Eric Conrad

CISSP Cram Session

This fast-paced webcast will cover the core content required to pass the CISSP® exam.

Detecting Malware via HTTPS Analysis

The vast majority of web traffic is encrypted via HTTPS/TLS. That includes most malware command-and-control (C2) channels.

SANS Secure Your Fortress: Cutting-Edge Defense Techniques for 2024

Step into a world where cutting-edge defense meets practicality in cybersecurity! "SANS Secure Your Fortress" will teach you how to master the latest and most effective defense techniques. Whether you're a seasoned expert or just beginning your cyber journey, this event is for you.

Threat Hunting via DeepBlueCLI v3

Every incident ends with a lessons learned meeting, and most executive summaries include this bullet point: "Leverage the tools you already paid for"Are you leveraging the tools you already paid for? Are you using the host-based firewall to block/alert when applications like PowerShell, PSExec, and WMIC attempt to make outbound connections from non-IT clients? Have you enabled AppLocker?

Blind Data Exfiltration Using DNS and Burp Collaborator

DNS provides one of the best methods for command and control, covert tunneling, and blind data exfiltration. Burp Collaborator provides a great way to both confirm blind injection, and also exfiltrate data. Penetration testers may prepend names to each DNS request, allowing data exfiltration subject to DNS's length limitations (63 characters per label, 255 characters total name) and character limitations. This webcast will describe methods for blind data exfiltration using Burp Collaborator (using both public and private servers), as well as using DNS without Burp. Content directly from SEC542: Web App Penetration Testing and Ethical Hacking.