Join us for a free one-hour Antisyphon Anti-cast with instructor, Andrew Krug, as he teaches about the security controls, analytics, logging, and options for classifying data in the Amazon S3 service.
Join us for a free one-hour Antisyphon Anti-cast with instructor, Andrew Krug, as he teaches about the security controls, analytics, logging, and options for classifying data in the Amazon S3 service.
Join us for a free one-hour Antisyphon Anti-cast with instructor, Tim Fowler, where he'll teach you about free resources, open-source tools, and even affordable CubeSat kits.
Join us for a free one-hour training session with instructors, Kent Ickler and Jordan Drysdale, about Designing AD Job Functional Security: One Group for Least Privilege.
Get a behind the scenes look into Secure Coding to learn bypass techniques from red teamers or defense strategies from blue teamers at the Secure Code Summit 2024!
Join us for a free one-hour infosec training session from Trimarc’s Jake Hildreth on Finding and Fixing AD CS Issues with Locksmith.
Join us for a free one-hour training session with instructor, Amanda Berlin, about A Post-Incident Case Study for Small to Medium-sized Business (SMB) Response.
Join us for a free one-hour training session with Antisyphon Instructor, Patterson Cake, about The Anatomy of M365 Business Email Compromise
Join us for a free one-hour training session with Antisyphon instructor Tim Medin, from Red Siege, on the offensive tools that defenders should running, to identify high-impact security issues on their network.
Join us in this free one-hour Antisyphon Anti-cast with instructor, Andrew Krug, to talk through how you can decide what to move to the top of your security list in 2025 from the glut of new features recently released.
Join us for a free, one-hour training session with Antisyphon Instructor, Michael Allen, as he shares all the juicy details of that attack with you.
Wild West Hackin’ Fest is different from most cybersecurity conferences you have heard of or attended.
Join Mike Saunders of Red Siege and Daniel Lowrie of Antisyphon Training for a LIVE webcast/AMA to discuss the skills most needed by Red Teamers to be effective.
Join us for a free one-hour training session with Antisyphon instructor, Alissa Torres, for talk therapy for capturing and facing your ugly Known Unknowns.
Want to discover what life in a SOC is really like - beyond the marketing and myths?
Join us for a free one-hour training sessions with Antisyphon instructor, Hayden Covington, and other members of the Black Hills Information Security (BHIS) SOC team.
Join us for a free one-hour training session with Antisyphon Instructor, Tim Fowler, to learn and explore the growing importance of space cybersecurity, the real-world threats facing national security, and the evolving challenges that will define the future.
Summit: Summit Training: March 20 @ 9:00 am – March 21 @ 6:00 pm EDT Discover the Red Team Summit – A Free Event for Cybersecurity ProfessionalsDate: March 19th, 2025Time: 11 AM - 4 PM EDT Join us for the Red Team Summit, a full ...
Join us for a free one-hour training session, with Tim Pappa, where he'll introduce the foundations of how to build behaviorally based relationships of trust with online threat actors using content creation, and how to break or influence relationships or contact with online threat actors using content creation.
Join us for a free, one-hour Anticast with Ben Bowman as he explores the security risks of AI and how to mitigate them.
Dive into SDR, as Paul Clark takes you through why GNU Radio is a must-have tool for anyone interested in wireless technology.
In this one-hour Anticast, Kyle Hendrickson explains how a good defense is making your network messed up in a way they cannot even conceive of.
Join us for a free one-hour training session from Faan Rossouw, as he explores C2 frameworks and how they operate.
Join us for a free hands-on one-hour training session with Dr. Gerald Auger and he'll demystify auditing small business environments using CIS Controls 18.
Join us for a one-hour free Antisyphon training session with Dr. Dawn Beyer and Jacquelyn Blanchard, on Threat Modeling: Embracing Worst-Case Scenarios.
Join Patterson Cake for a one-hour, no-cost Antisyphon Anti-cast on "tactical forensics" in response to Windows and Linux endpoint security events.
