Upload File

threat hunting & ir - sans institute...threat hunting & ir summit & training 2019...

  • Home
  • Documents
  • Threat Hunting & IR - SANS Institute...Threat Hunting & IR Summit & Training 2019 October 2-7 | #ThreatHuntingSummit @sansforensics Venue ... FOR610 Reverse-Engineering Malware: Malware
2
Threat Hunting & IR Summit & Training 2019 October 2-7 | #ThreatHuntingSummit @sansforensics Venue New Orleans Marriott 555 Canal Street | New Orleans, LA 70130 504-581-1000 Event Check-In Studios Foyer (2nd Floor) Wed, October 2 7:00am – 9:00am Registration Support Iberville (4th Floor) Wed, October 2 – Mon, October 7 9:00am – 5:00pm Course Breaks Morning Break 10:30am – 10:50am Lunch (on your own) 12:15pm – 1:30pm Afternoon Break 3:00pm – 3:20pm GENERAL INFORMATION SEC504 Hacker Tools, Techniques, Exploits, and Incident Handling Instructor: Richard Fifarek Studio 10 (2ND FLOOR) Extended Hours: 5:00pm - 7:15pm (Course day 1) FOR498 Battlefield Forensics & Data Acquisition Instructor: Kevin Ripa Studio 6 (2ND FLOOR) FOR508 Advanced Incident Response, Threat Hunting, and Digital Forensics Instructor: Matt Bromiley Studio 4/5 (2ND FLOOR) FOR572 Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response Instructors: David Bianco, Philip Hagen Studio 9 (2ND FLOOR) FOR578 Cyber Threat Intelligence Instructor: Robert M Lee Studio 2 (2ND FLOOR) FOR610 Reverse-Engineering Malware: Malware Analysis Tools and Techniques Instructor: Anuj Soni Studio 8 (2ND FLOOR) MGT512 Security Leadership Essentials for Managers Instructor: Kenton Smith Studio 7 (2ND FLOOR) CLASS INFORMATION All courses will run 9:00am – 5:00pm (unless noted) LUNCH&LEARN: DIY Software Supply Chain Monitoring Speaker: Robert Perica, Principal Engineer, ReversingLabs Wed, October 2 | 12:30pm – 1:15pm | Studio 6 (2ND FLOOR) LUNCH&LEARN: Network-Based Threat Hunting: A Case Study in Analyzing an Advanced Threat Speaker: Matt Pieklik, Sr Consulting Analyst Thu, October 3 | 12:30pm – 1:15pm | Studio 6 (2ND FLOOR) SPECIAL EVENT: Product Test Drive: Regaining Control of Your Attack Surface Speakers: Justin Swisher, MDR Threat Hunting and Charles Twardowski, Manager, Incident Response Wed, October 2 | 6:30pm – 8:30pm | Studio 6 (2ND FLOOR) KEYNOTE: Malware Analysis: A Deep Dive Experience Speaker: Anuj Soni Thu, October 3 | 6:00pm – 8:00pm | Studio 4/5 (2ND FLOOR) SPECIAL EVENT: DFIR Community Night House of Blues, The Prayer Room | Fri, October 4 | 6:00pm – 8:00pm Please join DFIR instructors and fellow students on a night out in NOLA! Enjoy light hors d’oeuvres, drinks and the best of live music SPECIAL EVENT: DFIR NetWars Tournament Hosted by: Matt Bromiley, Philip Hagen Sat, October 5 & Sun, October 6 | 6:00pm – 9:00pm Studio 3/4/5 (2ND FLOOR) BONUS SESSIONS

Upload: others

Post on 07-Oct-2020

6 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Threat Hunting & IR - SANS Institute...Threat Hunting & IR Summit & Training 2019 October 2-7 | #ThreatHuntingSummit @sansforensics Venue ... FOR610 Reverse-Engineering Malware: Malware

Threat Hunting & IR Summit & Training 2019October 2-7 | #ThreatHuntingSummit @sansforensics

VenueNew Orleans Marriott 555 Canal Street | New Orleans, LA 70130 504-581-1000

Event Check-InStudios Foyer (2nd Floor)Wed, October 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7:00am – 9:00am

Registration SupportIberville (4th Floor)Wed, October 2 – Mon, October 7 . . . . . . . . . . . . . .9:00am – 5:00pm

Course BreaksMorning Break . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10:30am – 10:50am Lunch (on your own) . . . . . . . . . . . . . . . . . . . . . . . . 12:15pm – 1:30pm Afternoon Break . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3:00pm – 3:20pm

