds of breaches in his career. Ian will walk through how advanced threat groups target human and non-human identities for compromise, how they maintain persistence in environments, and provide some tips for detecting suspicious and malicious activity in identity providers, cloud service provides, and SaaS applications. He’ll also provide actionable steps security teams can take to prevent breaches or know about them as quickly as possible.

What Attendees Will Learn:

How advanced threat groups target human and non-human identities for compromise.
Tips for detecting suspicious and malicious activity in identity providers, cloud service provides, and SaaS applications.
Actionable steps security teams can take to prevent breaches or know about them as quickly as possible.

Who Should Attend:

CISO’s
SOC teams
Identity Security teams

The Panelists

Ian Ahl

CTO, Permiso Security

Ian Ahl is a cybersecurity expert that has established himself as an industry export in the field of digital forensics and incident response. With a career spanning over two decades, Ahl has played a pivotal role in safeguarding organizations against sophisticated cyber threats. His expertise extends across strategic threat intelligence, malware analysis, and cybersecurity consulting, where he has led numerous high-profile investigations into cyber breaches affecting multinational corporations and government entities.
As the former head of Mandiant’s Advanced Practice team, Ian Ahl has contributed significantly to advancing cybersecurity practices globally. His insights and methodologies have been instrumental in developing cutting-edge solutions to combat cyber espionage, ransomware attacks, and other complex cyber incidents. Ahl’s dedication to enhancing cybersecurity resilience has earned him recognition among peers and clients alike, solidifying his reputation as a trusted advisor and thought leader in the cybersecurity.

Play Webinar