Drea London Petter

R1Z: From Broker to Busted

Dive into the world of access brokers, where cybercrime and law enforcement collide. This talk explores the investigation and takedown of “r1z,” a prominent figure in underground markets. We trace r1z’s ascent as a key player, specializing in selling exploits and tools designed to compromise corporate defenses. Delve into r1z’s collaborations with exploit developers and see how their services evolved from selling network access to creating and distributing tools that bypass EDR solutions. Witness the strategic maneuvers and meticulous investigations that led to r1z’s downfall, achieved through coordinated efforts among various partners.

Drea has more than two decades of experience in Digital Forensic and Incident Response Services. She started her career in the AirForce Office of Special Investigations at the Defense Computer Forensic Lab (DCFL). Since then Drea has overseen complex investigations and led dynamic teams of responders for consulting firms such as IBM and Stroz Friedberg, as well as global enterprises like VMware and Wyndham. As a recognized industry speaker, veteran, and diversity advocate, Drea is committed to advancing the field and supporting underrepresented groups. In her free time, she enjoys quality moments with her family, engaging in sports, and exploring the many amusement parks in her hometown of Orlando, FL.