PowerShell Empire is a command and control suite that leverages some of the best toolsets from the offensive PowerShell community. As corporate environments are maturing, attackers must adapt. Empire, released in August 2015, should be a tool every information security professional is familiar with. This presentation will give a broad overview of the tool, a walkthrough of setting it up, highlights of useful features and modules (including demos), and lessons learned from using it in the field.
John Hendley is an Experienced Associate within PwC's Cybersecurity & Privacy Solutions practice in the Greater Chicago area. He specializes in full-scope physical and technical testing to evaluate an organization’s comprehensive security strategy from a malicious actor’s perspective. John has executed assessments or remediation projects for Fortune 500 companies in the insurance, retail and consumer, manufacturing, and education sectors. Prior to private sector work John was a Flight Operations Officer in the US Navy.