Stl Linux Unix Users Group

PowerShell Empire is a post-exploitation framework that allows attackers to easily and stealthily execute malicious payloads on compromised systems.

This talk will provide an overview of the capabilities of PowerShell Empire and demonstrate how it can be used in various stages of an attack, from initial compromise to lateral movement and persistence within an organization.

The talk will also cover some of the countermeasures that can be taken to defend against PowerShell Empire and other post-exploitation frameworks. By understanding the capabilities and limitations of PowerShell Empire, attendees will be better equipped to recognize and respond to potential attacks that leverage this powerful tool.

(Editors note: Empire is a post-exploitation framework, which its agents supporting various different Operating Systems (OSes). MS-Windows is purely implemented in PowerShell (without `powershell.exe`!), and Linux/macOS is done in Python 3. Empire is often a favourite for Command and Control (C2) activity. There is a partnership w Kali Linux.Empire is the original tool. BC Security also have created their own “Graphical User Interface (GUI)”, Starkiller, to go along side Empire. Starkiller is a Frontend for Powershell Empire. It is an Electron application written in VueJS. )