Join us for a free one-hour training session by Fletus Poston, as he highlights the indispensable role of humans in AI-driven cybersecurity.
Join us for a free one-hour training session with Antisyphon instructors and AI security researchers Derek Banks and Brian Fehrman on attacking and defending AI systems.
Join us for a free, one-hour training session with Antisyphon instructors from Black Hills Information Security as they explain the real purpose behind the RoE, what critical questions to ask, and how to lock in clear, bulletproof expectations for your penetration tests.
Join us for a free one-hour Antisyphon Anticast with Dorota Kozłowska, on the human side of hacking.
Join us for a free one-hour training session with instructor Matt Toussain on how to use Sirius Scan to rocket from ground-floor recon to guardian-level dominance and take tactical control of your environment!
Join Jason Haddix for this free one-hour Antisyphon training session as he teaches his seven point methodology to assessing these systems and releases Arcanum’s prompt injection taxonomy and other resources for aspiring penetration testers.
Join Hal Denton for a free one-hour Antisyphon training session where he'll teach the top 3 Sysmon events every responder/detection engineer needs to focus on.
In-Person and Virtual Summit Training: July 21 @ 9:00 am – July 22 @ 6:00 pm EDT Career Summit: July 23 @ 9:00 am – 6:00 pm EDT PAY-FORWARD-WHAT-YOU-CAN TRAINING STARTING AT $25 Join us for the Antisyphon Summer Camp: Pay-Forward-What-You-Can Training with John Strand ...
Join us for a free one-hour training session with Tanya Janca where you'll learn 30 tips for writing more secure JavaScript, emphasizing what to do, what NOT to do, and utilizing open-source tooling to enhance security.
Join Markus Schober from Blue Cape Security for a free one-hour training session on "Investigating Insider Threats with Windows Forensics."
Join us for a free one-hour training session with instructor Hayden Covington (SOC SecOps Lead) on "From Reactive to Proactive: How to SOAR in a SOC."
Summit: August 27 @ 11:00 am – 4:00 pm EDT Live Training: August 28 @ 9:00 am – August 29 6:00 pm EDT We see you Blue Team. You wake up everyday and wonder, "what's it going to be today?" Let's gather together and share ...
Join us for a free one-hour technical demonstration exploring how large language models can assist security analysts and incident responders with endpoint investigations.
Join Nick Ascoli and Eric Clay from Flare for a free one-hour training session, "Unraveling Infostealer Threat Networks," where they'll show you the infostealer ecosystem — live inside the Flare platform.
Join us for a free one-hour training session with Faan Rossouw from Active Countermeasures, where he’ll cover the design of covert C2 channels, including key considerations and common pitfalls.
Have you wondered how deepfakes are being used in phishing, social engineering, and disinformation? Then this free one-hour training session with James McQuiggan is for you.
Join Kimber Amos for a free one-hour training on cutting through compliance theater and running reviews that actually strengthen defenses and keep auditors happy.
Join Black Hills Information Security (BHIS) Security Analysts Alyssa Snow and Kaitlyn Wimberley for a free one-hour training session on how attackers exploit Active Directory Certificate Services (ADCS).
Join us for a free 1-hour training session with instructor Tim Fowler, who will teach you about the emerging discipline of space red teaming.
Join us for a free one-hour training session with Cameron Cartier and Dave Blandford from Black Hills Information Security on Getting Started in iOS Mobile Application Testing.
This 1-hour Anti-Cast is a fast-paced, hands-on introduction to modern attack vectors against JavaScript-based desktop apps, primarily focusing on Electron.
Join us for a free one-hour training session with Jake Hildreth, Principal Security Consultant, on PKI Foundations for Security Professionals.
Join Black Hills Infosec (BHIS) pentesters Jordan Drysdale and Kent Ickler for a free one-hour training session as they unpack a year’s worth of penetration testing data: over 850 tests and more than 6,000 vulnerabilities.
