Awesome, I hope you enjoyed the demos.
But before we go, I want to leave you with some more information about this tool.
You can find more information about macro_pack and its official documentation.
If you check in there,
you'll see that this tool has several other features that can
be interesting for a red team specialist.
Also,
the macro_pack has a professional version which is paid
and has tons of advanced features, such as antivirus bypassing,
sandbox detection, and even some weaponized templates.
So if you're trying to exploit a company that has a
lot of security detection tools,
you should consider getting the pro version so you can avoid being detected.
Also,
if you're interested in learning more techniques on how
to get initial access to a company,
check out some of the other courses here at Pluralsight,
such as Initial Access with WiFi‑Pumpkin and Initial Access with Aircrack‑ng.
In there,
you'll learn some ways of getting your feet into an organization. And also,
if you're wondering what you can do to prevent your company from
being exploited from those kind of attacks,
the best advice I can give you is invest in security awareness trainings,
and this means that your whole company should have a good understanding of
cybersecurity and how to avoid being phished.
And this is valid from the CEO all the way to the
assistants. And related to that is also recommending
performing some phishing simulation campaigns.
So then you can have a feel of how prepared your company
is and also give an opportunity for the people to see how
a phishing email looks like.
And another thing that might help you to avoid such attacks is
having a behavior‑based detection system.
While most antivirus solutions only detect file signatures,
having a system that detects unusual behavior will give you
higher chances of detecting such attacks.
So that's it. That's the end of our macro_pack course.
Thank you for watching, and I will you see you in the next course.