Crikeycon 2018: Mark 'Pipes' Piper on the Power of CT Logs 🕵️‍♂️

This talk is the result of a small personal side project for better understanding CT logs and how they may be used. It resulted in crunching some decent sized data sets (numerous terabytes of compressed data) to extract certificate data relevant for work in NZ & AU, contemplating this datasets use and relevance for both blue and red teams.

We will examine a series of basic questions such as; What are CT logs? What is stored in the logs? How can we access and query these logs? How is any of this useful for attackers and defenders alike?