Held at the National Police Academy from 21 to 23 June, C1b3rwall is the congress on Digital Security and Cyberintelligence.
It was first held in 2019, when it brought together nearly 4,000 attendees. This second edition was organised at the National Police Academy in June 2022.
During the congress, three engineers from the Information Security Office of Isdefe’s Technology Modernisation and Digital Transformation Department shared their experiences and knowledge in the field of cybersecurity, spearheading one talk and two technical workshops.
The talk was led by Hugo Fuentes, an engineer in Isdefe’s Cyberdefence Department, in which he discussed how to smoothly and efficiently implement Blue Team and Red Team exercises, which are an essential component in training and preparing the security teams of organisations to face increasingly sophisticated threats. These threats can originate with various actors, ranging from lone-wolf hackers to mafias and state-sponsored groups, and may be intended to destabilise a country’s essential services.
In addition to discussing his own experience as a participant in international exercises, Hugo Fuentes also discussed methodologies, frameworks, organisational structures, open-source tools and even international initiatives, such as in the banking sector and the Red Teams coordinated national by the Bank of Spain, as well as those carried out in our more traditional sector, namely Defence.
Alejandro Granja, an engineer in Isdefe’s Cyberdefence Department, held a specialised workshop on Return Oriented Programming (ROP), which is widely used to develop exploits intended to evade and trick the security controls and measures implemented in organisations, and ultimately take control of PCs.
The second workshop was led by Alejandro Guzmán, an engineer in the ICT Security Governance Department, and involved post-exploitation techniques for Windows systems. In it, he explained how to access a network, achieve persistence and move between networks once the first network component is breached.
Both workshops featured a hands-on laboratory in which the techniques discussed were presented to the attendees.
Finally, Isdefe collected the certificate of attendance delivered by the Deputy Director of Operations of the CNP José Ángel González Jiménez, the Deputy Director General of Human Resources and Training of the CNP, Agustín Alonso-Carriazo López, the Head of the Training and Improvement Division of the CNP, Cirilo Durán Reguero and the Director of the National Police School José Luís Tejedor, on behalf of Isdefe, collected the diploma from Jesús Efrén Yaniz Igal, assistant to the director of Business Development, and María Jesús Olmedo, head of the IR area.