Black Hills Information Security, Inc.

Enterprise Attack Initial Access w/ Steve Borosh
2023-03-02 09:00 - 18:00 (America/New_York)
Register: https://www.antisyphontraining.com/enterprise-attack-initial-access-w-steve-borosh/
Enterprises have been working tirelessly to improve their security postures through defense-in-depth approaches. Offensive teams have also been putting in long hours of research into bypassing the latest EDR’s and defensive products that keep them on their toes. Long gone “hopefully” are the days of hurdling an HTA file laced with a download cradle at a mature organization with a “Free iPad” ruse and watching your screen fill with incoming agents.
An offense-in-depth approach may be applied to offensive practitioners looking for success against organizations well-versed in defending a large enterprise. Today’s organizations have assets in multiple geo regions, networks, cloud services, border hosts, and many of them are tied to the internal network in some way.
This course aims to help offensive practitioners successfully exercise their client environments from a multi-faceted approach using the latest TTPs blended with esoteric practices to gain the upper hand on your assessments.

Breaching the Cloud w/ Beau Bullock
2023-03-02 09:00 - 18:00
Register: https://www.antisyphontraining.com/breaching-the-cloud-w-beau-bullock/
Do you want to level up your cloud penetration testing skills? The attack surface of many organizations has changed to include third-party hosted services such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform. In this training course, hacking concepts will be introduced for each of those services.
This training walks through a complete penetration testing methodology of cloud-based infrastructure. Starting with no information other than the company name you will learn to discover what cloud-specific assets your target is using. Following the enumeration of cloud services, you will learn how to discover misconfigurations that commonly expose sensitive data as well as a thorough understanding of how to get an initial foothold into a cloud-based organization.
Post-compromise techniques of cloud infrastructure differ from the techniques used in typical on-premise environments. You will learn situational awareness techniques that ultimately will impact how you will escalate privileges in the cloud. With most cloud-based authentication being publicly exposed this presents new and interesting persistence techniques that are non-existent to on-premise environments. With productivity tools like G-Suite and Microsoft 365 many organizations are making their email and other data that is normally protected by a firewall available to remote employees. You will learn how to discover, pillage, and exfiltrate data from these services.
Many organizations are fully leveraging cloud services for their production infrastructure. This can include web servers, SQL databases, storage, virtual machines, and more. In this training, you will learn how to assess and compromise these resources. Some cloud deployments are directly connected to on-premise environments via VPN. This presents an opportunity to pivot access from cloud to on-prem or vice-versa.
Finally, in this training, we will not only be attacking cloud infrastructure but also leveraging it for red team operations. You will learn techniques that leverage cloud services for techniques such as phishing, domain fronting, and command & control.
Tools and techniques used on real-world penetration tests against cloud assets will be shared including hands-on demonstrations. At the end of this training, you will have new skills for assessing cloud-based infrastructure!

Advanced Network Threat Hunting w/ Chris Brenton
2023-03-02 09:00 - 18:00
Register: https://www.antisyphontraining.com/advanced-network-threat-hunting-w-chris-brenton/
So far we’ve had over 21,000 students attend our one-day network threat hunting course. Many have asked that we provide an extended class with more hands-on lab time. That is exactly what we have rolled into this 16-hour course!
We will spend most of this class analyzing pcap files for Command and Control (C2) communications in order to identify malware back channels. It is assumed that the student will already understand the basics of network threat hunting, so we can immediately jump into applying that knowledge. The goal will be to create a threat hunting runbook that you can use within your own organization in order to identify systems that have been compromised.

How to be Irresistible to Hiring Managers w/ Kip Boyle
2023-03-02 09:00 - 18:00
Register: https://www.antisyphontraining.com/how-to-be-irresistible-to-hiring-managers/
Are you spending hours a day trawling through the online job sites and spending even more time filling out lengthy application forms with nothing to show for it? Something’s not working, but what could it be? Kip Boyle, a veteran hiring manager who has personally interviewed hundreds of job applicants as well as hired dozens of successful cybersecurity candidates, will teach you to think like a hiring manager and bend the hiring process to your advantage. After you taking this class, you’ll understand how to ace your resume, crush your interviews, and negotiate your ideal salary.

Linux Command-Line Dojo w/ Hal Pomeranz
2023-03-02 09:00 - 18:00
Register: https://www.antisyphontraining.com/linux-command-line-dojo-w-hal-pomeranz/
The DevOps folks are pushing Linux, your red-team friends are doing serious damage with Linux-based tools, and the Linux users on your Incident Response team are doing mysteriously powerful things. You’re ready to see if some of the Linux magic can rub off on you, but you don’t know where to start.
This 16-hour course is a quick jumpstart on the Linux command-line. Start from the basics and work all the way up to command-line programming. Short learning modules and lots of practical hands-on activities will put you on the road to Linux command-line mastery. And electronic copies of everything are yours to take home, so you can continue the learning even after class is over.