Join instructor and BHIS Security Consultant Brian "BB" King for a free one-hour training session on web app penetration testing techniques using the browser’s JavaScript console.
Join Antisyphon instructor Troy Wojewoda (Black Hills Infosec – Incident Response) for a free one-hour training session on how to connect the big picture of network traffic with the detailed view of endpoint telemetry.
Join instructor Doc Blackburn for a free one-hour training session where he’ll break down binary, decimal, and hexadecimal systems using clear visuals and real-world examples from his upcoming Networking 101 course.
Join instructors Jordan Drysdale and Kent Ickler (Black Hills Information Security – Testers) for a free one-hour training session featuring a live demonstration of hacking tools in a speed run against a messy Active Directory domain.
Join instructor Faan Rossouw for a free one-hour training on hunting malware that uses DNS as a covert communication channel.
Join instructor Mishaal Khan for a free one-hour hands-on training session, where you'll navigate real-world scenarios and build an investigation mind map, incorporating email addresses, phone numbers, Google Maps, APIs, and online form abuse.
Join Hayden Covington (Black Hills Infosec - SOC SecOps Lead) for a free one-hour training session to learn how to augment security analysts with AI through practical, tested workflows.
Join instructor Kevin Klingbile to learn how attackers exploit weak mail flow rules and how to stop them.
Join Eric Kuehn, Principal Security Consultant at Secure Ideas, for a free one-hour training session that takes a deep dive into the security enhancements Microsoft has introduced to Active Directory over the past few years and how they are reshaping the way penetration testers and defenders operate.
Join AI researchers Brian Fehrman and Derek Banks for a free one-hour training session that breaks down the OWASP Top 10 AI-LLM risks clearly and practically.
Join us for a free one-hour training session with incident management expert and instructor Gerard Johansen, where he'll teach how to adapt your Incident Response plan to AI-related risks and threats.
Join us for a free one-hour training session with James McQuiggan, CISSP and Advisory CISO, as he teaches you the full lifecycle of North Korea’s AI-enabled IT worker operation, from AI-generated identities and U.S.-based laptop farms to the data theft and extortion that follow once they’re inside.
Join Antisyphon instructor and security researcher Andrew Krug for a free one-hour Anti-cast on what really happens when AI collides with cloud security.
Join Patterson Cake, Black Hills Infosec Director of Incident Response, for a technical session outlining a prioritized approach to endpoint investigations, focusing on where and how unauthorized access and activity impact Windows and Linux.
Summit: March 25 @ 10:00 am – 4:00 pm EDT Live Training: March 26 – April 10 Security Operations Centers are where defenders grow, pressure is real, and impact matters. The Antisyphon Training SOC Summit is a free, 6-hour, live virtual event designed to give ...
In this 25-minute technical presentation, Seth Williams will walk through hands-on email forensics using Sublime Security’s free EML Analyzer, teaching you how to break down raw email files to uncover the true mechanics of phishing, malware delivery, and social engineering attacks.
Join Ashley Knowles, a Black Hills InfoSec Security Consultant, for a 25-minute technical presentation where she will draw on real-world penetration testing experience to help you close coverage gaps.
Join Wade Wells (Staff Detection & Response Engineer) for a 25-minute, conversational walk-through of how AI can boost every part of the detection lifecycle, from generating new detection ideas and tightening logic to evaluating coverage, finding blind spots, and automating documentation.
Join Ched Wiggins (Security Operations Center Lead) for a 25-minute, technical presentation on how to analyze email contents for indicators and clues in order to ensure the minimal number of suspicious emails enter your user's Inbox.
In this 25-minute technical presentation, Bruce Potter, CEO and founder of Turngate, will examine the impact of good and bad UI on security operations.
Join Troy Wojewoda (Black Hills Infosec Incident Responder/Threat Hunter/Intelligence/SOC Principal Analyst) for a 25-min technical presentation on the practical use of YARA for incident response and threat hunting.
