Imagine, if you will, you’re a pen tester, and you’ve gained access to a Windows application server. Your discovery includes a deployed application allow listing, and a strong defensive solution stack. Your excitement increases as you find an installed Python interpreter. Wouldn’t it be fantastic ...
We hear more and more about how to incorporate security into every phase of the software development lifecycle, but: Where do you start? What’s a priority? How do I implement this? All of these are common questions asked frequently by new cloud practitioners looking to ...
Join us for a free one-hour Antisyphon Anti-Cast with Bill McCauley, as he dives into the realm of application security from Secure Ideas' foundational training class. He'll also navigate through the OWASP Top 10 application security vulnerabilities, shedding light on common pitfalls and providing practical ...
How do you measure cybersecurity maturity? Are you improving or falling behind? What should you prioritize next? In this free one-hour Antisyphon Anti-Cast with instructor, Nathan Sweaney, he'll explore the NIST Cybersecurity Framework 2.0 and practical applications for measuring your cybersecurity posture. Attendees will gain ...
Got a threat intel feed and scared to use it? No context on atomic indicators from your threat intel feed in your SIEM got you down? Not sure what threat intelligence even means? Join us for a free one-hour Antisyphon Anti-Cast, with instructors Derek Banks ...
Join us for a free one-hour Antisyphon Anti-Cast, with John Strand and Kevin Johnson. Learn how exaggeration undermines trust and efficiency. Using Alexander the Great's empire as an analogy, we highlight how overselling creates unrealistic expectations while critical vulnerabilities remain masked by marketing. Chat with ...
So your security team is convinced it needs to graduate to the newest "best" enterprise security tool, I get it. But for most, this type of architecture shift requires careful planning and implementation. For legacy tools, you probably made concessions during onboarding, accepted risks and ...
This free one-hour Antisyphon Anti-cast with instructor Wade Wells offers an insightful overview of cyber threat landscaping, threat modeling, and threat profiling. Wade aims to equip attendees with the knowledge to identify, analyze, and counteract evolving cyber threats. Chat with your fellow attendees in the ...
Jeff reveals the five ways outside attackers gain internal access and outlines three core defender objectives: Discover actionable insights through three live, realistic breach demonstrations into detective controls and slowing down attackers. Total prevention would be ideal, but it's impossible. Focus on minimizing, detecting, and ...
Anyone (and we mean anyone) can create perfect forgeries of trusted websites and use them to spread misinformation, conduct phishing attacks, or worse. In this free one-hour Antisyphon Anti-Cast with instructor, Michael Allen, we'll explore the topic two ways: Part 1: For Blue Team Beginners, ...
In a realm where threats loom at every corner, where trust is a currency, and where the smallest oversight can lead to catastrophe, there is much to glean from the intricate tapestry of Westeros and the rich world of Game of Thrones. Drawing from two ...
Carrie Roberts is an Antisyphon instructor and experienced cyber security professional who has mentored many on their journey into cyber. Recently, she dug through countless free resources to document a high quality cyber learning path. Join us for a free one-hour Antisyphon Anti-Cast with Carrie ...
Join us for a free one-hour Antisyphon Anti-Cast with instructor Gerard Johansen on Cyber Security Incident Management. He'll show you the operational and strategic decision making that takes place during an incident. Specifically, he'll cover the critical role that the Incident Commander plays in leading ...
You will never see images the same again. Join us for a free one-hour Antisyphon Anti-Cast with instructor Mishaal Khan that will open your eyes and explore the dynamic realm of GEOINT (Geospatial Intelligence), a captivating subset of OSINT (Open Source Intelligence) that unlocks a ...
CI/CD (Continuous Integration and Continuous Delivery) is at the very heart of every DevOps strategy. Whether it includes security or not, security practitioners should have familiarity with CI/CD systems. Often these systems have implicit trust, or the “keys to the kingdom,” when it comes to ...
With the recent enhancements Microsoft has made to Active Directory security, staying hidden during a penetration test has gotten harder. Not only will some of the tried-and-true attacks fail outright, but those that succeed may leave signs that alert defenders. Join us for a free ...
We've all heard of Kubernetes, but for most of us it's a topic we've ignored by saying “I’ll figure out it is one day”. Unfortunately for our freetime, Kubernetes is actually worth learning in both an offensive and defensive security context as it's quickly taking ...
