Antisyphon Training

Anti-Cast: W.T.F. Is a Kubernete and How Do I Attack It? with Graham Helton
2024-08-21 12:00 - 13:00 (America/New_York)
We’ve all heard of Kubernetes, but for most of us it’s a topic we’ve ignored by saying “I’ll figure out it is one day”.

Unfortunately for our freetime, Kubernetes is actually worth learning in both an offensive and defensive security context as it’s quickly taking over as the primary way organizations deploy applications.

Join us for a free one-hour Antisyphon Anti-Cast, with Graham Helton, as he embarks on a Kubernetes crash course.

Attendees will gain a high level understanding of what Kubernetes is (without any pre-existing Kubernetes knowledge) and learn how to effectively hack into a real Kubernetes cluster (uh… with permission of course).

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Anti-Cast: New Methods to Attack and Defend Active Directory with Eric Kuehn
2024-08-07 12:00 - 13:00
With the recent enhancements Microsoft has made to Active Directory security, staying hidden during a penetration test has gotten harder.

Not only will some of the tried-and-true attacks fail outright, but those that succeed may leave signs that alert defenders.

Join us for a free one-hour Antisyphon Anti-cast, with instructor Eric Kuehn, as he dives into the nitty-gritty of these changes and demonstrate how they can impact tests.

For the penetration tester, it’s a chance to see how we should refine our attacks; for the defender, it’s the opportunity to see what new events could be signs of a breach.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Anti-Cast: Securing Speed: Safeguarding CI/CD Pipelines for Robust Software Delivery with Andrew Krug
2024-07-24 12:00 - 13:00
CI/CD (Continuous Integration and Continuous Delivery) is at the very heart of every DevOps strategy.

Whether it includes security or not, security practitioners should have familiarity with CI/CD systems. Often these systems have implicit trust, or the “keys to the kingdom,” when it comes to forming resources in cloud environments.

Join us for a free one-hour Antisyphon Anti-Cast, with instructor Andrew Krug, where he’ll explain best practices for CI/CD, detail common pitfalls, and get hands-on with GitHub Actions + Cloud Providers.

Andrew will cover common best practices for project layouts and discuss do’s and don’ts.

You’ll leave with a firm understanding of how to properly federate identity – in a safe way with cloud providers.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Safeguarding CI CD Pipelines for Robust Software DeliveryDownload the slides here!

Anti-Cast: Getting Started in Geospatial Intelligence - GEOINT with Mishaal Khan
2024-07-17 12:00 - 13:00
You will never see images the same again.

Join us for a free one-hour Antisyphon Anti-Cast with instructor Mishaal Khan that will open your eyes and explore the dynamic realm of GEOINT (Geospatial Intelligence), a captivating subset of OSINT (Open Source Intelligence) that unlocks a wealth of hidden insights within images and videos.

From identifying objects, landscapes, and aircraft to interpreting symbols, shadows, and reflections, we’ll explore the various types of backgrounds and skills required to be great at GEOINT.

Learn how to decode the language of trees, signs, text and logos, and uncover the strategic implications behind seemingly mundane details using common browser tools.

This Anti-Cast promises to equip you with mind-blowing skills that you can easily learn as Mishaal takes you through multiple examples.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Getting Started in Geospatial Intelligence (GEOINT) Download the slides here!

Anti-Cast: Cyber Security Incident Management with Gerard Johansen
2024-07-10 12:00 - 13:00
Join us for a free one-hour Antisyphon Anti-Cast with instructor Gerard Johansen on Cyber Security Incident Management.

He’ll show you the operational and strategic decision making that takes place during an incident.

Specifically, he’ll cover the critical role that the Incident Commander plays in leading an organization through an incident.

He’ll detail the eight-phase Incident Response Leading Procedures, covering the key tasks for the Incident Commander, CSIRT, and other personnel to restore organizational operations.

