When:

March 31 – April 1, 2025

Where:

Convene
1201 Wilson Blvd
Arlington, Virginia

SO-CON 2025 is a premier cybersecurity summit that offers talks, trainings, and networking events focused on identity-based security and Attack Paths. Join NetSPI VP of Research Scott Sutherland at his talk to learn about SMB shares in Active Directory environments.

Hunting SMB Shares with Data, Graphs, Charts, and LLMs

Location: Track 1 (Arlington Forum – 30th Floor)
Time: 9:30am – 10:20am

Scott Sutherland

Scott Sutherland
VP, Research

Every hacker has a story about abusing SMB shares, but it’s an attack surface that cybersecurity teams still struggle to understand, manage, and defend. In this presentation, we’ll cover simple but effective data analysis techniques to identify, understand, attack, and remediate SMB shares in Active Directory environments. The session will include demos showcasing how these techniques can be applied using PowerShell, Neo4j, Cytoscape, and PowerHuntShares.