Maestro Forensics held a security seminar covering everything from vulnerability assessment to incident response and demonstrated attack scenarios and the forensic analysis process.

Maestro Forensic announced on April 30 that it held the 'Integrated Seminar on Vulnerability Assessment, Penetration Testing, and Incident Response' the previous day at the Insec Security Training Center in Doksan-dong, Seoul. Security practitioners from the public, financial, manufacturing, and IT sectors attended the event.

The seminar introduced recent changes in cyber attack types. Cases were shared regarding ransomware, Advanced Persistent Threats (APTs), and fileless attacks, which are difficult to respond to with existing detection systems.

In addition, difficulties in vulnerability management and response were mentioned as the number of assets under management increases due to the proliferation of cloud, IoT, and endpoints. Unmanaged assets, long-term unpatched systems, and the potential for attacks through the supply chain were also presented as major issues.

At the event, an integrated scenario spanning from attack to response was presented in the form of a live demo. In the vulnerability assessment phase, a method for analyzing asset-specific risk based on vulnerability data was introduced, and in the penetration testing session, the exploitation of remote code execution vulnerabilities, internal spread, and privilege escalation processes were demonstrated step-by-step.

In the digital forensics session, the process of reconstructing attack flows through memory-based data collection and analysis was shared. Following this, the incident response session introduced methods for securing data during the initial response phase and preventing internal spread.

Kim Jong-kwang, CEO of Maestro Forensic, stated, “Unmanaged assets and delayed response are being identified as major causes of security breaches,” adding, “A security management system is needed that extends from vulnerability identification to response.”