We’ll conclude the Anti-Cast by discussing how to practice this process through Tabletop exercises.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Cyber Security Incident Management_Gerard JohansenDownload the slides here!

Anti-Cast: Get an Epic Cyber Education for Free - Almost - with Carrie Roberts
2024-06-26 12:00 - 13:00
Carrie Roberts is an Antisyphon instructor and experienced cyber security professional who has mentored many on their journey into cyber.

Recently, she dug through countless free resources to document a high quality cyber learning path.

Join us for a free one-hour Antisyphon Anti-Cast with Carrie as she shares her recommended list of resources as well as other low cost training options.

Lastly, she will give hints on how to get a college degree quickly and at minimal cost, while earning more than 10 cyber certifications at the same time!

Come join in this free mentoring session with Carrie.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Get an Epic Cyber Education for Free (almost)_Carrie RobertsDownload the slides here!

Anti-Cast: What Game of Thrones Can Teach us About Cybersecurity with Dr. Gerald Auger
2024-06-12 12:00 - 13:00
In a realm where threats loom at every corner, where trust is a currency, and where the smallest oversight can lead to catastrophe, there is much to glean from the intricate tapestry of Westeros and the rich world of Game of Thrones.

Drawing from two decades in the cybersecurity arena, this presentation delves deep into the parallels between the worlds of “Game of Thrones” and today’s cyber ecosystems. Just as the Houses of Westeros must continuously adapt to political and martial threats, organizations today must be agile in response to an ever-evolving cyber landscape.

Participants will embark on a journey through the Seven Kingdoms, using pivotal moments and iconic characters from the series to illuminate key lessons in cybersecurity, and communicate valuable cybersecurity principles.

In the realms of Westeros and cybersecurity alike, the night is dark and full of terrors – but with preparation and wisdom, one can navigate and overcome them.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

What Game of Thrones Can Teach us About CybersecurityDownload the slides here!

Anti-Cast: How to Forge Fake News and Spawn Flawless Phisheries with Michael Allen
2024-06-05 12:00 - 13:00
Anyone (and we mean anyone) can create perfect forgeries of trusted websites and use them to spread misinformation, conduct phishing attacks, or worse.

In this free one-hour Antisyphon Anti-Cast with instructor, Michael Allen, we’ll explore the topic two ways:

Part 1: For Blue Team Beginners, Family, and Friends

A demonstration of how ridiculously easy it is to create a fake news story

Learn to quickly identify potential forgeries, so you don’t get tricked

Part 2: For Rebellious Red Teamers 😈

Take things a few steps further to create perfectly forged landing pages for phishing campaigns, with absolute minimum time and effort

Explore the defenses that get phishing campaigns and landing pages caught, and learn how to avoid detection

Pulled directly from Michael’s class – “Red Team Initial Access” – Michael teaches how to utilize the very same techniques the Black Hills Information Security (BHIS) red team uses every day to break into heavily defended networks over the internet.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Michael Allen – How to Forge Fake News and Spawn Flawless PhisheriesDownload the slides here!

Anti-Cast: Realistic End-to-End Attacks & Detective Controls with Jeff McJunkin
2024-05-29 12:00 - 13:00
Jeff reveals the five ways outside attackers gain internal access and outlines three core defender objectives:

Reducing initial access

Lowering detection and response time

Slowing down the attackers

Discover actionable insights through three live, realistic breach demonstrations into detective controls and slowing down attackers.

Total prevention would be ideal, but it’s impossible.

Focus on minimizing, detecting, and accelerating response to incidents.

Additional resources on credential stuffing, threat hunting, slowing down attackers, and more, will be featured.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Realistic End-to-End Attacks and Detective ControlsDownload the slides here!

Anti-Cast: Threat Models, Landscape, and Profiles OH MY with Wade Wells
2024-05-15 12:00 - 13:00
This free one-hour Antisyphon Anti-cast with instructor Wade Wells offers an insightful overview of cyber threat landscaping, threat modeling, and threat profiling.