Join Santiago Bassett (founder and CEO of Wazuh) for a 25-min deep dive into how SOC teams can prevent attacks before they happen by combining real-time vulnerability detection, security configuration assessment, and posture management
Join Dan Rearden, ProCircular SOC Analyst Tier II, for a technical 25-min presentation on Sigma Rules and their application to your Security Information and Event Management (SIEM).
Join Hayden Covington, Black Hills Infosec SOC SecOps Lead, for a technical session on the practical workflow of transforming threat intelligence into detections.
In this 25-minute technical presentation, Carrie Roberts (Senior Distinguished InfoSec Engineer) will teach you how to leverage the power of the open-source Atomic Red Team library to execute scripted, realistic cyber-attacks within your own environments.
Join SOC Analyst Dan Rearden for a free one-hour Antisyphon Anti-cast on using soft skills to level up your tickets.
Join us for a free one-hour training session to learn why security isn’t a product, why prevention is a fantasy, why encryption fixes almost nothing, and why your biggest risk might be you.
Join us for a free one-hour training session with instructor Carrie Roberts, Developer and InfoSec Engineer, as she teaches you how GitHub Copilot is changing what it means to "know how to code" and show you how to put it to work in your browser right now, with no setup required.
Join Patterson Cake, Director of Incident Response at Black Hills Infosec, as he guides through his “rapid endpoint investigations” workflow for the “other” (not Windows) Operating System…*Nix (Linux/Mac).
Join Natalia Samman, licensed psychotherapist-turned-burnout-coach and cybersecurity specialist, for an hour of practical tools on how to ditch the stress, stay ahead of your workload, and stop dreading Mondays.
Join Wade Wells, Staff Detection Engineer, for a free one-hour training where he’ll teach you a practical system to evaluate cybersecurity news, vendor reports, and threat intel.
Join Alethe Denis, DEF CON Black Badge-winning social engineer and Senior Security Consultant II at Bishop Fox, as she breaks down how to build pretexts that hold up under real-world pressure in physical red team engagements.
Join Corey Overstreet, Senior Security Consultant at Red Siege, for a free one hour training session on how red teamers quietly bypass controls, evade detection, and exploit common tools in subtle and creative ways.
Join Faan Rossouw, creator of aionsec.ai, as he walks you through how agentic AI removes the constraint that limited threat hunting's impact for over a decade and what that means for how you build, design, and hunt.
Join Phil Miller for a free one-hour training on using CI/CD across the Software Development Lifecycle (SDLC) to build offensive security tools, then learn how those same pipelines can be attacked.
Join Paul Clark, co-author of Practical SDR, as he demonstrates how to capture, decode, and retransmit a wireless signal to take control of a real device — cutting power to a wirelessly-controlled outlet the same way an attacker would disable a sensor, lock, or other building system.
Join David Bianco, cybersecurity researcher with Cisco’s SURGe team, as together we re-examine the role of the human in threat hunting.
Summit: June 17 @ 10:00 am – 4:30 pm EDT Live Training: June 18 - 26 Is your security posture proactive or reactive? Threat hunting is where defenders assume compromise, search beyond alerts, and uncover attackers hiding in plain sight. It’s how modern security teams ...
Join Faan Rossouw, creator of aionsec.ai, as he walks you through how agentic AI frameworks can automate the grind, expand your investigative reach, and help you operate at a scale no individual threat hunter can match.
Join Jamie Levy, Senior Director of Adversary Tactics at Huntress and Core Developer of the Volatility project, for a technical session outlining how to analyze memory samples of infected machines quickly and efficiently.
Join Sydney Marrone, Head of Threat Hunting at Nebulock, as she introduces the LOCK pattern (Learn, Observe, Check, Keep), a lightweight framework for turning every investigation into a persistent, markdown‑based record your AI can actually use.
Join Hermon Kidane, Network Threat Hunter at Active Countermeasures, as he walks you through a practical approach to finding covert command and control channels using RITA and Zeek telemetry.
