Program Sikkerhetsfestivalen 2026

Offensive Security

TeamFiltration GOes Brrr

Tirsdag – 1 · Frimurerlosjen, rom 2

EnglishDeep-dive 40 min

Foredragsholder

Melvin Langvik

Melvin Langvik

Senior Security Consultant at TrustedSec

Melvin Langvik is an accomplished professional with a diverse background in technology. He started his career as a developer and integration consultant, where he gained practical experience in developing and distributing critical backend infrastructure for an international customer base.

Melvin's passion for cybersecurity later led him to transition into offensive security. Today, he works for TrustedSec, an internationally recognized security company. Melvin is a part of TrustedSec's targeted operations team, tasked with performing targeted cyber attacks against some of the most mature and often largest companies in the world.

Om sesjonen

TeamFiltration exposed how Microsoft 365 could be abused at scale.

But scale has limits. especially when performance, memory usage, and network fingerprinting become bottlenecks. This talk introduces GoFiltration, a complete re-architecture of TeamFiltration written in Go, designed for dramatically improved speed, lower footprint, and operational scalability. We’ll explore a previously undocumented Microsoft 365 enumeration technique, full JA4 TLS fingerprint spoofing across all outbound requests, and expanded exfiltration paths, including Microsoft Copilot data access.

Samtidig i programmet

  1. Testing API Business Logic With AI Agents: What We Got Wrong First 1 · Frimurerlosjen, rom 1
  2. Internet voting in Estonia 10 · HeartBox ,Teatersalen
  3. A deeper dive in the Mjøsa uh ESA lake 10 · HeartBox, Byscenen
  4. Fra kontraktsinngåelse til exit – hvordan tilrettelegge for en gjennomførbar exit-strategi 11- Breiseth, Storlon
  5. Safety is No Longer Enough: Why Modern OT Risk Assessment Needs CyLOPA to Survive 2026 2 · Home hotel Hammer, moen nede
  6. Når risikoen er fysisk – svaret er digitalt: Navs nye verktøy for tryggere møter 2 · Home hotel Hammer, moen oppe
  7. "Du ser det ikke før du tror det" 3 · Hvelvet, Gullsalen
  8. Hvordan lykkes med tredjeparts risikostyring (TPRM)? 4 · Kommunestyresalen, Lillehammer rådhus
  9. BankID: En falsk trygghet? 5 · Kulturhuset Banken, Expedisjon
  10. Suverenitet uten digital selvskading 5 · Kulturhuset Banken, Festsalen
  11. Endringsevne i skyen: fra risiko til robusthet 5 · Kulturhuset Banken, Holbøsalen
  12. Analyzing Ransomware Exfiltration Infrastructure 5 · Kulturhuset Banken, Kafeen
  13. Å bygge sikkerhet fra dag en: Styringssystem og sikkerhetsorganisasjon i et nytt direktorat 6 · Lillehammer kino, sal 2
  14. Å styre det usynlige: psykososial risiko i sikkerhetsarbeidet 6 · Lillehammer kino, sal 4
  15. Når angrepet er ekte nok: Lærdom fra TIBER‑NO 9 · Victoria Scandic, sal 1+2
  16. Hvorfor deteksjonene dine suger og hva du kan gjøre med det 9 · Victoria Scandic, sal 3