Security BSides Courses

Adrian Crenshaw

BSides Cleveland 102 Blue Teamin on a Budget of Zero Kyle Bubp

Syllabus: Introduction Who am I Security Budget Vendors The Foundation NIST Cybersecurity Framework Documentation Network Mapping OS Query Open DLP Whats on your network CIS Benchmarks Configuration Management Vulnerability Scanning Web Application Scann…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Adrian Crenshaw

Bsides Detroit 2017 202 Windows Event Logs Zero to Hero Nate Guagenti Adam Swan

Syllabus: Windows Event Logs? Really? #1 Most Important Prereq Windows Event Forwarding Description of our Cuckoo Malware Lab Alerting vs. Exploring Continued... (Deep Panda Sample) Task Scheduling (4698 OR 106) Bad Logins (4776) Event Tracing for Window…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Adrian Crenshaw

BSides Nashville 2017 Red03 Weaponizing Splunk Using Blue Team Tools for Evil Ryan Hays

Syllabus: Intro The Story Overview What is Splunk Splunk Syslog Deployment Server Deployment Server Demo Misconfigurations Attack surfaces Reviewing logs User privileges SSH keys Demo Attacking Server Using Metasploit Using Python Windows App PowerShell…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Adrian Crenshaw

BSides Nashville 2017 Red01 Windows Operating System Archaeology Casey Smithand Matt Nelson

Syllabus: Introduction Objectives Overview Component Object Model Component Object Resolution Other Monitors Com Object Registration Free Comm Code Registration Helper Register Function Mimikatz Switch gears Methodology Excavation Tools Militia Tactics P…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Adrian Crenshaw

BSides Cleveland A 04 Early Detection through Deception Jason Nester

Syllabus: Intro What is Deception? All Rainbows and Unicorns? Before You Begin... Gimme Some Examples Foreign Device on Network Compromised Trusted System Messing With the Internet MOAR DECEPTION For Example... Honey Badger Don't Give A... Deceptive Meta…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Adrian Crenshaw

BSides Cleveland A 02 Hack for Show Report for Dough Brian King

Syllabus: Intro They're not paying you to play Tell the Story: 1 - Start from a Good Place Tell the Story: Share Your Judgements Tell the Story: Remember Your Audiences Two Audiences, One Scenario A Story Well-Told NCCGroup: Keybase ProCheckUp: Anonymize…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Adrian Crenshaw

BSides Indy04 OSINT For The Win Tools Techniques to Maximize Effectiveness of Your Social Engineerin

Syllabus: Intro About Me Agenda What is Social Engineering Artist Deception Examples of Social Engineering The 6 Principles of Persuasion The Keys to the Kingdom Open Source Intelligence Ocean Pioneers Where can you get it Example Timing How they mesh Fa…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Adrian Crenshaw

BSides Columbus08 Planning and Executing a Red Team Engagement Timothy Wright

Syllabus: Introduction Talk Outline Wargames Wargame Examples - CTF Engagement Definition Terminology Review Red Teaming - Defined What is a Red Team Exercise? Security Maturity Models Red Team - 3 Target Areas Wargaming Computer Security New Ideas for S…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Security BSides San Francisco

BSidesSF 2017 - Security through Visibility: Organizational Communication Strategies (Katie Ledoux)

Syllabus: Intro Visibility Hanging Out Online Planning Checklist Consistent Prompt Blame Free

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Security BSides San Francisco

BSidesSF 2017 - Building an Effective Intrusion Detection Program DNA Lounge (Jason Craig)

Syllabus: Intro Assumptions Social stuff: Be nice. Tool talk: Logging Re: Logging Log everything Tool talk: NSM 3. Tool talk: Macs 3. Tool talk: Windows Examples: Cloud logging. Google Logins. 4. Examples: Cloud logging. Dropbox logins. Example query Dro…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Security BSides San Francisco

BSidesSF 2017 - Make Alerts Great Again (Daniel Popescu)

Syllabus: Introduction Microservices Security Pipeline Common Pitfalls No Standards Yelps Standards Lack of Visibility Actionability Email Alerts Email Events Solutions SLA Actionable alerting service Selfservice alerts Selfservice alert example Assignin…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Security BSides San Francisco

BSidesSF 2017 - The Cyber Insurance Emperor Has No Clothes (Russell C Thomas)

Syllabus: Intro First Preliminary Second Preliminary Insurances Incentives Carrots Sticks Positive Incentives Malcolm Tucker The Wrong People Magic Formulas Show of Hands Cycle Time Between Stimulus Higher Cybersecurity Risk Retention Risk Models Network…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Security BSides San Francisco

BSidesSF 2017 - The Underground Economy of Apple ID (Claud Xiao)

Syllabus: Introduction Why Apple ID Leakage Phone Call URL Curator Apple Store Instagram and WhatsApp Google Password reuse Email system Brute Force Prevent Brute Force The Underground Economy How to make porridge Spain Canada Special email Location Pric…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Security BSides San Francisco

BSidesSF 2017 - BeyondCorp: Beyond “fortress” security (Neal Mueller & Jeff Peck)

Syllabus: Intro GCP gives developers the power to build with Google's tools and infrastructure Four issues are wrecking the castle approach Google's six year Beyond Corp mission (2011-2017) Similar visions of the future Evolution: Infra leaves the buildi…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Security BSides San Francisco

BSidesSF 2017 - Internet dataset combinations for #ThreatHunting .. (Arian Evans & Steve Ginty)

Syllabus: Introduction Traditional data sets Modern data sets Operationalizing data Examples Demo Comparison

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course