Black Hills Information Security, Inc.

AASLR: Antisyphon Address Space Layout Randomization
2023-04-19 16:30 - 17:30, 2023-04-18 16:30 - 17:30, 2023-04-12 16:30 - 17:30, 2023-04-11 16:30 - 17:30, 2023-04-05 16:30 - 17:30, 2023-04-04 16:30 - 17:30, 2023-03-29 16:30 - 17:30, 2023-03-28 16:30 - 17:30 (America/New_York) and 1 more date
AASLR will have infosec professionals sharing their knowledge on tools, techniques, and procedures and then answering a lot of your questions on everything you can think to ask.
Streamed live every Tuesday and Wednesday @ 4:30 pm.
https://www.twitch.tv/antisyphon

Professionally Evil PCI 101 w/ Nathan Sweaney
2023-04-19 12:00 - 16:00, 2023-04-18 11:00 - 16:00
Register: https://www.antisyphontraining.com/professionally-evil-pci-101
This course is designed to introduce IT professionals to the Payment Card Industry collection of standards as defined and enforced by the Payment Card Industry Security Standards Council. The first half of the course summarizes the structure and history of PCI, the primary standards documents, and the various certification programs for professionals. The second half of the course dives into a summary of the components of the PCI Data Security Standard (PCI DSS). This is a high-level, introductory summary designed to provide a general understanding of the requirements in the PCI DSS.

Getting Started in Security with BHIS and MITRE ATT&CK w/ John Strand
2023-04-19 12:00 - 16:00, 2023-04-18 12:00 - 16:00, 2023-04-17 11:00 - 16:00
Register: https://www.antisyphontraining.com/getting-started-in-security-with-bhis-and-mitre-attck-w-john-strand/
This 16-hour (4-days, 4-hour sessions) information security training class is designed for people who are new to computer security. We will cover the core fundamentals with lots of hands-on labs demonstrating the attacks and defenses every security professional must know to be successful.
At Black Hills Information Security we conduct over 500 security assessments per year. This Antisyphon training class takes the top vulnerabilities we discover and boils it down to the top 11 things every organization should be doing to protect themselves. We call this the Atomic Controls.
While many security classes can be overwhelming with the amount of data they force on you in a short period of time, this class is designed to help you focus on what matters to your day-to-day job. So no, we are not going to force you to learn archaic technologies and the underpinnings of crypto algorithms. Instead, we will focus on what actually works for repelling and detecting attackers.

BHIS | Talkin' Bout Infosec News
2023-04-17 16:30 - 17:30, 2023-04-10 16:30 - 17:30, 2023-04-03 16:30 - 17:30, 2023-03-27 16:30 - 17:30
Join the BHIS team as we talk about current infosec news.
Streamed live every Monday @ 4:30 pm.
https://www.youtube.com/BlackHillsInformationSecurity

BSides Nashville
2023-04-15 08:00 - 17:00

Professionally Evil Container Security (PECSEC) w/ Cory Sabol
2023-04-12 12:00 - 16:00, 2023-04-11 11:00 - 16:00
Register: https://www.antisyphontraining.com/professionally-evil-container-security
This course is designed to cover the core fundamentals of container and container orchestration security. We’ll explore container security concerns, configuration issues, and how to abuse them as an attacker. Then we’ll switch gears and explore the ways that we can prevent the attacks we just carried out. This will all be done in a hands-on lab driven manner. This class is focused primarily on Docker and Kubernetes but many of the core concepts can be applied to other container technologies.

BSides Tampa
2023-04-01 08:00 - 19:00

CypherCon
2023-03-30 13:00 - 2023-03-31 17:00

SOC Core Skills w/ John Strand
2023-03-30 12:00 - 16:00, 2023-03-29 12:00 - 16:00, 2023-03-28 12:00 - 16:00, 2023-03-27 11:00 - 16:00
Register: https://www.antisyphontraining.com/soc-core-skills-w-john-strand/
This 16-hour information security training course will cover the core security skills all Security Operation Center (SOC) analysts need to have. These are the skills that all Black Hills Information Security (BHIS) SOC team members need to have.

Red Team Fundamentals for Active Directory w/ Eric Kuehn
2023-03-29 12:00 - 16:00, 2023-03-28 11:00 - 16:00
Register: https://www.antisyphontraining.com/red-team-fundamentals-for-active-directory/
The Red Team Fundamentals for Active Directory course is an 8-hour class focused on explaining the fundamentals of Active Directory and how different aspects can be exploited when performing penetration tests. The goal is not only to cover different attacks but also explain the details of why they work and how an environment can be made resilient to them and potentially detect malicious activity. This combination opens the course to those looking to hone their offensive skills as well as those who are protecting an enterprise network.
The course mixes lecture with a number of hands-on exercises to reinforce the information and techniques. The activities will cover ways to examine an Active Directory environment, looking for a variety of misconfigurations that are commonly seen in Active Directory implementations (even by some security-conscious entities), and then exploit these issues to pivot and escalate our access. Ultimately, the students will gain full control of an AD Forest.
While in class, students will be provided access to a lab containing realistic targets and tools to learn both the attacks and defenses of Active Directory. This environment enables the attendees to understand how the covered techniques are used in the real world.

BHIS Webcast: Attack Surface Management 101 w/ Ashley Knowles
2023-03-23 13:00 - 14:00
Register:
https://zoom.us/webinar/register/WN_-DCeQRWpTeqhZaccVeB66w
Why does every organization, regardless of size, need a form of Attack Surface Management (ASM)? Every day there are more and more cyber security attacks on organizations across the globe that have folks scratching their heads wondering how to identify and remediate these potential attack vectors. Enter ASM, where the aim is to identify and protect critical IT infrastructure and digital assets.
In this BHIS webcast, Ashley will cover real-world examples and participants will gain a better understanding of the impact of not having proper ASM practices in place.
