Podcasts - Black Hills Information Security

9 Oct 2018

PODCAST: Creating & Keeping a Malware Zoo

Join John as he covers what he and the BHIS Systems team have been working on lately – creating a C2/Implant/Malware test bed. Testing our C2/malware solutions is important because vendors tend to over-hype their capabilities. He’ll cross reference some different malware specimens with the MITRE ATT&CK framework and cover how you can use these […]

Podcast: Play in new window | Download

Read the entire post here

24 Sep 2018

Podcasts 5 year plan, Getting into Infosec, How to get into infosec, information security, John Strand's 5 year plan, podcast

PODCAST: John Strand’s 5 Year Plan into InfoSec Part 2

John Strand shares some of his own journey into information security and also his ideas and tips for those wanting to get into the industry from the start, or those looking to change career paths mid stream. He’s joined by special guests Randy Marchany, CISO of Virginia Tech & Director of the VA Tech IT […]

Podcast: Play in new window | Download

Read the entire post here

17 Sep 2018

Hunt Teaming, Podcasts Active Countermeasures, beacon analysis, detecting beacons, hunt teaming, podcast, Podcasts, threat hunt, threat hunting

PODCAST: Beacon Analysis

Join special guest Chris Brenton, COO of Active Countermeasures, as he discusses the anatomy of beacons and why you need to be looking for them during a threat hunt. He also talks through the challenges of detecting beacons, and some tricks you can use. Slides from the full webcast can be found here: www.activecountermeasures.com/threat-hunting-beacon-analysis-september-11-2018/

Podcast: Play in new window | Download

Read the entire post here

10 Sep 2018

Podcasts Pen test, pentest types, what are the pen test tests, what is a penetration test, what is a pentest, what is a red team, what is a red team pentest

PODCAST: What Is a Red Team, Anyway?

Dakota Nelson // Dakota talks about the pentester pyramid of pain and the different types of tests available from an information security firm. See his slides here: https://blackhillsinformationsecurity.shootproof.com/gallery/7404264/ Extra links & notes: From guest blog post by Scott Worden: Having the penetration tester reach your crown jewels, get root, own you, pwn you, own3d, 0wn3d, pwned, […]

Podcast: Play in new window | Download

Read the entire post here

28 Aug 2018

Blue Team, Podcasts Active Countermeasures, Attack Tactics, Podcasts

PODCAST: From Active Countermeasures – Attack Tactics 4

Join John Strand as he continues his Attack Tactic series this time with the defense ideas for the attacks mentioned in episode 3 (see more here) To see the entire webcast visit the Active Countermeasures YouTube channel Blogs mentioned in this episode: Mike Felch’s Stealing 2FA Tokens on Red Teams with CredSniper Carrie Roberts’ Gathering […]

Podcast: Play in new window | Download

Read the entire post here

13 Aug 2018

Podcasts Active Directory, active directory best practices, AWS Active Directory setup, How to set up active directory

PODCAST: Active Directory Best Practices that Frustrate Pentesters

// Jordan Drysdale and Kent Ickler talk about Best Practices for setting up Active Directory. Bre joins as fake Sierra to host and ask questions from the audience since real Sierra was on vacation. See the webcast and Kent’s show notes here.

Podcast: Play in new window | Download

Read the entire post here

30 Jul 2018

Informational, InfoSec 101, Podcasts Policy, Security Policy, Why Security Policy Matters

PODCAST: Security Policy: Fact Fiction or Implement the Marquis de Management

CJ Cox talks about the highs, lows, hows and why’s of security policy. // Show Notes Why are we doing this? Do you hate your audience? GDPR was bad enough. My Methodology The Rant Cross between Bob Cat Goldthwaite and Dennis Miller Policy is the foundation to the foundation Don’t we all just love Policy […]

Podcast: Play in new window | Download

Read the entire post here

16 Jul 2018

Podcasts Getting into Infosec, Intro to InfoSec

PODCAST: Highly Caffeinated InfoSec

Join Beau Bullock and Mike Felch as they talk about ways to learn more, network and wake up your inner hacker. See the full episode here and look at the slides here.

Podcast: Play in new window | Download

Read the entire post here

16 Jul 2018

Podcasts cloud, Pen Testing Cloud Infrastructure, pen-testing, The Cloud

PODCAST: Attack Tactics Part 3: No Active Directory? No Problem!

John Strand talks about how BHIS pen tests companies who use the cloud. Want to know how you can defend against attacks in your cloud infrastructure? Keep your eyes peeled for part 4! Links: Slides for this webcast can be found here, along with the full video Chris Truncer’s GitHut: EyeWitness Chris’s user guide to EyeWitness […]

Podcast: Play in new window | Download

Read the entire post here