Black Hills Information Security, Inc.

Offensive Development w/ Greg Hatcher & John Stigerwalt
2022-08-03 12:00 - 16:00, 2022-08-02 12:00 - 16:00 (America/New_York)
Dive deep into cutting-edge techniques that bypass or neuter modern endpoint defenses. Learn how these solutions work in order to mitigate their utility and hide deep within code on the endpoint. The days of downloading that binary from GitHub and pointing it at a box are over. Today’s defenses oftentimes call for multiple bypasses within a single piece of code.
This course is designed to take you deep into defensive and offensive tooling – an apex attacker must know the indicators of compromise (iocs) they’re creating and the artifacts they’re leaving behind.
https://www.antisyphontraining.com/offensive-development-w-greg-hatcher-john-stigerwalt/

HackerOps w/ Ralph May
2022-08-03 12:00 - 16:00, 2022-08-02 12:00 - 16:00, 2022-08-01 12:00 - 16:00, 2022-07-31 12:00 - 16:00, 2022-07-30 12:00 - 16:00, 2022-07-29 12:00 - 16:00, 2022-07-28 12:00 - 16:00, 2022-07-27 12:00 - 16:00 and 5 more dates
To conduct an advanced attack, you need more than just a collection of simple scripts. In addition to talent, you need a large amount of managed and unmanaged code. The more code and resources that are required to conduct an engagement, the more time we need. Time is something we don’t have a lot of on an engagement.
Today, to be an advanced and effective attacker, you need to move fast, and that speed requires a move to a DevOps style of managing infrastructure and code. With cloud resources and APIs to manage these resources, the days of manual setup are long behind us.
Where do we get started? And how does it all work?
In this training, we learn the fundamentals of DevOps and how we can code our TTPs. Coding TTPs allows for new tactics and improved OPSEC to be shared without the cost of knowledge transfer and manual setup. This class will introduce students to Terraform Ansible and Docker with the goal of writing TTPs to use and share.
In this class, we will learn the fundamentals of Terraform Ansible and Docker with an emphasis on how we can use these tools to code our TTPs. After we have the fundamentals, we will start coding and get comfortable with YAML and will review how to create resources and customize TTPs. Lastly, we will work through multiple labs and examples that you can take with you for your next engagement.
https://www.antisyphontraining.com/hackerops-w-ralph-may/

AASLR: Antisyphon Address Space Layout Randomization
2022-08-02 16:30 - 17:30, 2022-07-27 16:30 - 17:30, 2022-07-26 16:30 - 17:30
AASLR will have infosec professionals sharing their knowledge on tools, techniques, and procedures and then answering a lot of your questions on everything you can think to ask.
Streamed live every Tuesday and Wednesday @ 4:30 pm.
https://www.twitch.tv/antisyphon

Red Team Fundamentals for Active Directory w/ Eric Kuehn
2022-08-02 12:00 - 16:00
The Red Team Fundamentals for Active Directory course is an 8-hour class focused on explaining the fundamentals of Active Directory and how different aspects can be exploited when performing penetration tests. The goal is not only to cover different attacks but also explain the details of why they work and how an environment can be made resilient to them and potentially detect malicious activity. This combination opens the course to those looking to hone their offensive skills as well as those who are protecting an enterprise network.
The course mixes lecture with a number of hands-on exercises to reinforce the information and techniques. The activities will cover ways to examine an Active Directory environment, looking for a variety of misconfigurations that are commonly seen in Active Directory implementations (even by some security conscious entities), and then exploit these issues to pivot and escalate our access. Ultimately, the students will gain full control of an AD Forest.
While in class, students will be provided access to a lab containing realistic targets and tools to learn both the attacks and defenses of Active Directory. This environment enables the attendees to understand how the covered techniques are used in the real world.
https://www.antisyphontraining.com/red-team-fundamentals-for-active-directory/

BHIS | Talkin' Bout Infosec News
2022-08-01 16:30 - 17:30, 2022-07-25 16:30 - 17:30
Join the BHIS team as we talk about current infosec news.
Streamed live every Monday @ 4:30 pm.
https://www.youtube.com/BlackHillsInformationSecurity

Modern WebApp Pentesting w/ BB King
2022-07-29 12:00 - 16:00, 2022-07-28 12:00 - 16:00, 2022-07-27 12:00 - 16:00, 2022-07-26 12:00 - 16:00
Modern Webapp Pentesting is unique in its approach to testing webapps. Too many courses are built around the assumption that a webapp pentester’s skills should grow along a straight line, starting with something like the OWASP Top Ten and culminating in something like Attacking Web Cryptography. Real webapps don’t follow that same path, and neither should real webapp pentesters. Attacking Web Sockets is not more difficult than attacking HTTP traffic, it’s just different. Web APIs are not something you’re qualified to test only after you’ve put your time in on traditional webapps … they’re just different.
This course doesn’t worry about where a student falls on the imaginary scale of beginner to expert but instead focuses on finding and exploiting the kinds of issues found in real webapps today, based on the instructor’s many years of ongoing experience in testing … real webapps today.
https://www.antisyphontraining.com/modern-webapp-pentesting-w-bb-king/

Linux Command-Line Dojo w/ Hal Pomeranz
2022-07-29 11:00 - 16:00, 2022-07-28 11:00 - 16:00, 2022-07-27 11:00 - 16:00, 2022-07-26 11:00 - 16:00
Register: https://www.antisyphontraining.com/linux-command-line-dojo-w-hal-pomeranz/
The DevOps folks are pushing Linux, your red-team friends are doing serious damage with Linux-based tools, and the Linux users on your Incident Response team are doing mysteriously powerful things. You’re ready to see if some of the Linux magic can rub off on you, but you don’t know where to start.
This 16-hour course is a quick jumpstart on the Linux command-line. Start from the basics and work all the way up to command-line programming. Short learning modules and lots of practical hands-on activities will put you on the road to Linux command-line mastery. And electronic copies of everything are yours to take home, so you can continue the learning even after class is over.

Operation Purple w/Tim Schulz
2022-07-26 11:00 - 16:00
Ever wondered how purple teaming can supercharge your cyber capability? In this 16-hour, hands-on course, attendees will learn the balance between threat understanding and detection understanding to run their own purple team exercises. Attendees will start by learning the underlying methodologies that make purple teaming successful and metrics for success before diving into leveraging the ATT&CK framework to create threat informed emulation plans. Once attendees have successfully built plans, they can leverage tools like SCYTHE or the Slingshot C2 VM to automate the emulation process. Finally, attendees will learn to identify and build detections to their emulated attacks.

https://www.antisyphontraining.com/operation-purple-w-tim-schulz/
