WWHF - Deadwood 2022
2022-10-10 - 2022-10-14 | Deadwood Mountain Grand, 1906 Deadwood Mountain Drive, Deadwood, SD, 57732, United States
Wild West Hackin’ Fest (WWHF) is committed to offering high-quality information security education to beginners and seasoned professionals alike. With reasonably priced training, conferences, hands-on labs, and workshops, WWHF lowers the barrier to entry for those seeking to enter into the world of information security. WWHF also offers a venue for those already established in the industry to share ideas, give back, and continue learning.

How to be Irresistible to Hiring Managers w/ Kip Boyle
2022-10-10 11:00 - 16:00, 2022-10-11 11:00 - 16:00, 2022-10-12 11:00 - 16:00 (America/New_York) | CO
Register: https://www.antisyphontraining.com/how-to-be-irresistible-to-hiring-managers/
Are you spending hours a day trawling through the online job sites and spending even more time filling out lengthy application forms with nothing to show for it? Something’s not working, but what could it be? Kip Boyle, a veteran hiring manager who has personally interviewed hundreds of job applicants as well as hired dozens of successful cybersecurity candidates, will teach you to think like a hiring manager and bend the hiring process to your advantage. After you taking this class, you’ll understand how to ace your resume, crush your interviews, and negotiate your ideal salary.

BHIS | Talkin' Bout Infosec News
2022-10-10 16:30 - 17:30 | CO
Join the BHIS team as we talk about current infosec news.
Streamed live every Monday @ 4:30 pm.
https://www.youtube.com/BlackHillsInformationSecurity

Advanced Endpoint Investigations w/ Alissa Torres
2022-10-11 11:00 - 19:00, 2022-10-12 11:00 - 19:00 | CO
For most security teams, high operational tempo (measured in dumpster fire lumens) incentivizes analysts to stick to well-tailored playbooks that prioritize remediation at the expense of proper incident scoping and root cause analysis. Though modern endpoint security products have significantly improved host visibility, most critical incidents will require the acquisition and analysis of additional endpoint data. This course focuses on four core investigative competencies: endpoint data collection, investigative triage, incident response pivots, and root cause analysis.
After learning about key endpoint artifact and memory analysis techniques for Windows and Linux, attendees will work through real-world scenarios in hands-on labs. We’ll pivot from initial detection into host triage analysis to discern attackers’ discovery, defense evasion and lateral movement techniques. Attendees will learn to identify key indicators for the generation of high-fidelity detections.
https://www.antisyphontraining.com/advanced-endpoint-investigations-w-alissa-torres/

Advanced Network Threat Hunting w/ Chris Brenton
2022-10-11 11:00 - 19:00, 2022-10-12 11:00 - 19:00 | CO
Register: https://www.antisyphontraining.com/advanced-network-threat-hunting-w-chris-brenton/
So far we’ve had over 21,000 students attend our one-day network threat hunting course. Many have asked that we provide an extended class with more hands-on lab time. That is exactly what we have rolled into this 16-hour course!
We will spend most of this class analyzing pcap files for Command and Control (C2) communications in order to identify malware back channels. It is assumed that the student will already understand the basics of network threat hunting, so we can immediately jump into applying that knowledge. The goal will be to create a threat hunting runbook that you can use within your own organization in order to identify systems that have been compromised.