Join Shane Hartman, Principal IR Consultant at TrustedSec, as he turns threat hunting from guesswork into a disciplined, hypothesis‑driven process.
Join Patterson Cake (Director of IR, BHIS), Troy Wojewoda (Incident Responder, Threat Hunter, and SOC Principal Analyst, BHIS), John Danyluk (Partner, Gentry Locke), and David Vanalek (Chief Legal and Compliance Officer, Richmond National Insurance) for a fast‑paced, candid panel discussion that demystifies the legal and insurance decisions every defender eventually faces.
In this talk, Lauren Proehl, Global Head of Detection and Response at Marsh and co‑founder of THOR Collective, walks through a practical, repeatable workflow for using large language models to convert published threat reports into structured, testable hunt hypotheses.
Join Jason Haddix, CEO and “Hacker in Charge” at Arcanum Information Security, as he lays out a practical architecture for defending AI agents based on real-world assessments and organizing controls across the full ecosystem: application design and tool boundaries, system prompt hardening, and intermediate guardrails and classifier-based protections.
In this Anti-Cast, Bronwen Aker, AI Researcher at BHIS, will take you beyond prompting fundamentals and move into more advanced prompt techniques designed for real-world use.
Join Evan Kirstein, Mesh Networking Practitioner & Amateur Radio Operator (KJ5MCN), and Luke Canfield, Tactical UAS Researcher & Defense Systems Analyst, for a free one‑hour Anti-Cast where they’ll walk you through a practical, field‑tested approach to re‑establishing connectivity using two accessible technologies: 3D‑printable FPV airframes and Meshtastic (LoRa) mesh radios.
Join Markus Schober, founder of Blue Cape Security and former enterprise incident responder, demonstrates why both AI and human analysts draw incorrect conclusions from Windows forensic artifacts, and how proper correlation leads to more defensible investigations.
Join Ashley Wolfe, OT/ICS security practitioner and researcher, as she breaks down why OT security proposals keep dying in conference rooms — and how to walk in with something that actually sticks. In one hour, you'll leave with a threat scenario that fits your industry, a number you can put on inaction, and a first step that doesn't need budget approval.
In this Anti-Cast, Bronwen Aker, AI Researcher at BHIS, will take you beyond prompting fundamentals and move into more advanced prompt techniques designed for real-world use.
Join Ads Dawson of Dreadnode and Mike Takahashi of Zenity — ranked among the top bug bounty hunters on HackerOne and Mozilla's AI programs — as they break down a year's worth of data exfiltration bugs found across production AI applications, showing how the same primitive behind XSS now lets attackers steal PII, business data, and private messages through AI agents.
Summit: August 14 @ 10:00 am – 4:30 pm EDT How do you secure a future that is already here? AI is changing how organizations operate, how defenders protect systems, and how attackers identify and exploit opportunities. New capabilities, new risks, and new questions are ...
Join Ethan Robish, Black Hills Infosec former pentester and current SOC architect, for a technical session on the scaffolding, guardrails, and processes that turn agentic coding from a novelty into a production-grade workflow.
In this session, Hayden Covington, Associate Director of Security Operations at the BHIS SOC, will walk through how to design custom agents for real security operations work: triage support, detection engineering, enrichment workflows, reporting, research, and review-heavy operational tasks. The focus is not magic prompts or over-engineered instructions; it is the engineering work behind useful agents. Powerful agents have clear roles, bounded authority, durable memory, tool access, handoff points, review gates, and failure modes that operators can actually relate to.
Do you dread writing incident response documentation? Gerard Johansen of IR Proactive shows how LLMs can quickly create, refine, and validate incident response policies, plans, workflows, and communications playbooks.
Join Faan Rossouw (aionsec.ai) for a 25-minute, demo-driven session on a blind spot in every security system that puts an LLM agent in the analysis loop: the data the agent reads is partly authored by the adversary, which turns your own telemetry into a potential prompt-injection channel.