HackerOps w/ Ralph May
2023-03-02 09:00 - 18:00
To conduct an advanced attack, you need more than just a collection of simple scripts. In addition to talent, you need a large amount of managed and unmanaged code. The more code and resources that are required to conduct an engagement, the more time we need. Time is something we don’t have a lot of on an engagement.
Today, to be an advanced and effective attacker, you need to move fast, and that speed requires a move to a DevOps style of managing infrastructure and code. With cloud resources and APIs to manage these resources, the days of manual setup are long behind us.
Where do we get started? And how does it all work?
In this training, we learn the fundamentals of DevOps and how we can code our TTPs. Coding TTPs allows for new tactics and improved OPSEC to be shared without the cost of knowledge transfer and manual setup. This class will introduce students to Terraform Ansible and Docker with the goal of writing TTPs to use and share.
In this class, we will learn the fundamentals of Terraform Ansible and Docker with an emphasis on how we can use these tools to code our TTPs. After we have the fundamentals, we will start coding and get comfortable with YAML and will review how to create resources and customize TTPs. Lastly, we will work through multiple labs and examples that you can take with you for your next engagement.
https://www.antisyphontraining.com/hackerops-w-ralph-may/

AASLR: Antisyphon Address Space Layout Randomization
2023-03-01 16:30 - 17:30, 2023-02-28 16:30 - 17:30, 2023-02-22 16:30 - 17:30, 2023-02-21 16:30 - 17:30, 2023-02-15 16:30 - 17:30, 2023-02-14 16:30 - 17:30, 2023-02-08 16:30 - 17:30, 2023-02-07 16:30 - 17:30 and 2 more dates
AASLR will have infosec professionals sharing their knowledge on tools, techniques, and procedures and then answering a lot of your questions on everything you can think to ask.
Streamed live every Tuesday and Wednesday @ 4:30 pm.
https://www.twitch.tv/antisyphon

Active Defense & Cyber Deception w/ John Strand
2023-03-01 12:00 - 16:00, 2023-02-28 12:00 - 16:00, 2023-02-27 11:00 - 16:00
Register: https://www.antisyphontraining.com/active-defense-cyber-deception-w-john-strand/
Active Defenses have been capturing a large amount of attention in the media lately. There are those who thirst for vengeance and want to directly attack the attackers. There are those who believe that any sort of active response directed at an attacker is wrong. We believe the answer is somewhere in between.
In this class, you will learn how to force an attacker to take more moves to attack your network. These moves may increase your ability to detect them. You will learn how to gain better attribution as to who is attacking you and why. You will also find out how to get access to a bad guy’s system. And most importantly, you will find out how to do the above legally.
The current threat landscape is shifting. Traditional defenses are failing us. We need to develop new strategies to defend ourselves. Even more importantly, we need to better understand who is attacking us and why. Some of the things we talk about you may implement immediately, others may take you a while to implement. Either way, consider what we discuss as a collection of tools at your disposal when you need them to annoy attackers, attribute who is attacking you, and finally, attack the attackers.
This class is based on the DARPA funded Active Defense Harbinger Distribution live Linux environment. This VM is built from the ground up for defenders to quickly implement Active Defenses in their environments. This class is also very heavy with hands-on labs. We will not just talk about Active Defenses. We will be doing hands-on labs and through them in a way that can be quickly and easily implemented in your environment.

The Most Offensive Con That Ever Offensived Summit
2023-03-01 11:00 - 17:00
https://zoom.us/j/95879143124

BHIS | Talkin' Bout Infosec News
2023-02-27 16:30 - 17:30, 2023-02-20 16:30 - 17:30, 2023-02-13 16:30 - 17:30, 2023-02-06 16:30 - 17:30, 2023-01-30 16:30 - 17:30
Join the BHIS team as we talk about current infosec news.
Streamed live every Monday @ 4:30 pm.
https://www.youtube.com/BlackHillsInformationSecurity

Right of Boom
2023-02-22 08:00 - 2023-02-24 17:00

Right of Boom (MSP)
2023-02-21 08:00 - 2023-02-24 17:00

Texas Bankers Association: Cyber Tech Conference
2023-02-15 08:00 - 2023-02-17 17:00
https://www.texasbankers.com/

S4x23 (ICS)
2023-02-13 08:00 - 2023-02-16 17:00

CactusCon
2023-01-27 08:00 - 2023-01-28 17:00