Wade aims to equip attendees with the knowledge to identify, analyze, and counteract evolving cyber threats.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Threat Models, Landscape, and Profiles OH MY_FINALDownload the slides here!

Anti-Cast: Security Split Divorcing Your Stack with Alissa Torres
2024-05-01 12:00 - 13:00
So your security team is convinced it needs to graduate to the newest “best” enterprise security tool, I get it.

But for most, this type of architecture shift requires careful planning and implementation.

For legacy tools, you probably made concessions during onboarding, accepted risks and grew product-specific dependencies.

Join us for a free one-hour Antisyphon Anti-cast with instructor, Alissa Torres, as she explains how to quantify the extent of your entanglement with your old flame(s) and how to smoothly onboard your next new thing.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

2024_05_01_anticast_Security Split Divorcing Your Stack_Alissa TorresDownload the slides here!

Anti-Cast: Learning from Macedonia: How InfoSec Fails Spawn from Sales & Marketing with Kevin Johnson and John Strand
2024-04-24 12:00 - 13:00
Join us for a free one-hour Antisyphon Anti-Cast, with John Strand and Kevin Johnson.

Learn how exaggeration undermines trust and efficiency. Using Alexander the Great’s empire as an analogy, we highlight how overselling creates unrealistic expectations while critical vulnerabilities remain masked by marketing.

Empower yourselves with skills to challenge deceptive claims

Learn how to critically evaluate infosec products and assertively address issues

Together, we can promote honesty in the industry and fend off the snake oil

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Learning from Macedonia: How InfoSec Fails Spawn from Sales & MarketingDownload the slides here!

Anti-Cast: Operationalizing Threat Intelligence with Derek Banks and Troy Wojewoda
2024-04-24 12:00 - 13:00
Got a threat intel feed and scared to use it?

No context on atomic indicators from your threat intel feed in your SIEM got you down?

Not sure what threat intelligence even means?

Join us for a free one-hour Antisyphon Anti-Cast, with instructors Derek Banks and Troy Wojewoda, to gain insight on how they both produce and use various forms of threat intel at Black Hills Information Security (BHIS).

They’ll show you how we use atomic indicators and how Black Hills operationalizes more complex Tools, Techniques, and Procedures (TTPs) and provide examples of custom alerts that they use in the SOC that come from real-world threat actors.

If you have questions about threat intelligence, please join us live and ask our instructors!

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Operationalizing Threat IntelligenceDownload the slides here!

Anti-Cast: Hands on with the NIST Cybersecurity Framework 2.0 with Nathan Sweaney
2024-04-17 12:00 - 13:00
How do you measure cybersecurity maturity?

Are you improving or falling behind?

What should you prioritize next?

In this free one-hour Antisyphon Anti-Cast with instructor, Nathan Sweaney, he’ll explore the NIST Cybersecurity Framework 2.0 and practical applications for measuring your cybersecurity posture.

Attendees will gain a firm understanding of the CSF and how to leverage it to drive improvements in their organization.

Nathan will also discuss the newly included concepts of Tiers and Profiles to tailor the CSF to your needs.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Hands on with the NIST Cybersecurity Framework 2-0_Nathan SweaneyDownload the slides here!

Anti-Cast: Secure Ideas Foundational Application Security Training with Bill McCauley
2024-04-10 12:00 - 13:00
Join us for a free one-hour Antisyphon Anti-Cast with Bill McCauley, as he dives into the realm of application security from Secure Ideas’ foundational training class.

He’ll also navigate through the OWASP Top 10 application security vulnerabilities, shedding light on common pitfalls and providing practical strategies to mitigate risks.

Additionally, attendees will gain valuable insights into the realm of professional penetration testing, discovering how it can enhance their security posture.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Secure Ideas Foundational Application Security Training with Bill McCauleyDownload the slides here!

Anti-Cast: AWS Cloud - DevSecOps Essentials with Andrew Krug
2024-04-03 12:00 - 13:00
We hear more and more about how to incorporate security into every phase of the software development lifecycle, but:

Where do you start?

