Black Hills Information Security, Inc.

BHIS | Talkin' Bout Infosec News
2023-01-09 16:30 - 17:30, 2023-01-02 16:30 - 17:30, 2022-12-26 16:30 - 17:30, 2022-12-19 16:30 - 17:30, 2022-12-12 16:30 - 17:30 (America/New_York)
Join the BHIS team as we talk about current infosec news.
Streamed live every Monday @ 4:30 pm.
https://www.youtube.com/BlackHillsInformationSecurity

AASLR: Antisyphon Address Space Layout Randomization
2023-01-04 16:30 - 17:30, 2023-01-03 16:30 - 17:30, 2022-12-28 16:30 - 17:30, 2022-12-27 16:30 - 17:30, 2022-12-21 16:30 - 17:30, 2022-12-20 16:30 - 17:30, 2022-12-14 16:30 - 17:30, 2022-12-13 16:30 - 17:30 and 2 more dates
AASLR will have infosec professionals sharing their knowledge on tools, techniques, and procedures and then answering a lot of your questions on everything you can think to ask.
Streamed live every Tuesday and Wednesday @ 4:30 pm.
https://www.twitch.tv/antisyphon

BHIS Annual Baltimore Meet-up!
2022-12-16 17:00 - 21:00
The Black Hills Information Security (BHIS) Content & Community crew is hosting a holiday meet-up in the Baltimore area on Friday, December 16th from 5 – 9 pm, and YOU are invited!
We will be meeting at The Commissary at CVille Junction, an outdoor location that has firepits, heaters, food trucks, and more! (We will have a backup location if the weather does not cooperate.)
If you’d like to hang out with us, hang out with each other, and pick up some cool swag, RSVP here so we’ll know how to plan!
The C&C team
Jason, Deb, Kassie, Caitlin, & Mike
https://evite.me/WRhQShVbzc

Applied Purple Teaming w/ Kent Ickler and Jordan Drysdale
2022-12-16 12:00 - 16:00, 2022-12-15 12:00 - 16:00, 2022-12-14 12:00 - 16:00, 2022-12-13 12:00 - 16:00
Register: https://www.antisyphontraining.com/applied-purple-teaming-w-kent-ickler-and-jordan-drysdale/
You’ve heard this story before. Bad actor walks into a network and pillages the place in swift action. CIO asks: “Where did we go wrong?” SysAdmin replies “our password, remote access, workstation restriction, and lack of application safelisting policies. Oh, and our SIEM didn’t notify us. We just weren’t ready for that attack.”
In a significant change from the original course, students will be introduced to Microsoft Azure and Sentinel. Each student will be responsible for deploying a cloud lab that includes an Active Directory domain, a C2 server, and integration with AZ Sentinel’s detection platform. All of this will be taught through a proven framework for purple team operations that results in better business outcomes.
Each student will then pollute the AD domain with garbage using BadBlood and wreak havoc on the environment through an updated iteration of the following labs:

Organizational reconnaissance
Bloodhound, Sharphound, and Neo4j
Plumhound
Group policy preferences
Command and control operations
Canary accounts for detecting password sprays and Kerberoasting
File share poisoning via URL and LNK files
Pass the hash attacks
DCSync operations
Password cracking with John the Ripper
Kerberoasting attacks
Atomic Red Team
….and more….

Students will have an opportunity to attack their own in-class Active Directory environment with Red Team tactics, implement Blue Team defensery, and manage an environment designed to prevent, slow, identify, and highlight attacks. Additionally, the course will guide students through configuring no-nonsense attack identification and alerting that is essential to an effective SOC operation.
In a live environment, students will have the opportunity to demonstrate a secured enterprise by utilizing the MITRE ATT&CK Framework, Red Team tactics, and Blue Team defenses to identify, slow, and stop attacks.
Implement better security and tell your CIO how everything went right!

BHIS Webcast: Basics of Burp(ing) w/ Chris Traynor | 1-Hour
2022-12-15 13:00 - 14:00
Thursday, December 15th, 2022 | 1-Hour
Register: https://zoom.us/webinar/register/WN_lWSUVVp1RmGNxSHlPPKKLQ
In this Black Hills Information Security (BHIS) webcast, we will introduce you to Portswigger’s Burp – a powerful tool for web application security testing. We will cover the key capabilities of Burp and demonstrate how it can be used to identify vulnerabilities in web applications.
Whether you are a beginner or an experienced security professional, this webcast will provide valuable insights into this powerful Pentesting tool and how it can help you improve the security of your web applications.
Join Chris Traynor (@cstraynor ) as he discusses this essential tool for web application security testing.
Come hang out with us, it will be a gas!

