OSINT Missing Persons CTF
- Hosted by Micah Hoffman in partnership with Trace Labs
- Friday, December 13th, 6:30pm - 9:30pm
Saturday, December 14th, 6:30pm - 9:30pm
Attendance at this special experience is limited to students attending a course at the event.
In partnership with Trace Labs who provides crowd-sourced, Open-Source Intelligence (OSINT) capture the flag events for actual missing persons, SANS is offering a non-theoretical contest known as Missing Persons CTF.
The Missing Persons CTF is a Capture the Flag event where contestants work in teams to crowdsource the collection of Open-Source Intelligence (OSINT) to assist local law enforcement in locating missing persons. In the information security community, a typical CTF will be of a technical nature where flags are hidden within pre-configured servers/virtual machines that contestants have to obtain using hacking techniques to gain points. The Missing Persons CTF differs from this by having different flag categories based off pieces of information that law enforcement would look to gather to aid in a missing persons case. Contestants compete in teams to discover new pieces of intelligence about people that have been reported missing to local law enforcement and then submit those data points to the CTF scoring system where a panel of judges will assign points to the team based on the type of data reported. No prior experience in OSINT or CTFs is required! If you can Google, you can succeed in this event!
This event provides an opportunity for us to do #OSINTForGood knowing that we are doing work that might impact real lives and actual missing persons. The intel gathered from the CTF participants is provided directly to law enforcement as quickly as possible so they can continue to work the cases and hopefully bring them to resolution.
This inaugural event is limited to the first 75 people who register. There will be a table by the book distribution near the Coats Room (Terrace Level) on December 12th. We will be taking registrations there starting at 8am.
Bonus Sessions
The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:
- SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
- Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
- Vendor: Events hosted by external vendor exhibitors.
- Lunch & Learn: Short presentations given during the lunch break.
Wednesday, December 11
| Session | Speaker | Time | Type |
|---|---|---|---|
| Welcome Reception & Early Check-In | — | Wednesday, December 11th, 5:00pm - 7:00pm | Special Events |
Thursday, December 12
| Session | Speaker | Time | Type |
|---|---|---|---|
| General Session - Welcome to SANS | Bryan Simon | Thursday, December 12th, 8:00am - 8:30am | Special Events |
| One Stop Shopping - Evaluating and Integrating External Sources | Joe Gehrke, Solutions Architect | Thursday, December 12th, 12:30pm - 1:15pm | Lunch and Learn |
| Secure and Protect Your Users Everywhere | Olauhdo Stubbs, Technical Solutions Specialist | Thursday, December 12th, 12:30pm - 1:15pm | Lunch and Learn |
| Prioritizing Investigations with Domain & DNS-Based Adversary Intelligence | Jackie Abrams, Principal Product Manager | Thursday, December 12th, 12:30pm - 1:15pm | Lunch and Learn |
| Defeat Cyber Insider Threats with IBM's Threat Management Solutions | Christopher Fritz, Z/OS UNIX Function Test Lead & Alexandra Hurtado, Cybersecurity Technical Specialist | Thursday, December 12th, 12:30pm - 1:15pm | Lunch and Learn |
| Breach Prevention by Reducing Attack Surfaces | Chris Carlson, VP, Product Management | Thursday, December 12th, 12:30pm - 1:15pm | Lunch and Learn |
| Evade Me If You Can: An Inside Look at Malware Evasion Techniques | Ben Abbott, Solutions Engineer | Thursday, December 12th, 12:30pm - 1:15pm | Lunch and Learn |
| IBM Product Test Drive | Christopher Fritz, Z/OS UNIX Function Test Lead | Thursday, December 12th, 6:30pm - 8:30pm | Vendor Event |
| Windows Exploratory Surgery with Process Hacker | Jason Fossen | Thursday, December 12th, 7:15pm - 9:15pm | Keynote |
Friday, December 13
| Session | Speaker | Time | Type |
|---|---|---|---|
| Vendor Solutions Expo | — | Friday, December 13th, 12:00pm - 1:30pm | Vendor Event |
| Vendor Solutions Expo | — | Friday, December 13th, 5:15pm - 6:15pm | Vendor Event |
| GIAC Overview Presentation | Kim Lucht | Friday, December 13th, 6:15pm - 7:00pm | Special Events |
| Women's CONNECT Reception | — | Friday, December 13th, 6:15pm - 7:15pm | Reception |
| OSINT Missing Persons CTF | Hosted by Micah Hoffman in partnership with Trace Labs | Friday, December 13th, 6:30pm - 9:30pm | Special Events |
| Evolving Threats | Paul Henry | Friday, December 13th, 7:15pm - 8:15pm | SANS@Night |
| Cloud Security Automation: From Infrastructure to App | Frank Kim | Friday, December 13th, 7:15pm - 8:15pm | SANS@Night |
| Virtuous Cycles: Rethinking the SOC for Long-Term Success | John Hubbard | Friday, December 13th, 8:15pm - 9:15pm | SANS@Night |
| SIEMtervention - Moving SIEM from collection to detection | Justin Henderson | Friday, December 13th, 8:15pm - 9:15pm | SANS@Night |
Saturday, December 14
| Session | Speaker | Time | Type |
|---|---|---|---|
| Coffee & Donuts with the College Students | — | Saturday, December 14th, 7:30am - 9:00am | Reception |
| Bulletproof Proxies: How Large Scale Attacks Hide in Plain Sight | Laz Macias, Field Solutions Engineer | Saturday, December 14th, 12:30pm - 1:15pm | Lunch and Learn |
| Elevating Enterprise Security: Simplifying the Life of a Security Analyst | Jerry Mancini, SVP of Engineering | Saturday, December 14th, 12:30pm - 1:15pm | Lunch and Learn |
| OSINT Missing Persons CTF | Hosted by Micah Hoffman in partnership with Trace Labs | Saturday, December 14th, 6:30pm - 9:30pm | Special Events |
| Failing to Succeed in Cyber Security and Risk Management | My-Ngoc Nguyen | Saturday, December 14th, 7:15pm - 8:15pm | SANS@Night |
| Building and Operating an OT/ICS SOC | Robert M. Lee | Saturday, December 14th, 7:15pm - 8:15pm | SANS@Night |
| Who's in your wallet? Capital One Debrief & Post Mortem | Eric Johnson | Saturday, December 14th, 8:15pm - 9:15pm | SANS@Night |
| Putting MITRE ATT&CK™ into Action with What You Have, Where You Are | Katie Nickels | Saturday, December 14th, 8:15pm - 9:15pm | SANS@Night |
