We specialize in penetration testing, red teaming, threat hunting, Active SOC services, and educational webinars, workshops, and training. We take the knowledge we have and continue to learn through our engagements and share it with the overall information security community because we believe we're all better together. Also... the creators of the Backdoors & Breaches, incident response card game.
Black Hills Information Security的外部链接
115 W Hudson St
US，SD，Spearfish，57783
Black Hills Information Security转发了
Place your votes and let us see who the victor in this year's TXT EDITOR WARS COMPETITION will be! ?? = VIM ?? = NANO Click the emoji that represents your vote! ?? Stay tuned for our upcoming competition, where we'll put note-taking apps head-to-head! ??
Today feeling a little bleh to you? Need some fiery passion to give you the spark needed to push through to the weekend? We've been thinking the same! So let's have a classic John Strand rant to fire us up! ? Let's flashback to PCI 4.0 Rants with John Strand! Will it change your life? ? What are the new and exciting changes to the PCI standard? Did they make things better? Because you know that security by committees always makes things better. ? Revisit this webcast and follow along with the 12-paged Slide Deck here - - https://lnkd.in/dfWQVnRe
**NEW** BHIS | Blog What is your favorite method of achieving browser/session separation when testing for access control vulnerabilities? Finding Access Control Vulnerabilities with Autorize by: Craig Vincent Published: 11/21/2024 Learn more: https://lnkd.in/gpWTsC8g
Intro to Data Analytics using SQL -Ethan Robish ?? Register for webcasts, summits, and workshops - https://poweredbybhis.com Intro to Data Analytics using SQL -Ethan Robish Come join a former SQL-hater to learn the capabilities of the universal data query language and how you can use it for more than just databases. Join us for a free one-hour Black Hills Information Security (BHIS) webcast with Security Analyst - Ethan Robish, about Intro to Data Analytics using SQL Ethan will cover a broad swath of both introductory and advanced SQL features. If you're looking to push beyond the boundaries of spreadsheets or command line kung fu this webcast is for you. By attending, you'll gain an understanding of the types of problems that SQL excels at along with examples using DuckDB, a modern Swiss army knife of data analytics. Chat with your fellow attendees in the Black Hills Infosec Discord server: https://discord.gg/BHIS in the #??webcast-live-chat channel.
Day 326 of 366 Days of Cyber! Microsoft, don't ever change! If you'd like more helpful educational content, check out the Infosec Survival Guide: Third Volume https://lnkd.in/eV82g8Dx
"That started the quest to find a decent QEMU walkthrough to get started and one did not exist, so I decided to write my own..." Read more: https://lnkd.in/eJpQVKY3 QEMU, MSYS2, and Emacs: Running Open-Source Virtual Machines on Windows by: Dave Blandford Published: 10/24/2024
No matter how powerful the Cloud is, it's still not safe from breaches. If an organization is moving towards a digital transformation strategy — incorporating cloud-based tools and services as part of their infrastructure — they need Cloud Security. In the Infosec Survival Guide: GREEN BOOK, Kevin Klingbile talks about Cloud Security and it's responsibilities, as well as resources and tools to aid you as you defend the Cloud! If you'd like more helpful educational content, check out the Infosec Survival Guide: GREEN BOOK - https://lnkd.in/eV82g8Dx Resources: ATT&CK Cloud Matrix - Use the ATT&CK? Cloud Matrix to be aware of tactics and techniques that apply to cloud-based technologies. https://lnkd.in/ezgUvs2H Use Center for Internet Security (CIS) cloud benchmarks to compare against your cloud configuration - https://lnkd.in/ezwFz2Uq Comprehensive security guidance for cloud environments. https://lnkd.in/eXDa2sum security-guidance-v5 Webcast: Cloud Security: Why Endpoint Still Matters -https://lnkd.in/e4drkdQD In Cloud We Trust: Common M365 Attack Techniques to Bypass Defenses - https://lnkd.in/eWa7cG-N How I started my summer vacation: Navigating My First Incident in the Cloud - https://lnkd.in/ean73dq4 Cloud Pentest Apocalypse - https://lnkd.in/eWsR2g3d Reconnaissance: Azure Cloud - https://lnkd.in/ekKU7kYN Tools for Defense: Cloud Auditing Tool - works on all major cloud platforms. Quickly gathers configuration settings and highlights areas of risk. github.com/nccgroup/ ScoutSuite Post-Exploitation toolset using the Microsoft Graph API. Recon, persistence, and data theft. https://lnkd.in/grVK36Vf Find gaps within Azure MFA requirements. https://lnkd.in/e5KSsuyw BloodHound data collector, Microsoft Azure. github.com/BloodHoundAD/ AzureHound Azure AD hacking and admin toolkit. https://lnkd.in/eRNyBe4X Cloud Security Courses from Antisyphon: Breaching the Cloud With Beau Bullock -https://lnkd.in/gyUyMJiC Securing the Cloud Foundationss with Andrew Krug -https://lnkd.in/eY38wvkx
"Changes to the msds-KeyCredentialLink attribute are not audited/logged with standard audit configurations..." Read more: https://lnkd.in/eAEhvugU Enable Auditing of Changes to msDS-KeyCredentialLink by: Jordan Drysdale Published: 9/19/2024
Active Countermeasures offers AC-Hunter, a network threat hunting solution that analyzes network traffic to detect which internal systems have been compromised. Plus you can get AC-Hunter Community Edition for FREE! With no Agents to install AC-Hunter identifies compromised hosts on your network regardless of the operating system, hardware, or type. Has a simple-to-use Graphical User Interface – Designed for everyone from junior analysts to seasoned professionals. - AC-Hunter can quickly analyze millions of connection requests and easily identify which systems or IoT devices have been compromised. - AC-Hunter continuously threat hunts the previous 24-hours of your network traffic. - AC-Hunter utilizes patented and innovative beacon detection and connection behavior algorithms. - AC-Hunter inspects encrypted sessions while maintaining data privacy and integrity. - AC-Hunter has SIEM and Slack Alerting notifying you of threats via Slack, the SIEM of your choice, or a centralized logging server Download AC-Hunter Community Edition - https://lnkd.in/ev-fPeFp Learn how to use AC-Hunter: https://lnkd.in/eZwrMdcA https://lnkd.in/e8uhXhFm https://lnkd.in/eHGk2tUY
Newsletter: New Black Hills Information Security blog on -- What Is Penetration Testing? -- by John Malone, eJPT, M.A.