OWASP Austin Chapter Monthly Meeting - February 2025

We are meeting at NI! The chapter would like for folks to attend personally if possible! Please do not pull an in-person ticket if you are only attending online, we order food for every in-person ticket the Friday before the meeting and we do not want to waste food by over ordering and wasting donated money.

If you would like to register for online access, please see the Meetup

30 minutes of meet-and-greet and OWASP/Chapter information, then ..

When the Tool is the Weapon -- Abusing (and defending) native M365 applications

When you think about Business Email Compromise, you think about the mailbox, right? Malicious inbox rules, spoofed domains hijacking email threads, and phishing campaigns blasted to a user’s contact list are hallmarks of this type of attack. However, other applications within the M365 ecosystem are often leveraged by Threat Actors while they are in a compromised tenant.

Teams, SharePoint, E-Discovery, and OneNote can and have been abused by threat actors during a business email compromise. Initial access, exfil, and leapfrogging to new victims can happen in a way that will not throw any alerts. What are the threat actors doing with these apps, how can we detect it, and how can we stop it?

Alexis Watters

Alexis Watters is the technical team lead and a senior Email Forensic Investigator specializing in business email compromise (BEC) investigations. With two years of experience in this critical field, she has plays a vital role in handling a high volume of cases each year, primarily serving small and medium-sized business (SMB) clients.

Passionate about enhancing cybersecurity awareness and practices, Alexis is committed to helping businesses safeguard their digital communications.

Info: Lunch provided by LASCON Drinks and Desert provided by NI

Host or Publisher OWASP Austin Chapter