Breaching the Cloud w/ Beau Bullock
2022-10-11 11:00 - 19:00, 2022-10-12 11:00 - 19:00 | CO
Register: https://www.antisyphontraining.com/breaching-the-cloud-w-beau-bullock/
Do you want to level up your cloud penetration testing skills? The attack surface of many organizations has changed to include third-party hosted services such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform. In this training course, hacking concepts will be introduced for each of those services.
This training walks through a complete penetration testing methodology of cloud-based infrastructure. Starting with no information other than the company name you will learn to discover what cloud-specific assets your target is using. Following the enumeration of cloud services, you will learn how to discover misconfigurations that commonly expose sensitive data as well as a thorough understanding of how to get an initial foothold into a cloud-based organization.
Post-compromise techniques of cloud infrastructure differ from the techniques used in typical on-premise environments. You will learn situational awareness techniques that ultimately will impact how you will escalate privileges in the cloud. With most cloud-based authentication being publicly exposed this presents new and interesting persistence techniques that are non-existent to on-premise environments. With productivity tools like G-Suite and Microsoft 365 many organizations are making their email and other data that is normally protected by a firewall available to remote employees. You will learn how to discover, pillage, and exfiltrate data from these services.
Many organizations are fully leveraging cloud services for their production infrastructure. This can include web servers, SQL databases, storage, virtual machines, and more. In this training, you will learn how to assess and compromise these resources. Some cloud deployments are directly connected to on-premise environments via VPN. This presents an opportunity to pivot access from cloud to on-prem or vice-versa.
Finally, in this training, we will not only be attacking cloud infrastructure but also leveraging it for red team operations. You will learn techniques that leverage cloud services for techniques such as phishing, domain fronting, and command & control.
Tools and techniques used on real-world penetration tests against cloud assets will be shared including hands-on demonstrations. At the end of this training, you will have new skills for assessing cloud-based infrastructure!

Defending the Enterprise w/ Kent Ickler and Jordan Drysdale
2022-10-11 11:00 - 19:00, 2022-10-12 11:00 - 19:00 | CO
Register: https://www.antisyphontraining.com/defending-the-enterprise-w-kent-ickler-and-jordan-drysdale/
For the luckiest of enterprises, the awareness of an insecure environment is proven not in public discord after a breach but instead by effective security penetration tests. Time and time again Jordan and Kent have witnessed organizations struggle with network management, Active Directory, organizational change, and an increasingly experienced adversary.
For new and legacy enterprises alike, Defending the Enterprise explores the configuration practices and opportunities that secure networks, Windows, and Active Directory from the most common and effective adversarial techniques. Have the confidence that your organization is prepared for tomorrow’s security threats by learning how to defend against network poisoning, credential abuse, exploitable vulnerabilities, lateral movement, and privilege escalation. Learn cost-effective mitigations to contemporary adversarial attacks.
The best defended networks are those which have matured from countless penetration tests and security incidents. Learn from Kent and Jordan, two seasoned offensive and defensive security experts, to shortcut your organization’s security posture into a well-fortified fortress.

Enterprise Attack Initial Access w/ Steve Borosh
2022-10-11 11:00 - 19:00, 2022-10-12 11:00 - 19:00 | CO
Register: https://www.antisyphontraining.com/enterprise-attack-initial-access-w-steve-borosh/
Enterprises have been working tirelessly to improve their security postures through defense-in-depth approaches. Offensive teams have also been putting in long hours of research into bypassing the latest EDR’s and defensive products that keep them on their toes. Long gone “hopefully” are the days of hurdling an HTA file laced with a download cradle at a mature organization with a “Free iPad” ruse and watching your screen fill with incoming agents.
An offense-in-depth approach may be applied to offensive practitioners looking for success against organizations well-versed in defending a large enterprise. Today’s organizations have assets in multiple geo regions, networks, cloud services, border hosts, and many of them are tied to the internal network in some way.
This course aims to help offensive practitioners successfully exercise their client environments from a multi-faceted approach using the latest TTPs blended with esoteric practices to gain the upper hand on your assessments.

Hiring Handbook: How to Build an InfoSec Team that Gets Stuff Done w/ Kip Boyle
2022-10-11 11:00 - 19:00, 2022-10-12 11:00 - 19:00 | CO
Register: https://www.antisyphontraining.com/hiring-handbook-how-to-build-an-infosec-team-that-gets-stuff-done-w-kip-boyle/
In this class, Kip shows InfoSec supervisors how to build the team of their dreams. Students will learn how to attract and retain top tier talent. The kind of talented people who could work anywhere, but choose to work with you. Team members who get stuff done and don’t think much about changing employers.
What’s more, this kind of team throws open the door for you to become a powerful influencer on InfoSec strategy with your senior decision makers. Why? Because your team will let you work “on your program” instead of working “in your program.” And that will allow you to spend more time learning about the business your team protects and building relationships with the other top influencers across your organization.
During this workshop, we’ll be referring to the “Cybersecurity Hiring Manager Handbook” an open source document published under the Creative Commons Attribution 4.0 International (CC BY 4.0) license.

