Breach Assessment - The Curious Case of the Comburglar w/ Troy Wojewoda
E6

Breach Assessment - The Curious Case of the Comburglar w/ Troy Wojewoda

What if an attacker lived inside your network for seven months and your tools never noticed?
 
During a real breach assessment, Black Hills Information Security uncovered a stealthy intrusion using a COM-based persistence technique hidden in native Windows scheduled tasks. There were no obvious indicators of compromise. No suspicious process names. No malicious file hashes.
 
Just a quiet foothold designed to stay invisible.


🛝 Webcast Slides
https://www.blackhillsinfosec.com/wp-content/uploads/2026/03/SLIDES_CuriousCaseOfTheComburglar_BreachAssessment-2026-03-12.pdf

Chapters
  • (00:00) - Intro - Breach Assessment - The Curious Case of the Comburglar - Troy Wojewoda
  • (02:15) - Agenda
  • (03:02) - What Is a Breach Assessment?
  • (10:50) - 5 Pillars of Data Telemetry
  • (16:23) - The Hunt Begins
  • (29:15) - Attack Chain
  • (38:39) - Timeline & Scope
  • (45:21) - Threat Hunting Playbook
  • (51:29) - Key Takeaways
  • (53:52) - Q&A




Chat with your fellow attendees in the BHIS Discord server:
https://discord.gg/bhis
in the #🔴live-chat channel

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

Click here to watch a video of this episode.


Brought to you by:
Black Hills Information Security 

Antisyphon Training

Active Countermeasures

Wild West Hackin Fest

Episode Video

Creators and Guests

Deb Wigley
Host
Deb Wigley
Deb Wigley is the Director of Kindness and Generosity for Black Hills Information Security (BHIS). She joined the team in 2019 after celebrating 20 years of working in customer engagement and satisfaction in the Automotive Industry. She brings her passion for helping and serving people to the work she does at BHIS. The part of her role she enjoys the most is interacting with the community through our webcasts and educational content, our Discord servers, and conferences. She loves being a mom to her four kiddos and in her spare time, she enjoys reading, hiking, frequently entertaining a beach day, and being whisked away on rewilding adventures with her husband of 20+ years as much as possible.
Jason Blanchard
Host
Jason Blanchard
Jason Blanchard has been happily adopted into the hacker community at Black Hills Information Security (BHIS) since 2019, even though he “works in marketing.” He’s had every dream job imaginable: teaching filmmaking, owning the world’s most famous comic book store, and fostering the infosec community efforts for SANS. While some at BHIS call him the “Director of Excitement,” he is formally known as the Excitement Co-Creator. In his day-to-day work of “sucking at capitalism,” Jason enjoys helping others, sharing his knowledge, and giving away lots of free stuff. When he’s not working, Jason spends time with his wife and daughter, hosts a semiweekly job-hunting Twitch stream, and enjoys writing short stories and performing stand-up comedy.
Keith Chew
Guest
Keith Chew
Keith joined the ACM team in 2018 and describes his career at Active Countermeasures as his dream job. His fascination with computing and processes stems from working with his first personal computer in 1982; a TI-99/4A. Keith sees himself as fortunate for the opportunity to apply his passion towards a career that assists in the advance of technology. Beyond computing and electronics, Keith also enjoys anything with an engine, wheels, or wings.
Logan Bender
Guest
Logan Bender
Logan Bender joined Black Hills Information Security (BHIS) as a Business Consultant in September 2021. Previously working as a technology advisor, Logan now advises clients on BHIS’s services and provides recommendations for improving security posture. He is excited to be part of an organization that is so involved in providing quality security content to the community, and he loves the team and helpful culture at BHIS. When he’s not working, Logan can be found in the great outdoors — camping, fishing, hunting, golfing, or snowboarding.
Troy Wojewoda
Guest
Troy Wojewoda
Troy Wojewoda is a Security Consultant at Black Hills Information Security (BHIS). Prior to joining BHIS, Troy has held roles in application and system administration, host and network intrusion detection, wireless security, penetration testing, digital forensics, malware analysis, threat hunting, and incident response. In addition to earning several professional certifications, Troy has a BS in Computer Engineering and Computer Science. Troy enjoys writing custom tools and developing novel techniques for testing the security posture of an organization. Away from work, Troy enjoys spending time with his family, camping/hiking in the mountains, homebrewing, woodworking, and coaching children in STEM programs.