BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Antisyphon Training - ECPv6.18.2//NONSGML v1.0//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-ORIGINAL-URL:https://www.antisyphontraining.com
X-WR-CALDESC:Events for Antisyphon Training
REFRESH-INTERVAL;VALUE=DURATION:PT1H
X-Robots-Tag:noindex
X-PUBLISHED-TTL:PT1H
BEGIN:VTIMEZONE
TZID:America/New_York
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20250309T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20251102T060000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20260308T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20261101T060000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20270314T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20271107T060000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;TZID=America/New_York:20261104T120000
DTEND;TZID=America/New_York:20261104T130000
DTSTAMP:20261015T000521Z
CREATED:20261015T000518Z
LAST-MODIFIED:20261015T000521Z
UID:10001040-1793793600-1793797200@www.antisyphontraining.com
SUMMARY:Anti-Cast: Cover Your SaaS with Shane Hartman
DESCRIPTION:When a security incident hits your SaaS environment\, where do you even start? \n\n\n\nThere are no hard drives to image\, no network packets to sniff\, and no physical servers to seize. When the attacker never touched a single endpoint\, where and what exactly are you investigating? \n\n\n\nJoin Shane Hartman\, Principal IR Consultant at TrustedSec\, as he takes you down the rabbit hole of token theft\, OAuth abuse\, and API exposure in SaaS incident response investigations. \n\n\n\nYou’ll leave with a clearer picture of how attackers move through SaaS environments\, what evidence they leave behind\, and where to look when traditional IR playbooks don’t apply. \n\n\n\nIn SaaS\, attackers don’t break in. They register; they sign in. If your organization runs SaaS (and you know it does)\, an incident is coming. This is how you investigate it. \n\n\n\n\nRegister Here\n\n\n\n\nJoin us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel \n\n\n\nStay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com \n\n\n\nDon’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training! \n\n\n\n 
URL:https://www.antisyphontraining.com/event/anti-cast-cover-your-saas-with-shane-hartman/
CATEGORIES:Anti-Cast
ATTACH;FMTTYPE=image/avif:https://www.antisyphontraining.com/wp-content/uploads/2026/10/Cover-Your-SaaS.avif
END:VEVENT
END:VCALENDAR