Further down the yellow brick road of social engineering engagements. Learning a lot from seeing how different organizations have improved their controls. Documented what we saw not work well, what we saw work slightly better, and what works best. No organization had all the controls that this presentation describes. Most organizations we tested only had 2-3 of these controls implemented. Alex and I had fun recanting our experiences defeating them all in the end:
🌵