Professional Services Proposal - Criminal Justice Information Security Compliance Gap Assessment

Home Browse Search

Proposal to Provide CJIS Gap Assessment City of South Bend Industry Presentation and Publications A sample of Crowe's presentations and contributions to the Information Security community include: Blackhat - US 2017: During Blackhat 2017 Piotr Marszalik and Michael Wrzesniak, at Crowe, spoke about exploiting physical access gained during a penetration assessment to access to quickly and automatically extract hashes and plant backdoors on Windows systems. The creation of tool called "SmuggleBus" Iblackhed was the outcome of their research and is used by penetration testers today. Blackhat - US 2015: At the prestigious Blackhat Security Conference, Cybersecurity Consultants Mike McAtee and Lucas Morris unveiled "Cracklord", a new distributed �f password cracking system. This tool was built as a management platform '44'?, that load balances CPU/GPU resources from multiple hardware systems into a single queuing system DerbyCon 7: Crowe continues its security community contributions at Derbycon 7, where Jim Shaver and Mitch Hennigan spoke about the underlying architecture and security of Kerberos in an Active Directory environment. This research led to the discovery of optional weak encryption being available to be used by Kerberos. Additionally, several undocumented functions of Kerberos in Active Directory were discovered. DerbyCon 4: At DerbyCon 4 Ryan Reynolds spoke on the topic of advanced traffic manipulation techniques such as NetBIOS-NS/LLMNR, ARP -Spoofing, and IPv6 Stack precedence. These techniques are used by hackers to manipulate network traffic with the goal of gathering unauthorized access to sensitive data traversing the network during Internal Penetration Assessments. Also at DerbyCon 4, Lucas Morris showcased "RavenHlD". RavenHlD is a combination Arduino board/IOS application that ��j �r� can be used to collect badge information for cloning. This method is used to advance Crowe's social engineering testing for corporate client environments. DEFCON 22 & DEFCON 20: At Deacon 22 as well as Defcon 20; Lucas Morris and Mike McAtee rwk,� � . contributed to the Windows security world with a panel on their tool "Shareenum". It is a tool that can be used to enumerate Windows SMB shares, fingerprint systems, as well as test password re -use. "Shareenum" is made with �- r speed and scalability in mind for bulk system testing. BSides DFW 2013, 2016 and 2017: At BSides DFW; Ryan Reynolds, Chris Wilkinson, Brad Hannah, Mitch Hennigan and John Alves have presented throughout the years on the latest tools and techniques used by consultants and attackers in the Cybersecurity community. Crowe continues to speak at local events on a regular basis on a variety of Information Security topics. C9 2019 Crow: LLP www. Crowe. cony