What’s a priority?

How do I implement this?

All of these are common questions asked frequently by new cloud practitioners looking to build securely in their environments.

Join us for a free one-hour Antisyphon Anti-Cast with instructor, Andrew Krug, as he explores the fundamentals of DevSecOps as they relate to the AWS Cloud.

You’ll will gain an understanding of CI/CD architecture, how to implement that architecture securely, and get familiar with a variety of tools they can run to ensure that high velocity and security can exist in the same environment.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

AWS Cloud – DevSecOps Essentials with Andrew KrugDownload the slides here!

Anti-Cast: Re-encoding Python Shellcode Execution with Joff Thyer
2024-03-27 12:00 - 13:00
Imagine, if you will, you’re a pen tester, and you’ve gained access to a Windows application server.

Your discovery includes a deployed application allow listing, and a strong defensive solution stack.

Your excitement increases as you find an installed Python interpreter.

Wouldn’t it be fantastic if you could use that Python interpreter to execute your favorite C2 framework shellcode, allowing you to utilize your normal hacking toolset?

You’ve tried all your normal Python tricks, however barriers persist.

Let’s re-encode our shellcode for better success, in this free one-hour Antisyphon Anti-Cast, Re-encoding Python Shellcode Execution with Joff Thyer.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Re-encoding Python Shellcode Execution with Joff ThyerDownload the slides here!

Anti-Cast: Threat Hunting with Velociraptor with Eric Capuano and Whitney Champion
2024-03-20 12:00 - 13:00
Velociraptor has been around for some time now, but still too few practitioners have realized its full potential.

Furthermore, new and awesome features added recently nearly double its potential as an incident response (IR) Swiss Army Knife.

In this free one-hour Antisyphon Anti-Cast with Eric Capuano and Whitney Champion, they’ll share tips and tricks for getting instant value with Velociraptor, as well as updates they have planned for their next THVR course at Wild West Hackin’ Fest!

Eric Capuano is the CTO and co-founder of Recon InfoSec. He is also a certified SANS instructor of Digital Forensics and Incident Response, and a former Cyber Warfare Operator in the Texas Air National Guard.

Whitney Champion is a security architect, engineer, developer, and co-founder of Recon InfoSec.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Anti-Cast: Radioactive Vulnerabilities - Learn Secure Coding with Jennifer Shannon and Kathy Collins
2024-03-06 12:00 - 13:00
Tune in to ‘Radioactive Vulnerabilities – Learn Secure Coding’, a free one-hour Antisyphon Anti-Cast that shares the tragic story of the Therac-25 radiation therapy incidents and how those incidents can teach us the significance of security testing before technology deployment.

During this interactive Anti-Cast, we always encourage our viewers to engage with our instructors and hosts, so please join us and ask questions while Jennifer and Kathy explore:

1. The need for security testing in software development

2. Ways to implement security throughout development

3. Understand the need to stay updated for industry best practices

We’re excited to learn with you!

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Radioactive Vulnerabilities – Learn Secure CodingDownload the slides here!

Anti-Cast: Intro to Software Defined Radio (SDR) for Space Signals Analysis with Tim Fowler
2024-02-28 12:00 - 13:00
In this free one-hour Antisyphon Anti-Cast, Tim Fowler – Black Hills Information Security: Security Analyst, will explore the versatile world of software-defined radio (SDR) and its application in satellite communication.

After an introduction to SDR, its capabilities, and advantages over traditional radio systems, the discussion shifts to practical application of using SDR for tapping into satellite signals.

Attendees will learn about the types of satellites that can be monitored, the setup process, and the necessary equipment and software for successful satellite reception.

This Anti-cast includes real-life examples and demonstrations, offering a hands-on understanding of capturing and decoding satellite signals.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

2024-02-28_anticast_Intro to Software Defined Radio (SDR) for Space Signals Analysis_Tim FowlerDownload the slides here!

