Professionally Evil Container Security (PECSEC) w/ Cory Sabol
2023-04-12 12:00 - 16:00 (America/New_York)
Register: https://www.antisyphontraining.com/professionally-evil-container-security
This course is designed to cover the core fundamentals of container and container orchestration security. We’ll explore container security concerns, configuration issues, and how to abuse them as an attacker. Then we’ll switch gears and explore the ways that we can prevent the attacks we just carried out. This will all be done in a hands-on lab driven manner. This class is focused primarily on Docker and Kubernetes but many of the core concepts can be applied to other container technologies.

AASLR: Antisyphon Address Space Layout Randomization
2023-04-12 16:30 - 17:30, 2023-04-18 16:30 - 17:30, 2023-04-19 16:30 - 17:30, 2023-04-25 16:30 - 17:30, 2023-04-26 16:30 - 17:30, 2023-05-02 16:30 - 17:30, 2023-05-03 16:30 - 17:30, 2023-05-09 16:30 - 17:30
AASLR will have infosec professionals sharing their knowledge on tools, techniques, and procedures and then answering a lot of your questions on everything you can think to ask.
Streamed live every Tuesday and Wednesday @ 4:30 pm.
https://www.twitch.tv/antisyphon

BSides Nashville
2023-04-15 08:00 - 17:00

Getting Started in Security with BHIS and MITRE ATT&CK w/ John Strand
2023-04-17 11:00 - 16:00, 2023-04-18 12:00 - 16:00, 2023-04-19 12:00 - 16:00, 2023-04-20 12:00 - 16:00
Register: https://www.antisyphontraining.com/getting-started-in-security-with-bhis-and-mitre-attck-w-john-strand/
This 16-hour (4-days, 4-hour sessions) information security training class is designed for people who are new to computer security. We will cover the core fundamentals with lots of hands-on labs demonstrating the attacks and defenses every security professional must know to be successful.
At Black Hills Information Security we conduct over 500 security assessments per year. This Antisyphon training class takes the top vulnerabilities we discover and boils it down to the top 11 things every organization should be doing to protect themselves. We call this the Atomic Controls.
While many security classes can be overwhelming with the amount of data they force on you in a short period of time, this class is designed to help you focus on what matters to your day-to-day job. So no, we are not going to force you to learn archaic technologies and the underpinnings of crypto algorithms. Instead, we will focus on what actually works for repelling and detecting attackers.

BHIS | Talkin' Bout Infosec News
2023-04-17 16:30 - 17:30, 2023-04-24 16:30 - 17:30, 2023-05-01 16:30 - 17:30, 2023-05-08 16:30 - 17:30, 2023-05-15 16:30 - 17:30
Join the BHIS team as we talk about current infosec news.
Streamed live every Monday @ 4:30 pm.
https://www.youtube.com/BlackHillsInformationSecurity

Professionally Evil PCI 101 w/ Nathan Sweaney
2023-04-18 11:00 - 16:00, 2023-04-19 12:00 - 16:00
Register: https://www.antisyphontraining.com/professionally-evil-pci-101
This course is designed to introduce IT professionals to the Payment Card Industry collection of standards as defined and enforced by the Payment Card Industry Security Standards Council. The first half of the course summarizes the structure and history of PCI, the primary standards documents, and the various certification programs for professionals. The second half of the course dives into a summary of the components of the PCI Data Security Standard (PCI DSS). This is a high-level, introductory summary designed to provide a general understanding of the requirements in the PCI DSS.

BSides Charm (Baltimore)
2023-04-29 08:00 - 2023-04-30 17:00

Professionally Evil API Testing
2023-05-02 09:00 - 18:00, 2023-05-03 10:00 - 18:00
Register: https://www.antisyphontraining.com/professionally-evil-api-testing
This workshop-style intermediate course is designed to complement a student’s understanding of traditional Web Application Security. It focuses on modern application and API security features and tactics to protect APIs and microservices from attacks. Because the material in this course leans on standard HTTP and browser features, and standard web and API security best practices, the lessons and labs are applicable across programming languages and platform implementations. This material in this course is approached both from the perspective of an adversary and that of a defender.

Active Defense & Cyber Deception w/ John Strand
2023-05-08 11:00 - 16:00, 2023-05-09 12:00 - 16:00, 2023-05-10 12:00 - 16:00, 2023-05-11 12:00 - 16:00
Register: https://www.antisyphontraining.com/active-defense-cyber-deception-w-john-strand/
Active Defenses have been capturing a large amount of attention in the media lately. There are those who thirst for vengeance and want to directly attack the attackers. There are those who believe that any sort of active response directed at an attacker is wrong. We believe the answer is somewhere in between.
In this class, you will learn how to force an attacker to take more moves to attack your network. These moves may increase your ability to detect them. You will learn how to gain better attribution as to who is attacking you and why. You will also find out how to get access to a bad guy’s system. And most importantly, you will find out how to do the above legally.
The current threat landscape is shifting. Traditional defenses are failing us. We need to develop new strategies to defend ourselves. Even more importantly, we need to better understand who is attacking us and why. Some of the things we talk about you may implement immediately, others may take you a while to implement. Either way, consider what we discuss as a collection of tools at your disposal when you need them to annoy attackers, attribute who is attacking you, and finally, attack the attackers.
This class is based on the DARPA funded Active Defense Harbinger Distribution live Linux environment. This VM is built from the ground up for defenders to quickly implement Active Defenses in their environments. This class is also very heavy with hands-on labs. We will not just talk about Active Defenses. We will be doing hands-on labs and through them in a way that can be quickly and easily implemented in your environment.

ThotCon
2023-05-19 - 2023-05-20
https://www.thotcon.org/

Hack Miami
2023-05-19 08:00 - 2023-05-20 17:00
