Black Hills Information Security, Inc.

AASLR: Antisyphon Address Space Layout Randomization
2022-11-29 16:30 - 17:30, 2022-11-23 16:30 - 17:30, 2022-11-22 16:30 - 17:30, 2022-11-16 16:30 - 17:30, 2022-11-15 16:30 - 17:30, 2022-11-09 16:30 - 17:30, 2022-11-08 16:30 - 17:30, 2022-11-02 16:30 - 17:30 (America/New_York) and 1 more date
AASLR will have infosec professionals sharing their knowledge on tools, techniques, and procedures and then answering a lot of your questions on everything you can think to ask.
Streamed live every Tuesday and Wednesday @ 4:30 pm.
https://www.twitch.tv/antisyphon

BHIS | Talkin' Bout Infosec News
2022-11-28 16:30 - 17:30, 2022-11-21 16:30 - 17:30, 2022-11-14 16:30 - 17:30, 2022-11-07 16:30 - 17:30, 2022-10-31 16:30 - 17:30
Join the BHIS team as we talk about current infosec news.
Streamed live every Monday @ 4:30 pm.
https://www.youtube.com/BlackHillsInformationSecurity

BSides Charleston
2022-11-19 08:00 - 17:00
Check out Chris Traynor’s Workshop on November 17th!
https://bsideschs.ticketbud.com/ws-intro2pen

BSides Orlando
2022-11-18 08:00 - 2022-11-19 17:00

SOC Core Skills w/ John Strand
2022-11-17 12:00 - 16:00, 2022-11-16 12:00 - 16:00, 2022-11-15 12:00 - 16:00, 2022-11-14 11:00 - 16:00
Register: https://www.antisyphontraining.com/soc-core-skills-w-john-strand/
This 16-hour information security training course will cover the core security skills all Security Operation Center (SOC) analysts need to have. These are the skills that all Black Hills Information Security (BHIS) SOC team members need to have.

Professionally Evil CISSP Mentorship Program
2022-11-15 14:00 - 16:00, 2022-11-08 14:00 - 16:00, 2022-11-01 14:00 - 16:00
Register: https://www.antisyphontraining.com/professionally-evil-cissp-mentorship-program/
ISC2 describes the CISSP as a way to prove “you have what it takes to effectively design, implement and manage a best-in-class cybersecurity program”. It is one of the primary certifications used as a stepping point in your cybersecurity career. To accomplish this, Secure Ideas has developed a mentorship program designed to provide the knowledge necessary to pass the certification, while working through the common body of knowledge (CBK) in a manner that encourages retention of the knowledge. The mentorship program is designed as a 10-week series of sessions along with various student support and communication methods. These work together to provide the student a solid foundation to not only help in passing the certification but to continue as a collection of information for everyday work. This class is set up to cover the 8 domains of the ISC2 CBK.

Active Defense & Cyber Deception w/ John Strand
2022-11-03 12:00 - 16:00, 2022-11-02 12:00 - 16:00, 2022-11-01 12:00 - 16:00
Register: https://www.antisyphontraining.com/active-defense-cyber-deception-w-john-strand/
Active Defenses have been capturing a large amount of attention in the media lately. There are those who thirst for vengeance and want to directly attack the attackers. There are those who believe that any sort of active response directed at an attacker is wrong. We believe the answer is somewhere in between.
In this class, you will learn how to force an attacker to take more moves to attack your network. These moves may increase your ability to detect them. You will learn how to gain better attribution as to who is attacking you and why. You will also find out how to get access to a bad guy’s system. And most importantly, you will find out how to do the above legally.
The current threat landscape is shifting. Traditional defenses are failing us. We need to develop new strategies to defend ourselves. Even more importantly, we need to better understand who is attacking us and why. Some of the things we talk about you may implement immediately, others may take you a while to implement. Either way, consider what we discuss as a collection of tools at your disposal when you need them to annoy attackers, attribute who is attacking you, and finally, attack the attackers.
This class is based on the DARPA funded Active Defense Harbinger Distribution live Linux environment. This VM is built from the ground up for defenders to quickly implement Active Defenses in their environments. This class is also very heavy with hands-on labs. We will not just talk about Active Defenses. We will be doing hands-on labs and through them in a way that can be quickly and easily implemented in your environment.

Red Team Fundamentals for Active Directory w/ Eric Kuehn
2022-11-02 11:00 - 16:00, 2022-11-01 11:00 - 16:00
Register: https://www.antisyphontraining.com/red-team-fundamentals-for-active-directory/
The Red Team Fundamentals for Active Directory course is an 8-hour class focused on explaining the fundamentals of Active Directory and how different aspects can be exploited when performing penetration tests. The goal is not only to cover different attacks but also explain the details of why they work and how an environment can be made resilient to them and potentially detect malicious activity. This combination opens the course to those looking to hone their offensive skills as well as those who are protecting an enterprise network.
The course mixes lecture with a number of hands-on exercises to reinforce the information and techniques. The activities will cover ways to examine an Active Directory environment, looking for a variety of misconfigurations that are commonly seen in Active Directory implementations (even by some security-conscious entities), and then exploit these issues to pivot and escalate our access. Ultimately, the students will gain full control of an AD Forest.
While in class, students will be provided access to a lab containing realistic targets and tools to learn both the attacks and defenses of Active Directory. This environment enables the attendees to understand how the covered techniques are used in the real world.

Incident Response Foundations w/ Derek Banks
2022-11-02 11:00 - 16:00, 2022-11-01 11:00 - 16:00
Register: https://www.antisyphontraining.com/incident-response-foundations-w-derek-banks/
Are you just getting started with Incident Response (IR) and not sure where to begin? Do you need to stand up an IR program or establish a Computer Security and Incident Response Team and need to get started on the right foot?
Incident Response can be one of the most difficult aspects of Information Security and foundational skills are critical.
The goal of this course is to provide the core components that make up a successful Incident Response program. Students will learn how to get started on their IR journey, what to prioritize, and why boring stuff like policies and procedures are just as important as technical digital forensics skills.
We will cover the logging and monitoring capabilities necessary to be able to successfully investigate and triage an incident as well as what to do when those log sources fail. The concepts and skills introduced in this class will lay the groundwork for the next steps in the IR journey of in-depth endpoint and network forensics and analysis.
