WEBVTT

00:00:01.270 --> 00:00:02.940
Awesome, I hope you enjoyed the demos.

00:00:03.170 --> 00:00:06.450
But before we go, I want to leave you with some more information about this tool.

00:00:07.340 --> 00:00:11.050
You can find more information about macro_pack and its official documentation.

00:00:11.740 --> 00:00:12.660
If you check in there,

00:00:12.780 --> 00:00:15.250
you'll see that this tool has several other features that can

00:00:15.250 --> 00:00:16.950
be interesting for a red team specialist.

00:00:18.140 --> 00:00:18.640
Also,

00:00:18.810 --> 00:00:21.940
the macro_pack has a professional version which is paid

00:00:21.950 --> 00:00:25.620
and has tons of advanced features, such as antivirus bypassing,

00:00:25.820 --> 00:00:28.690
sandbox detection, and even some weaponized templates.

00:00:29.440 --> 00:00:31.710
So if you're trying to exploit a company that has a

00:00:31.710 --> 00:00:33.140
lot of security detection tools,

00:00:33.330 --> 00:00:36.850
you should consider getting the pro version so you can avoid being detected.

00:00:37.940 --> 00:00:38.370
Also,

00:00:38.380 --> 00:00:40.370
if you're interested in learning more techniques on how

00:00:40.370 --> 00:00:42.080
to get initial access to a company,

00:00:42.330 --> 00:00:44.770
check out some of the other courses here at Pluralsight,

00:00:44.950 --> 00:00:49.950
such as Initial Access with WiFi‑Pumpkin and Initial Access with Aircrack‑ng.

00:00:50.640 --> 00:00:51.090
In there,

00:00:51.170 --> 00:00:55.380
you'll learn some ways of getting your feet into an organization. And also,

00:00:55.470 --> 00:00:58.070
if you're wondering what you can do to prevent your company from

00:00:58.070 --> 00:01:00.040
being exploited from those kind of attacks,

00:01:00.350 --> 00:01:03.840
the best advice I can give you is invest in security awareness trainings,

00:01:03.840 --> 00:01:07.680
and this means that your whole company should have a good understanding of

00:01:07.680 --> 00:01:10.350
cybersecurity and how to avoid being phished.

00:01:11.140 --> 00:01:13.540
And this is valid from the CEO all the way to the

00:01:13.540 --> 00:01:17.670
assistants. And related to that is also recommending

00:01:17.730 --> 00:01:19.750
performing some phishing simulation campaigns.

00:01:20.140 --> 00:01:22.770
So then you can have a feel of how prepared your company

00:01:22.780 --> 00:01:26.100
is and also give an opportunity for the people to see how

00:01:26.100 --> 00:01:27.450
a phishing email looks like.

00:01:28.340 --> 00:01:31.470
And another thing that might help you to avoid such attacks is

00:01:31.470 --> 00:01:33.650
having a behavior‑based detection system.

00:01:34.240 --> 00:01:37.640
While most antivirus solutions only detect file signatures,

00:01:37.790 --> 00:01:40.990
having a system that detects unusual behavior will give you

00:01:40.990 --> 00:01:42.850
higher chances of detecting such attacks.

00:01:44.900 --> 00:01:47.450
So that's it. That's the end of our macro_pack course.

00:01:47.890 --> 00:01:50.200
Thank you for watching, and I will you see you in the next course.