Based on a compromised employee workstation scenario, we'll discuss how to conduct an effective DFIR investigation within enterprise environments, following the incident response lifecycle. We'll discuss triage and containment considerations, as well as elaborate on best practices for performing effective data collections and forensic analysis. ...
This Anti-Cast jumps right into writing a linux 32Bit shellcode, for adding a new uid 0 user to the system passwd file. With 20 years of experience in the field, Marco has developed a strong interest in computer security, hacking, and penetration testing. Throughout his ...
The Swiss cheese model, developed in 1990 by James Reason, is based on the idea that errors can never be eliminated entirely due to complex systems but are instead “layered” like slices of swiss cheese. This model has become a well-known concept in the field ...
In the ever-evolving landscape of professional development, the triad of education, experience, and networking emerges as a foundational pillar for career growth and success. This free one-hour Antisyphon Anti-Cast delves into the intricate interplay of these three crucial elements, exploring how they individually and collectively ...
Join us for an in-depth exploration in 'Sharpening Your Skills: Web PenTesting with SamuraiWTF,' where we dive into the techniques and tools for web application security. This talk is specially designed for those eager to elevate their web penetration testing skills using the OWASP Samurai ...
In a world where web applications are the new battleground. Hackers are constantly looking for ways to exploit them and steal your secrets, sabotage your network, or harm your customers. But you are not alone... Jennifer Shannon is here to help you fight back. In ...
In this free one-hour Antisyphon Anti-Cast, Gerard Johansen, Principal Readiness Engineer for Red Canary and Antisyphon instructor, will run through how threat actors use the Windows Management Instrumentation (WMI) for Lateral Movement and Persistence. Gerard will walk through how threat actors use WMI, what trace ...
In every cloud, Identity and Access Management are incredibly challenging for the most skilled practitioners. In this free one-hour Antisyphon Anti-Cast we’ll review different cloud provider identity and access paradigms, look at the systems for granting access, and where the pitfalls are. We’ll review the ...
If you want to master the art of penetration testing, you need to know how to exploit Active Directory (AD). It's the backbone of most networks and it holds the keys to the kingdom. But cracking it is not always easy. You need to use ...
The Linux-guru, Hal Pomeranz, returns for a free one-hour Antisypon Anti-cast! As if Linux didn’t already have enough task scheduling mechanisms, we now have “timers”—a highly configurable task scheduling mechanism implemented by Systemd. Threat actors are already starting to use Systemd timers for persistence. Hal ...
The Windows Search Indexer service does not just provide a fast way to locate and access a misplaced file, this service’s database holds tremendous forensic value for host investigations. With the recent introduction of efficient parsing tools, analysts can gain access to these gems from ...
In this free one-hour Antisyphon Anti-cast, Jay Beale - InGuardians CTO, will teach you how to use the latest container escape, "Leaky Vessels" (CVE-2024-21626), to break out of a Kubernetes pod and attack the cluster. He'll also introduce KubeHound and Peirates, two Kubernetes security tools. ...