Anti-Cast: How to Use 'Leaky Vessels' for Container Escape in Kubernetes with Jay Beales
2024-02-21 12:00 - 13:00
In this free one-hour Antisyphon Anti-cast, Jay Beale – InGuardians CTO, will teach you how to use the latest container escape, “Leaky Vessels” (CVE-2024-21626), to break out of a Kubernetes pod and attack the cluster.

He’ll also introduce KubeHound and Peirates, two Kubernetes security tools. You’ll learn how to use KubeHound to find multi-step attack paths through a Kubernetes cluster.

On the defensive side, KubeHound is even more useful for finding those weak configurations so you can correct them.

Finally, you’ll see how to use Peirates (included in Kali Linux) to exploit those attack paths.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Webinar-LeakyVessels-KubeHound-peiratesDownload the slides here!

Anti-Cast: For the Love of the Windows Search Index with Alissa Torres
2024-02-14 12:00 - 13:00
The Windows Search Indexer service does not just provide a fast way to locate and access a misplaced file, this service’s database holds tremendous forensic value for host investigations.

With the recent introduction of efficient parsing tools, analysts can gain access to these gems from the Indexer database: directory/file metadata, content file summaries and user browser/activity logs.

Join Alissa Torres in this free one-hour Antisyphon Anti-Cast to learn how the Windows Search Index can augment your investigations. Fall in love with this under-rated artifact.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

2024_02_14_anticast_For the Love of the Windows Search Index_Alissa TorresDownload the slides here!

Anti-Cast: All About Systemd Timers with Hal Pomeranz
2024-02-07 12:00 - 13:00
The Linux-guru, Hal Pomeranz, returns for a free one-hour Antisypon Anti-cast!

As if Linux didn’t already have enough task scheduling mechanisms, we now have “timers”—a highly configurable task scheduling mechanism implemented by Systemd. Threat actors are already starting to use Systemd timers for persistence.

Hal will cover the basics of configuring Systemd timers and how they operate, plus forensic indicators you can look for to find any timers deployed in your systems.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

2024_02_07_anticast_All About Systemd Timers_Hal PomeranzDownload the slides here!

Anti-Cast: Active Directory Hacking-3 'New' Techniques with Eric Kuehn
2024-01-31 12:00 - 13:00
If you want to master the art of penetration testing, you need to know how to exploit Active Directory (AD).

It’s the backbone of most networks and it holds the keys to the kingdom. But cracking it is not always easy.

You need to use the right tools and techniques for the job.

In this free one-hour Antisyphon Anti-Cast, you’ll learn 3 different ways that can help you extract valuable information from AD, modify its settings and gain full control over the network.

This Anti-Cast comes with practical demos and tips that will boost your hacking skills.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

2024_01_31_anticast_Active Directory Hacking-3 ‘New’ Techniques_Eric KuehnDownload the slides here!

Anti-Cast: Cloud Identity Management for Everyone with Andrew Krug
2024-01-24 12:00 - 13:00
In every cloud, Identity and Access Management are incredibly challenging for the most skilled practitioners.

In this free one-hour Antisyphon Anti-Cast we’ll review different cloud provider identity and access paradigms, look at the systems for granting access, and where the pitfalls are.

We’ll review the various grammars as well and demystify IAM for any user of any cloud.

Attendees will leave with a firm understanding of how to go beyond the defaults.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Anti-Cast: WMI Abuse: How Threat Actors Use WMI with Gerard Johansen
2024-01-17 12:00 - 13:00
In this free one-hour Antisyphon Anti-Cast, Gerard Johansen, Principal Readiness Engineer for Red Canary and Antisyphon instructor, will run through how threat actors use the Windows Management Instrumentation (WMI) for Lateral Movement and Persistence.

Gerard will walk through how threat actors use WMI, what trace evidence is left and how to analyze WMI abuse.

