In this free one-hour Antisyphon Anti-Cast, Gerard Johansen, Principal Readiness Engineer for Red Canary and Antisyphon instructor, will run through how threat actors use the Windows Management Instrumentation (WMI) for Lateral Movement and Persistence. Gerard will walk through how threat actors use WMI, what trace ...
In every cloud, Identity and Access Management are incredibly challenging for the most skilled practitioners. In this free one-hour Antisyphon Anti-Cast we’ll review different cloud provider identity and access paradigms, look at the systems for granting access, and where the pitfalls are. We’ll review the ...
If you want to master the art of penetration testing, you need to know how to exploit Active Directory (AD). It's the backbone of most networks and it holds the keys to the kingdom. But cracking it is not always easy. You need to use ...
The Linux-guru, Hal Pomeranz, returns for a free one-hour Antisypon Anti-cast! As if Linux didn’t already have enough task scheduling mechanisms, we now have “timers”—a highly configurable task scheduling mechanism implemented by Systemd. Threat actors are already starting to use Systemd timers for persistence. Hal ...
The Windows Search Indexer service does not just provide a fast way to locate and access a misplaced file, this service’s database holds tremendous forensic value for host investigations. With the recent introduction of efficient parsing tools, analysts can gain access to these gems from ...
In this free one-hour Antisyphon Anti-cast, Jay Beale - InGuardians CTO, will teach you how to use the latest container escape, "Leaky Vessels" (CVE-2024-21626), to break out of a Kubernetes pod and attack the cluster. He'll also introduce KubeHound and Peirates, two Kubernetes security tools. ...
In this free one-hour Antisyphon Anti-Cast, Tim Fowler - Black Hills Information Security: Security Analyst, will explore the versatile world of software-defined radio (SDR) and its application in satellite communication. After an introduction to SDR, its capabilities, and advantages over traditional radio systems, the discussion ...
Tune in to 'Radioactive Vulnerabilities - Learn Secure Coding', a free one-hour Antisyphon Anti-Cast that shares the tragic story of the Therac-25 radiation therapy incidents and how those incidents can teach us the significance of security testing before technology deployment. During this interactive Anti-Cast, we ...
Velociraptor has been around for some time now, but still too few practitioners have realized its full potential. Furthermore, new and awesome features added recently nearly double its potential as an incident response (IR) Swiss Army Knife. In this free one-hour Antisyphon Anti-Cast with Eric ...
Imagine, if you will, you’re a pen tester, and you’ve gained access to a Windows application server. Your discovery includes a deployed application allow listing, and a strong defensive solution stack. Your excitement increases as you find an installed Python interpreter. Wouldn’t it be fantastic ...
We hear more and more about how to incorporate security into every phase of the software development lifecycle, but: Where do you start? What’s a priority? How do I implement this? All of these are common questions asked frequently by new cloud practitioners looking to ...
Join us for a free one-hour Antisyphon Anti-Cast with Bill McCauley, as he dives into the realm of application security from Secure Ideas' foundational training class. He'll also navigate through the OWASP Top 10 application security vulnerabilities, shedding light on common pitfalls and providing practical ...
