i Approved for Public Release; Distribution Unlimited. 14-0391ii Executive Summary The Department of Defense (DoD) needs an acquisition framework for information technology (IT) that ............................................................................................. 48 14 Deployment/Sustainment .......................................................................... sprints of capability. Product Owner Manages the requirements, tradeoffs, and collaboration between the14 acquisition and user communities. Scrum Master Facilitates the developers as they execute their

Windows 系统漏洞 本地提权 [成功的前提是, 保证事先已做好各种针对性免杀] BypassUAC [ win7 / 8 / 8.1 / 10 ] MS14-058[KB3000061] [重点] MS14-068[KB3011780] [重点] ms15-051[KB3045171] [重点] MS15-077[KB3077657] 各类JAVA中间件已知Nday漏洞, 常规Web漏洞... ],在内 ⽹循环抓各类密码,直⾄ 抓到域管密码 抓到域管令牌 DNSAdmin 组成员滥⽤ [ 加载执⾏恶意dll ] LAPS MS14-068 [ 如今实际中已很少遇到了 ] LLMNR/NBNS欺骗 + SMB relay [ 真实在实战中其实⽤的并不多 ] 域内后渗透敏感信息搜集分析 获取所有DNS记录 导出当前域的完整LDAP数据库 0x13 各类常⽤ C2 / 渗透 框架 CobaltStrike [⼆次开发] payload(beacon) 逆向/改进重写 Metasploit [⼆次开发] ...... 0x14 各类常⽤ Webshell 管理⼯具 菜⼑ caidao20160622 冰蟹 Behinder_v2.0.1 蚁剑 AntSword ...... 0x15 免杀 及

detection & recovery iv. Ensure features operate as intended and achieve organizational goals 2. Ch. 14 – Create Telemetry to Enable Seeing and Solving Problems a. Fact – Things will go wrong in Operations