## TOPIC: Powershell Empire Security Tool

#### Presenter: Gregory Petty

PowerShell Empire is a post-exploitation framework that allows attackers to easily and stealthily execute malicious payloads on compromised systems.
This talk will provide an overview of the capabilities of PowerShell Empire and demonstrate how it can be used in various stages of an attack, from initial compromise to lateral movement and persistence within an organization.
The talk will also cover some of the countermeasures that can be taken to defend against PowerShell Empire and other post-exploitation frameworks. By understanding the capabilities and limitations of PowerShell Empire, attendees will be better equipped to recognize and respond to potential attacks that leverage this powerful tool.

(Editors note: Empire is a post-exploitation framework, which its agents supporting various different Operating Systems (OSes). MS-Windows is purely implemented in PowerShell (without `powershell.exe`!), and Linux/macOS is done in Python 3. Empire is often a favourite for Command and Control (C2) activity. There is a partnership w Kali Linux.Empire is the original tool. BC Security also have created their own “Graphical User Interface (GUI)”, Starkiller, to go along side Empire. Starkiller is a Frontend for Powershell Empire. It is an Electron application written in VueJS. )

-----======+++++-----=====+++++------+++++=====-----

• ONLINE MEETINGS ONLY until further notice.
• ONLINE sessions will use a remote video meeting service.
• HOW TO CONNECT instructions will be on [https://www.stlLINUX.org/](https://www.google.com/url?q=https://www.stllinux.org/&sa=D&source=calendar&usd=2&usg=AOvVaw3Y-AOfHPNKVMZJY5EzlB9e) web page and our mailing lists. Note that your browser cache may need to be refreshed each time you check the web page for the instructions.
• We'll open the remote session ~6:00 PM, so join early to test your mic, screen & vid sharing.
• The STLLUG meetings are usually on the 3rd Thursday of each month from 6:30PM to 9:00PM.

Central Standard Time ( CST )
The Saint Louis MO, STL Linux Users Group (StLLUG) meets monthly to talk about Linux. Meetings are free and open to everyone. StlLINUX is a division of SLUUG

At 6:30 PM Central Standard Time ( CST ) we start with introductions, announcements, current events of interest, and a general CALL FOR HELP segment. Then we will go into the presentation of our main topic, sometime around 7:00 PM CST.