john strand Archives - Black Hills Information Security

Blue Team, General InfoSec Tips & Tricks, How-To, InfoSec 101, Red Team, Webcasts Backdoors, Beta Version, Breaches, Card Game, Coming Soon, Cubicles and Compromises, Incident Handling, Incident Response, john strand, SEC504

Webcast: Introducing Backdoors & Breaches Incident Response Card Game

This webcast was original given live on June 5th, 2019 by John Strand and the BHIS (card) Testers. Download slides: https://www.activecountermeasures.com/presentationsRequest a deck of B&B cards (Coming in Sept): https://www.blackhillsinfosec.com/contact-usAlso check out Cubicles & Compromises: https://www.blackhillsinfosec.com/dungeons-dragons-meet-cubicles-compromises So we have been working on a card game for Incident Response over the past few months and it […]

Read the entire post here

How-To, Informational, LLMNR, Red Team, Red Team Tools, Webcasts ARP Cache Poisoning, GPP, john strand, Justin Angel, LaBrea Tar Pits, LLMNR, mDNS, SNAC, Stale Network Address Configuration, WPAD

Webcast: How to attack when LLMNR, mDNS, and WPAD attacks fail – eavesarp (Tool Overview)

Click on the timecodes to jump to that part of the video (on YouTube) 2:26 Introduction, background history covering LaBrea Tar Pits and ARP Cache Poisoning and how they relate to this webcast and how “eavesarp” basically works. 14:15 Demo of “eavesarp” against a Stale Network Address Configuration (SNAC) attack. 28:45 Q&A This webcast was […]

Read the entire post here

Blue Team, Blue Team Tools, How-To, Informational, Podcasts Attack Tactics, BHIS, Blue Team, Defenses, john strand, Jordan Drysdale, Kent Ickler, podcast

Podcast: Attack Tactics 6! Return of the Blue Team

Download slides: https://www.activecountermeasures.com/presentations In this webcast we walk through the step-by-step defenses to stop the attackers in every step of the way we showed in Attack Tactics Part 5!!! Originally recorded as a live webcast on May 16th, 2019Presented by: John Strand, Jordan Drysdale, Kent Ickler Join the BHIS Blog Mailing List – get notified when […]

Podcast: Play in new window | Download

Subscribe: Android | RSS

Read the entire post here

Blue Team, How-To, Informational, Webcasts Attack Tactics, Blue Team, canary tokens, cobalt strike, crackmapexec, Defenses, fixthefuture, honey accounts, john strand, Jordan Drysdale, Kent Ickler, LLMNR, MailSniper, RITA, ssh brute force

Webcast: Attack Tactics 6! Return of the Blue Team

Download slides: https://www.activecountermeasures.com/presentations In this webcast we walk through the step-by-step defenses to stop the attackers in every step of the way we showed in Attack Tactics Part 5!!! Timecode links take you to YouTube: 2:53 Introduction, password spray toolkit, account lockout, honey accounts, canary tokens, and two factor authorization 12:00 PCI #fixthefuture , two […]

Read the entire post here

C2, External/Internal, How-To, Informational, LLMNR, Password Cracking, Password Spray, Phishing, Recon, Red Team, Red Team Tools, Webcasts Attack Tactics, crackmapexec, Ethical Hacking, HTA, john strand, Jordan Drysdale, Kent Ickler, LLMNR, MailSniper, Password cracking, password spraying, pen-testing, phishing

Webcast: Attack Tactics 5 – Zero to Hero Attack

Timecode links take you to YouTube: 4:11 – Infrastructure & Background8:28 – Overview & Breakdown of Attack Methodology and Plans11:35 – Start of Attack (Gaining Access), Password Spraying Toolkit15:24 – Mailsniper, Retrieve Global Access List21:58 – Lateral Movement, OWA, VPN, SSH27:05 – Scanning/Enumeration, Nmap SSH Brute Force, “Find Open”, Movement, Gaining Access34:07 – Gaining Access, […]

Read the entire post here

00377_03182019_PODCAST_TrackingAttackers

Blue Team, Blue Team Tools, Finding, How-To, Hunt Teaming, Informational, Podcasts ADHD, Black Hat, Cyber Deception, Honey Tokens, Honeypots, john strand, Tracking, training

BHIS PODCAST: Tracking attackers. Why attribution matters and how to do it.

In this BHIS podcast, originally recorded as a live webcast, we cover some new techniques and tactics on how to track attackers via various honey tokens. We cover how to track with Word Web Bugs in ADHD, and cover the awesome toolkit from Thinkst. We also cover some of the legal ramifications involved in do […]

Podcast: Play in new window | Download

Subscribe: Android | RSS

Read the entire post here

Blue Team, Blue Team Tools, How-To, Informational, Webcasts Active Defense, ADHD, Cyber Deception, Honey Tokens, john strand, Thinkst, webcast

BHIS Webcast: Tracking attackers. Why attribution matters and how to do it.

In this BHIS webcast we cover some new techniques and tactics on how to track attackers via various honey tokens. We cover how to track with Word Web Bugs in ADHD, and cover the awesome toolkit from Thinkst. We also cover some of the legal ramifications involved in do this. Download slides: https://www.activecountermeasures.com/presentations/ I am covering this […]

Read the entire post here

Blue Team, General InfoSec Tips & Tricks, Informational, InfoSec 101, Podcasts Attacks, Beau Bullock, Bitcoin, Blockchain, john strand, podcast

BHIS Podcast: Blockchain and You! InfoSec Edition

Take a good look at Bitcoin right now… these are the unlucky ones. These are the unfortunate souls who jumped on another overinflated balloon. But, does this Bitcoin crash completely undermine all blockchain technologies? Since Bitcoin is crashing and burning we figured it would be a good time to have a webcast on blockchain security […]

Podcast: Play in new window | Download

Subscribe: Android | RSS

Read the entire post here

Informational john strand, SANS, SEC504

I’m resigning from SANS

John Strand// Hello all, Well, this is a painful post to write, so I will get right to it. I am on my last run of classes with the SANS Institute. And, this is a good thing. It is a good thing for SANS SEC504, it is a good thing for me, my family, and […]

Read the entire post here