Introduction to IOT Device Hacking w/ Rick Wisser and David Fletcher – 16 Hours
2022-10-11 11:00 - 19:00, 2022-10-12 11:00 - 19:00 | CO
Register: https://wildwesthackinfest.com/antisyphon/introduction-to-iot-device-hacking-w-rick-wisser-and-david-fletcher/

With over 21.5 billion interconnected devices in the world and a future estimate of 6.2 trillion devices by 2025, understanding and learning how to methodologically assess those devices is sure to be a valuable skill. “Introduction to IOT Device Hacking” will present a methodological approach for understanding attack surfaces, interacting with various protocols and interfaces, determining exploitative scale, and ultimately attacking various types of IOT devices. Beginning with reconnaissance and ending with compromising the IOT device, students will get hands-on experience and valuable skills. This course provides students with a vulnerable device and tools to perform typical attacks using various protocols and interfaces.

Introduction to Pentesting w/ John Strand
2022-10-11 11:00 - 19:00, 2022-10-12 11:00 - 19:00 | CO
Are you looking to make a transition into pentesting but are overwhelmed or just don’t know how to get started? With numerous different types of engagements, operational phases, and a constant flood of new vulnerabilities hitting the industry, the journey into penetration testing can quickly become confusing.
In this training course, we will examine the different types of penetration testing engagements and take a deep dive into establishing a repeatable testing methodology for executing quality tests. We will look at some tools of the trade to understand what they are doing under the hood, identify what separates a great finding from a good finding in reports, and really zero in on establishing your own methodology!
By the end of the training, you can expect to leave with a firm understanding of how pentests are executed and a newfound comfortability performing penetration tests. We will also provide numerous resources and tools that will help you pave your way into a pentesting career!

Linux Forensics w/ Hal Pomeranz | 16-Hours
2022-10-11 11:00 - 19:00, 2022-10-12 11:00 - 19:00 | CO
Register: https://www.antisyphontraining.com/linux-forensics-w-hal-pomeranz/
Linux is everywhere– running in the cloud, on cell phones, and in embedded devices that make up the “Internet of Things”. Often neglected by their owners, vulnerable Linux systems are low-hanging fruit for attackers wishing to create powerful botnets or mine cryptocurrencies. Ransomware-type attacks may target Linux-based database systems and other important infrastructure.
As attacks against Linux become more and more common, there is an increasing demand for skilled Linux investigators. But even experienced forensics professionals may lack sufficient background to properly conduct Linux investigations. Linux is its own particular religion and requires dedicated study and practice to become comfortable.
This 16-hour, hands-on course is a quick start into the world of Linux forensics. Learn how to use memory forensics to rapidly triage systems and spot attacker malware and rootkits. Learn where the most critical on-disk artifacts live and how they can help further an investigation. Rapidly process Linux logs and build a clearer picture of what happened on the system.

Offensive Development w/ Greg Hatcher & John Stigerwalt
2022-10-11 11:00 - 19:00 | CO
Register: https://www.antisyphontraining.com/offensive-development-w-greg-hatcher-john-stigerwalt/
Dive deep into cutting edge techniques that bypass or neuter modern endpoint defenses. Learn how these solutions work to mitigate their utility and hide deep within code on the endpoint. The days of downloading that binary from the internet and pointing it at a remote machine are over. Today’s defenses oftentimes call for multiple bypasses within a single piece of code.
This course is designed to take you deep into defensive and offensive tooling – an apex attacker must know the own indicators of compromise (IOCs) they’re creating and the artifacts they’re
leaving behind.

