1 of 33

Social Engineering for the Blue Team

Timothy De Block

Title Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

2 of 33

Social skills to make you a more effective security person

Timothy De Block

Title Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

3 of 33

Why this talk?

3-Column Data

3

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

4 of 33

My role

Section Divider

4

4

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

5 of 33

Blank

5

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

6 of 33

Blue Team Social Engineering: Behavioral

3-Column Data

6

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

7 of 33

Get to know people

Source: https://xkcd.com/1976/

7

Chart Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

8 of 33

Find a connection

Title and Content

8

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

9 of 33

Vulnerability

9

Chart Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

10 of 33

Give something

Title and Content

10

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

11 of 33

Blue Team Social Engineering: Non-verbal communication

3-Column Data

11

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

12 of 33

How you present yourself is important

Title and Content

12

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

13 of 33

Pay attention to body language

SOURCE: https://xkcd.com/1089/

13

Chart Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

14 of 33

Don’t be this guy when talking to people.

Title, Content, Photo

14

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

15 of 33

Touch�

15

Chart Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

16 of 33

Blue Team Social Engineering: Communication

3-Column Data

16

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

17 of 33

Blank

17

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

18 of 33

Ask questions

18

Chart Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

19 of 33

Words that make an impact

BOOM!

19

Chart Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

20 of 33

B

L

U

F

Blank with�color

20

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

21 of 33

Blank

21

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

22 of 33

Bottom

Line

Up

Front

Blank with�color

22

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

23 of 33

Good email with BLUF

Hey Steve!

How do you define access and permissions for your application?

We’re trying to build out a similar process and want to see how you’re doing handling access.

Thanks,

Wade

Wade Watts, ASC, RPO

Program Manager, Access Control

23

Chart Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

24 of 33

Good email with meme

--------------------------------------------------------------------------------------------------------------------------

From: Marketing manager

To: Timothy De Block

Here are the slides. Thanks for sharing your mad meme skills

24

Chart Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

25 of 33

Good email with meme

--------------------------------------------------------------------------------------------------------------------------

From: Marketing manager

To: Timothy De Block

Here are the slides. Thanks for sharing your mad meme skills

25

Chart Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

26 of 33

Avoid electronic communication

SOURCE: https://xkcd.com/1984/

Title and Content

26

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

27 of 33

Resources

Section Divider

27

27

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

28 of 33

https://github.com/timothydeblock/SEBT

Blank

28

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

29 of 33

Books

29

Chart Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

30 of 33

Podcasts

30

Chart Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

31 of 33

Final thoughts (or things I forgot)

3-Column Data

31

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

32 of 33

Contact and shameless plug

32

Chart Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY

33 of 33

Closing Logo Slide

© 2018 Premise Health. All material contained in this presentation is extremely confidential and is not for distribution.

Title: Arial 32

Body: Arial 24

Line Style 3 points

0,98,155

0, 168, 213

253, 73, 22

255,183, 0

74, 74, 74

133, 133, 133

42, 166, 121

216, 40, 126

112, 0, 171

PRIMARY

SECONDARY