Antisyphon Training

Anti-Cast: API-ocalypse Now with Jennifer Shannon
2023-09-20 12:00 - 13:00 (America/New_York)
Get ready for a wild ride as Jennifer Shannon, a Senior Security Consultant at Secure Ideas, presents “API-ocalypse Now.” In this thrilling and entertaining webcast, Jennifer will showcase the vulnerabilities lurking within APIs and the havoc they can wreak if left unaddressed. Through live pentesting demos, she will demonstrate jaw-dropping exploits, mind-bending injection attacks, and authentication bypass techniques that will leave you on the edge of your seat. Join Jennifer as she navigates the dark side of APIs to help you understand and fortify your attack surface in order to prevent the impending API-ocalypse.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

API-ocalypse Now with Jennifer ShannonDownload the slides here!

Anti-Cast: Credential Compartmentalization in Active Directory with Eric Kuehn
2023-09-13 12:00 - 13:00
When it comes to security, the goal is to make an attacker’s job as difficult as possible. The more hurdles they must jump through, the easier it should be to detect and stop them. Unfortunately, common practices around how and where privileged accounts are used in Windows environments reduces the race down to only a couple of jumps (or maybe just a sprint). We will talk about why device and account tiering is critically important for making a network a virtual obstacle course.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Credential Compartmentalization in Active Directory with Eric KuehnDownload the slides here!

Anti-Cast: The Wrong Beer to the Barbecue - BYOVD Attacks with Alissa Torres
2023-09-06 12:00 - 13:00
Based on recent threat reports, a growing number of bad actors are bringing vulnerable drivers to victim environments to exploit and guarantee a more successful attack path. These kernel drivers are legitimate, trusted and… vulnerable! Amazingly, some have CVEs dating back to 2015 or earlier. During this Anti-Cast, we will map out detection methods to identify and remove vulnerable drivers already present in your network AND devise prevent/block strategies to future-proof against BYOVD attacks.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

The Wrong Beer to the Barbecue with Alissa TorresDownload the slides here!

Anti-Cast: Exploring PowerShell Logging with TellTail with Carrie Roberts
2023-08-30 12:00 - 13:00
TellTail is a free and open source application that makes it easy to view and learn about PowerShell logging. In this webcast we will enable/disable the various PowerShell logging options and watch the effect it has on what gets logged. Come to this webcast to learn more about PowerShell Script Block and Module logging and how you can easily explore and learn on your own.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Exploring PowerShell Logging with TellTailDownload the slides here!

Anti-Cast: XFS Forensics with xfs_db with Hal Pomeranz
2023-08-16 12:00 - 13:00
Despite being a common Linux file system, forensic support for XFS is still largely lacking. In this session, Hal will describe how to turn the humble xfs_db tool into a useful forensic application for examining XFS file system internals and finding critical evidence. Attackers aren’t the only ones who can “live off the land”!

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

XFS Forensics with xfs_db with Hal PomeranzDownload the slides here!

Anti-Cast: Down with the CISO with Nathan Case
2023-08-09 12:00 - 13:00
Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Anti-Cast: Obtaining NETNLM Hashes by Asking Nicely with Qasim Ijaz and Jake Nelson
2023-08-02 12:00 - 13:00
Active Directory loves spewing hashes, all kinds of them. This talk will focus on NetNTLM (or NTLM, call it what you will) hashes. We’ll chat about how they can be obtained and used for privilege escalation and lateral movement. Here’s what we’ll cover:

What NetNTLM hashes are and how they fit into AD

Different ways to get NetNTLM hashes

Broadcast and multicast-based name resolution protocols

Coercion and elicitation (PetitPotam, DFSCoerce, shortcut files/ icons, and even Microsoft Word)

How to crack and relay NetNTLM hashes

How to defend yourself against these types of attacks

We’ll break down each topic and will demonstrate some tools and techniques you can use to get and utilize NetNTLM hashes.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Obtaining NetNTLM Hashes by Asking NicelyDownload the slides here!

Anti-Cast: OSINT Uncovered - Unlocking the Hidden Gems of Online Information with Mishaal Khan
2023-07-26 12:00 - 13:00
This Anti-Cast session explores advanced techniques and tools for extracting valuable information from diverse online platforms, social media, public databases, and breaches. By emphasizing responsible approaches to OSINT, attendees will learn how to navigate vast data sources, analyze digital footprints, and uncover the hidden gems of online information. Learn to harness the power of OSINT, as Mishaal walks you through some quick OSINT demos. Stalkers not allowed!

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

OSINT Uncovered with Mishaal KhanDownload the slides here!

Anti-Cast: The Symon Update is Here with Gerard Johansen
2023-07-19 12:00 - 13:00
The long-awaited update to Sysmon is here. Microsoft has recently released version 15. This updated version of the popular logging tool includes new features and provides responders insight into endpoint behavior. In this Anti-Cast, Gerard Johansen, digital forensics practitioner and course author of Enterprise Forensics and Response will walk through how Sysmon can aid in incident investigations. Gerard will provide an overview of Sysmon, including what data analysts can see, how to deploy and configure and finally looking at how Sysmon can aid in incident investigations. How configurations can be tailored. Local and remote acquisition of Sysmon log files and finally how to analyze various Tactics and Techniques commonly seen in incident investigations.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

The Sysmon Update is Here with Gerard JohansenDownload the slides here!

Anti-Cast: Forensicating Linux LD_PRELOAD Rootkits with Hal Pomeranz
2023-07-12 12:00 - 13:00
Widespread availability of PoC Linux LD_PRELOAD rootkits means that even trivial cryptomining attacks are starting to deploy them. This talk demonstrates a simple LD_PRELOAD rootkit and techniques for detecting them in a live response scenario and by memory analysis. Get the jump on your adversaries with this fast-paced, practical introduction.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Forensicating Linux LD_PRELOAD Rootkits with Hal PomeranzDownload the slides here!

Anti-Cast: Strengthening Your Blue Teaming Skills - Thinking Like an Attacker with Markus Schober
2023-06-28 12:00 - 13:00
This webcast will explore the vast amount of challenges faced by blue teamers and how they can stay ahead of the curve. Through a ransomware attack example, we’ll discuss the broad range of skills and knowledge needed to respond effectively to advanced threats. We’ll elaborate on how thinking like an attacker and employing a purple teaming approach for skills development has proven to be the best defense for many blue teamers. The session will conclude with a Q&A portion to provide answers on what and how blue teamers need to upskill.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Strengthening Your Blue Teaming Skills Thinking Like an AttackerDownload the slides here!

Anti-Cast: Linux Command Line Dojo - You Can Teach an Old Dog New Tricks with Hal Pomeranz
2023-06-21 12:00 - 13:00
If you’ve been using the Linux command line for a long time, you may have missed out on some sweet new features of common commands that can make your life much better. Join Sensei Hal as we break down some practical examples and demonstrate some useful new functionality.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Linux Command Line Dojo – You Can Teach an Old Dog New TricksDownload the slides here!

Anti-Cast: Is That Toaster on Your Threat Model? with Nathan Sweaney and Kathy Collins
2023-05-31 12:00 - 13:00

Anti-Cast: Enterprise Forensics and Response with Gerard Johansen
2023-05-03 12:00 - 13:00
In this Anti-Cast, Gerard Johansen will give you a glimpse of his upcoming training class, Enterprise Forensics and Response. Gerard’s course is designed to provide you with an understanding of the incident investigation process, objective oriented analysis and response, intrusion analysis and an exploration of attacker Tactics and Techniques.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Enterprise Forensics and Response with Gerard JohansenDownload the slides here!