Operation Purple w/ Tim Schulz
2022-10-11 11:00 - 19:00 | CO
Register: https://www.antisyphontraining.com/operation-purple-w-tim-schulz/
Ever wondered how purple teaming can supercharge your cyber capability? In this 16-hour, hands-on course, attendees will learn the balance between threat understanding and detection understanding to run their own purple team exercises. Attendees will start by learning the underlying methodologies that make purple teaming successful and metrics for success before diving into leveraging the ATT&CK framework to create threat informed emulation plans. Once attendees have successfully built plans, they can leverage tools like SCYTHE or the Slingshot C2 VM to automate the emulation process. Finally, attendees will learn to identify and build detections to their emulated attacks.

Modern WebApp Pentesting w/ BB King
2022-10-11 11:00 - 19:00 | CO
Register: https://www.antisyphontraining.com/modern-webapp-pentesting-w-bb-king/
Modern Webapp Pentesting is unique in its approach to testing webapps. Too many courses are built around the assumption that a webapp pentester’s skills should grow along a straight line, starting with something like the OWASP Top Ten and culminating in something like Attacking Web Cryptography. Real webapps don’t follow that same path, and neither should real webapp pentesters. Attacking Web Sockets is not more difficult than attacking HTTP traffic, it’s just different. Web APIs are not something you’re qualified to test only after you’ve put your time in on traditional webapps … they’re just different.
This course doesn’t worry about where a student falls on the imaginary scale of beginner to expert but instead focuses on finding and exploiting the kinds of issues found in real webapps today, based on the instructor’s many years of ongoing experience in testing … real webapps today.

Network Forensics and Incident Response w/ Troy Wojewoda
2022-10-11 11:00 - 19:00 | CO
Register: https://www.antisyphontraining.com/network-forensics-and-detection-w-troy-wojewoda/
Incident responders are continually faced with the challenge of collecting and analyzing relevant event data—network communications is no exception. This course uses an assortment of network data acquisition tools and techniques with a focus on open-source, vendor-neutral solutions. Students who take this course will learn how to perform network traffic and protocol analysis that ultimately supports cybersecurity incident response efforts. From reconnaissance to data exfiltration, network traffic scales to provide a bird’s-eye view of attacker activity. Leveraging the vantage point of key network traffic chokepoints, this course explores nearly every phase of an attacker’s methodology. Students will learn network traffic analysis concepts and work through hands-on lab exercises that reinforce the course material using real-world attack scenarios.

Securing the Cloud: Foundations w/ Andrew Krug
2022-10-11 11:00 - 19:00 | CO
Register: https://www.antisyphontraining.com/securing-the-cloud-foundations-w-andrew-krug/
In this course, we’ll explore Amazon Web Services (AWS) as a platform. We will take the perspective of a new startup company spinning up infrastructure in AWS for the very first time. We’ll use a scenario-based approach, where you’ll don the persona of a security engineer on your first day at a new startup. This course will demonstrate ideas like secure-by-default and will examine services and patterns for locking down defaults using a combination of open source and platform-native tooling. Finally, attendees will walk away with a practical understanding of various controls, detections, and guardrails.

Professionally Evil CISSP Mentorship Program
2022-10-11 14:00 - 16:00 | CO
Register: https://www.antisyphontraining.com/professionally-evil-cissp-mentorship-program/
ISC2 describes the CISSP as a way to prove “you have what it takes to effectively design, implement and manage a best-in-class cybersecurity program”. It is one of the primary certifications used as a stepping point in your cybersecurity career. To accomplish this, Secure Ideas has developed a mentorship program designed to provide the knowledge necessary to pass the certification, while working through the common body of knowledge (CBK) in a manner that encourages retention of the knowledge. The mentorship program is designed as a 10-week series of sessions along with various student support and communication methods. These work together to provide the student a solid foundation to not only help in passing the certification but to continue as a collection of information for everyday work. This class is set up to cover the 8 domains of the ISC2 CBK.

AASLR: Antisyphon Address Space Layout Randomization
2022-10-11 16:30 - 17:30 | CO
AASLR will have infosec professionals sharing their knowledge on tools, techniques, and procedures and then answering a lot of your questions on everything you can think to ask.
Streamed live every Tuesday and Wednesday @ 4:30 pm.
https://www.twitch.tv/antisyphon