Finally, Gerard will walk through some demonstrations using Atomic Red Team and forensic tools.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

2024_01_17_anticast_WMI Abuse-How Threat Actors Use WMI_Gerard JohansenDownload the slides here!

Anti-Cast: New Year, New Skills: Web App Pentesting with Jennifer Shannon
2024-01-10 12:00 - 13:00
In a world where web applications are the new battleground.

Hackers are constantly looking for ways to exploit them and steal your secrets, sabotage your network, or harm your customers.

But you are not alone…

Jennifer Shannon is here to help you fight back.

In this free one-hour Antisyphon Anti-cast, Jennifer will teach you how to test your web applications and find the vulnerabilities before they do.

She will show you the tools, the techniques, and the tricks of the trade.

This is not just a Anti-cast… This is a mission.

Are you ready to join?

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

2024_01_10_anticast_New Year, New Skills_Web App Pentesting_Jennifer ShannonDownload the slides here!

Anti-Cast: Sharpening Your Skills - Web PenTesting with SamuraiWTF with Kevin Johnson
2023-12-20 12:00 - 13:00
Join us for an in-depth exploration in ‘Sharpening Your Skills: Web PenTesting with SamuraiWTF,’ where we dive into the techniques and tools for web application security.

This talk is specially designed for those eager to elevate their web penetration testing skills using the OWASP Samurai Web Training Framework (SamuraiWTF). We will not just discuss but actively demonstrate the tools and targets within SamuraiWTF. The session is structured to provide a practical, demo-heavy approach, allowing attendees to see the tools and techniques in action.

Whether you’re looking to refine your existing skills or explore new strategies in web security, this session promises to be an engaging and deeply informative journey into the world of web penetration testing.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Anti-Cast: Triad of Success - Education, Experience, and Networking with Wade Wells
2023-12-13 12:00 - 13:00
In the ever-evolving landscape of professional development, the triad of education, experience, and networking emerges as a foundational pillar for career growth and success.

This free one-hour Antisyphon Anti-Cast delves into the intricate interplay of these three crucial elements, exploring how they individually and collectively influence career trajectories.

Wade aims to equip the audience with a comprehensive understanding of how education, experience, and networking function as key drivers in shaping a successful career.

Attendees will leave with actionable insights and strategies to apply these principles in their own professional journeys.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Triad of Success – Education Experience and Networking with Wade WellsDownload the slides here!

Anti-Cast: Oil, Circuits, & Cheese - An Additive Model of Failure with Jennifer Shannon
2023-11-29 12:00 - 13:00
The Swiss cheese model, developed in 1990 by James Reason, is based on the idea that errors can never be eliminated entirely due to complex systems but are instead “layered” like slices of swiss cheese. This model has become a well-known concept in the field of risk management that highlights how multiple layers of defense can fail, leading to a catastrophic outcome. This model aims to provide information to decision-makers to help them reduce the chances of incidents occurring. It is crucial to keep in mind that all safety measures within an organization are linked, and by implementing appropriate policies and standards, risk can be minimized. So how can we apply this model to cybersecurity, where multiple layers of security can be breached during a compromise? This talk will explore how the Swiss cheese model can be used to understand the vulnerabilities and cybersecurity risks posed to organizations. We will also examine how the layers of defense, including people, processes, and technology, can fail and lead to a breach.

Jennifer is a senior security consultant at Secure Ideas with a background in malware analysis, penetration testing, and teaching. An avid computer geek for most of her life, she began her journey in cybersecurity as a SOC Analyst, where she showed an aptitude for penetration testing and malware analysis. Her background as “blue team” uniquely prepared her for guiding clients through remediation and contextualizing findings for their environment.

She graduated with honors from Florida State College at Jacksonville’s networking program. While pursuing her degree, she dedicated time to teaching computing skills to underrepresented minorities. Jennifer continues to be passionate about teaching and is eager to share her knowledge with anyone who will listen.

Chat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Oil, Circuits, and CheeseDownload the slides here!