Breaching the Cloud w/ Beau Bullock
2022-12-09 12:00 - 16:00, 2022-12-08 12:00 - 16:00, 2022-12-07 12:00 - 16:00
Register: https://www.antisyphontraining.com/breaching-the-cloud-w-beau-bullock/
Do you want to level up your cloud penetration testing skills? The attack surface of many organizations has changed to include third-party hosted services such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform. In this training course, hacking concepts will be introduced for each of those services.
This training walks through a complete penetration testing methodology of cloud-based infrastructure. Starting with no information other than the company name you will learn to discover what cloud-specific assets your target is using. Following the enumeration of cloud services, you will learn how to discover misconfigurations that commonly expose sensitive data as well as a thorough understanding of how to get an initial foothold into a cloud-based organization.
Post-compromise techniques of cloud infrastructure differ from the techniques used in typical on-premise environments. You will learn situational awareness techniques that ultimately will impact how you will escalate privileges in the cloud. With most cloud-based authentication being publicly exposed this presents new and interesting persistence techniques that are non-existent to on-premise environments. With productivity tools like G-Suite and Microsoft 365 many organizations are making their email and other data that is normally protected by a firewall available to remote employees. You will learn how to discover, pillage, and exfiltrate data from these services.
Many organizations are fully leveraging cloud services for their production infrastructure. This can include web servers, SQL databases, storage, virtual machines, and more. In this training, you will learn how to assess and compromise these resources. Some cloud deployments are directly connected to on-premise environments via VPN. This presents an opportunity to pivot access from cloud to on-prem or vice-versa.
Finally, in this training, we will not only be attacking cloud infrastructure but also leveraging it for red team operations. You will learn techniques that leverage cloud services for techniques such as phishing, domain fronting, and command & control.
Tools and techniques used on real-world penetration tests against cloud assets will be shared including hands-on demonstrations. At the end of this training, you will have new skills for assessing cloud-based infrastructure!

Security Defense and Detection TTX w/ Amanda Berlin and Jeremy Mio
2022-12-09 12:00 - 16:00, 2022-12-08 12:00 - 16:00, 2022-12-07 12:00 - 16:00
Security Defense and Detection TTX is a comprehensive four-day tabletop exercise that involves the introduction to completion of security TTXs (tabletop exercises), IR playbooks, and after-action reports. The exercises are paired with video and lab demonstrations that reinforce their purpose. The training as a whole is compatible with the world’s most popular RPG rules.
The preparation phase will walk students through the creation of specific IR playbooks that can be utilized in any environment as well as during later parts of the class. The next phase introduces the gamification of the TTXs. The students split up into separate “corporations” with assigned verticals, hit points, armor class, budgets, strengths, and weaknesses. Selection of departments and skills allow the players to further their modifiers. Throughout the exercise, each company will take turns rolling their way through decisions such as large purchases, attack severity, defense capability, and incident response decisions.
https://www.antisyphontraining.com/security-defense-and-detection-ttx-w-amanda-berlin-and-jeremy-mio/

BHIS Webcast: The Top $_num Reasons You Got Hacked in 2022 with Kent & Jordan | 1-Hour
2022-12-08 13:00 - 14:00
Thursday, December 8th, 2022 | 1 pm ET
Register:
https://zoom.us/webinar/register/WN_c9B0VjuNTESxDkKUvJcd5w
Yes, the webcast title is clickbait. We know.
But…organizations keep getting hacked. Almost every day another organization gets criticized across our news feeds for losing more data, PII, and secrets. And we have an interesting perspective on the causes of and some possible solutions for organizations willing to listen.
After taking a look through our 2022 contracts and findings, we would like to offer you a perspective through the looking glass. In this Black Hills Information Security (BHIS) & Antisyphon webcast, we have our top findings (why you got popped) and our recommendations (years of our expertise) to share. Let our experiences guide your security programs in 2023.
Together, let’s keep pushing the detection needle down from the industry approximation of 200 days to breach detection and 75 more to containment…
We are looking forward to spending some time with you!

Introduction to Pentesting w/ John Strand
2022-12-08 11:00 - 16:00, 2022-12-07 11:00 - 16:00
Register: https://www.antisyphontraining.com/introduction-to-pentesting/
Are you looking to make a transition into pentesting but are overwhelmed or just don’t know how to get started? With numerous different types of engagements, operational phases, and a constant flood of new vulnerabilities hitting the industry, the journey into penetration testing can quickly become confusing.
In this training course, we will examine the different types of penetration testing engagements and take a deep dive into establishing a repeatable testing methodology for executing quality tests. We will look at some tools of the trade to understand what they are doing under the hood, identify what separates a great finding from a good finding in reports, and really zero in on establishing your own methodology!
By the end of the training, you can expect to leave with a firm understanding of how pentests are executed and a newfound comfortability performing penetration tests. We will also provide numerous resources and tools that will help you pave your way into a pentesting career!
