Uploaded June 2026 | Updated September 2026, 2 weeks ago
RATs & Ladders: Climbing from Access to Control
Presenters: Nevan Beal & Jason Rathbun
Getting initial access is only step one. The real challenge is turning that foothold into full control.
In RATs & Ladders: Climbing from Access to Control, Nevan Beal and Jason Rathbun break down how attackers actually move after gaining access. Instead of focusing on malware names or chasing indicators, this talk looks at the patterns behind how attacks unfold.
You will see common staging paths like click to control chains, LOLBin and side load pivots, and the use of cloud hosted infrastructure to move through environments. These are not random techniques. They are driven by real constraints.
Attackers are constantly adapting to EDR, MFA, and network controls. This session focuses on the why behind those decisions, helping you understand how attackers think rather than just what they use.
By shifting away from alert chasing and toward recognizing patterns, security teams can better predict attacker behavior and stop attacks earlier in the chain.
If you want a more realistic view of how access turns into control and how to defend against it, this talk delivers a practical and modern perspective.
#cybersecurity #infosec #redteam #blueteam #edr #incidentresponse #securityoperations #cyberdefense
///Black Hills Infosec Socials
Twitter: twitter.com/BHinfoSecurity
Mastodon: https://infosec.exchange/@blackhillsinfosec
LinkedIn: linkedin.com/company/antisyphon-training
Discord: discord.gg/ffzdt3WUDe
///Black Hills Infosec Shirts & Hoodies
spearphish-general-store.myshopify.com/collections/bhis-shirt-collections
///Black Hills Infosec Services
Active SOC: blackhillsinfosec.com/services/active-soc
Penetration Testing: blackhillsinfosec.com/services
Incident Response: blackhillsinfosec.com/services/incident-response
///Backdoors & Breaches - Incident Response Card Game
Backdoors & Breaches: backdoorsandbreaches.com
Play B&B Online: play.backdoorsandbreaches.com
///Antisyphon Training
Pay What You Can: antisyphontraining.com/pay-what-you-can
Live Training: antisyphontraining.com/course-catalog
On Demand Training: antisyphontraining.com/on-demand-course-catalog
Antisyphon Discord: discord.gg/antisyphon
Antisyphon Mastodon: https://infosec.exchange/@Antisy_Training
///Educational Infosec Content
Black Hills Infosec Blogs: blackhillsinfosec.com/blog
Wild West Hackin' Fest YouTube: youtube.com/wildwesthackinfest
Antisyphon Training YouTube: youtube.com/antisyphontraining
Active Countermeasures YouTube: youtube.com/activecountermeasures
Threat Hunter Community Discord: discord.gg/threathunter
Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
RATs & Ladders: Climbing from Access to Control
Presenters: Nevan Beal & Jason Rathbun
Getting initial access is only step one. The real challenge is turning that foothold into full control.
In RATs & Ladders: Climbing from Access to Control, Nevan Beal and Jason Rathbun break down how attackers actually move after gaining access. Instead of focusing on malware names or chasing indicators, this talk looks at the patterns behind how attacks unfold.
You will see common staging paths like click to control chains, LOLBin and side load pivots, and the use of cloud hosted infrastructure to move through environments. These are not random techniques. They are driven by real constraints.
Attackers are constantly adapting to EDR, MFA, and network controls. This session focuses on the why behind those decisions, helping you understand how attackers think rather than just what they use.
By shifting away from alert chasing and toward recognizing patterns, security teams can better predict attacker behavior and stop attacks earlier in the chain.
If you want a more realistic view of how access turns into control and how to defend against it, this talk delivers a practical and modern perspective.
#cybersecurity #infosec #redteam #blueteam #edr #incidentresponse #securityoperations #cyberdefense
///Black Hills Infosec Socials
Twitter: twitter.com/BHinfoSecurity
Mastodon: https://infosec.exchange/@blackhillsinfosec
LinkedIn: linkedin.com/company/antisyphon-training
Discord: discord.gg/ffzdt3WUDe
///Black Hills Infosec Shirts & Hoodies
spearphish-general-store.myshopify.com/collections/bhis-shirt-collections
///Black Hills Infosec Services
Active SOC: blackhillsinfosec.com/services/active-soc
Penetration Testing: blackhillsinfosec.com/services
Incident Response: blackhillsinfosec.com/services/incident-response
///Backdoors & Breaches - Incident Response Card Game
Backdoors & Breaches: backdoorsandbreaches.com
Play B&B Online: play.backdoorsandbreaches.com
///Antisyphon Training
Pay What You Can: antisyphontraining.com/pay-what-you-can
Live Training: antisyphontraining.com/course-catalog
On Demand Training: antisyphontraining.com/on-demand-course-catalog
Antisyphon Discord: discord.gg/antisyphon
Antisyphon Mastodon: https://infosec.exchange/@Antisy_Training
///Educational Infosec Content
Black Hills Infosec Blogs: blackhillsinfosec.com/blog
Wild West Hackin' Fest YouTube: youtube.com/wildwesthackinfest
Antisyphon Training YouTube: youtube.com/antisyphontraining
Active Countermeasures YouTube: youtube.com/activecountermeasures
Threat Hunter Community Discord: discord.gg/threathunter
Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