GENERAL INFORMATION

SEC504 Hacker Tools, Techniques, Exploits, and Incident Handling

Instructor: Richard Fifarek . . . . . . . . . . . . . . . . . . . . . . . . . Studio 10 (2ND FLOOR) Extended Hours: 5:00pm - 7:15pm (Course day 1)

FOR498 Battlefield Forensics & Data AcquisitionInstructor: Kevin Ripa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Studio 6 (2ND FLOOR)

FOR508 Advanced Incident Response, Threat Hunting, and Digital Forensics

Instructor: Matt Bromiley . . . . . . . . . . . . . . . . . . . . . . . . . Studio 4/5 (2ND FLOOR)

FOR572 Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response

Instructors: David Bianco, Philip Hagen . . . . . . . . . . . . . . Studio 9 (2ND FLOOR)

FOR578 Cyber Threat IntelligenceInstructor: Robert M . Lee . . . . . . . . . . . . . . . . . . . . . . . . . . . Studio 2 (2ND FLOOR)

FOR610 Reverse-Engineering Malware: Malware Analysis Tools and Techniques

Instructor: Anuj Soni . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Studio 8 (2ND FLOOR)

MGT512 Security Leadership Essentials for ManagersInstructor: Kenton Smith . . . . . . . . . . . . . . . . . . . . . . . . . . . Studio 7 (2ND FLOOR)

CLASS INFORMATION All courses will run 9:00am – 5:00pm (unless noted)

LUNCH&LEARN:

DIY Software Supply Chain Monitoring Speaker: Robert Perica, Principal Engineer, ReversingLabs Wed, October 2 | 12:30pm – 1:15pm | Studio 6 (2ND FLOOR)

LUNCH&LEARN:

Network-Based Threat Hunting: A Case Study in Analyzing an Advanced Threat Speaker: Matt Pieklik, Sr . Consulting Analyst Thu, October 3 | 12:30pm – 1:15pm | Studio 6 (2ND FLOOR)

SPECIAL EVENT:

Product Test Drive: Regaining Control of Your Attack Surface Speakers: Justin Swisher, MDR Threat Hunting and Charles Twardowski, Manager, Incident Response Wed, October 2 | 6:30pm – 8:30pm | Studio 6 (2ND FLOOR)

KEYNOTE: Malware Analysis: A Deep Dive Experience Speaker: Anuj Soni Thu, October 3 | 6:00pm – 8:00pm | Studio 4/5 (2ND FLOOR)

SPECIAL EVENT: DFIR Community Night House of Blues, The Prayer Room | Fri, October 4 | 6:00pm – 8:00pm

Please join DFIR instructors and fellow students on a night out in NOLA! Enjoy light hors d’oeuvres, drinks and the best of live music .

SPECIAL EVENT: DFIR NetWars Tournament Hosted by: Matt Bromiley, Philip Hagen Sat, October 5 & Sun, October 6 | 6:00pm – 9:00pm Studio 3/4/5 (2ND FLOOR)

BONUS SESSIONS

Page 2: Threat Hunting & IR - SANS Institute...Threat Hunting & IR Summit & Training 2019 October 2-7 | #ThreatHuntingSummit @sansforensics Venue ... FOR610 Reverse-Engineering Malware: Malware

HOTEL FLOOR PLAN

Interested in adding a GIAC Certification or an OnDemand Bundle?To receive the discounted rate, you must sign up before Monday, October 14th at 8:00pm EDT

Add to your order via your Portal Account: www.sans.org/account Call or e-mail SANS Registration: 1-301-654-SANS (7267) | [email protected]

SEC504

FOR498

FOR508

FOR572FOR578

FOR610

MGT512

Event Check-In

Registration Support


Malware and the Modern Threat Landscape

Threat Bulletin VPNFilter Malware - Allot · built-in anti-malware measures. VPNFilter Malware: Real-time Report A new malware threat has emerged that poses such a serious potential

HackInBo2k16 - Threat Intelligence and Malware Analysis

Building a Successful Threat Hunting Program

BSides Zurich 17.09.2016 Advanced Detection using Sysmon€¦ · Tom Ueltschi Swiss Post CERT / SOC / CSIRT, since 2007 –Focus: Malware Analysis, Threat Intel, Threat Hunting, Red

Threat Hunting - csirt.jabarprov.go.id

Workshop threat-hunting

Threat Hunting in Windows – Are You Hunting or Being Hunted?

Hunting Mac Malware with Memory Forensics

Bsides threat hunting

Hunting malware with volatility v2.0

Malware Labs : Unknown Malware Advanced Detection · Next generation anti-virus, malware tracking, threat hunting, behavioral analysis, endpoint detection, sandboxing, machine learning,

Threat Hunting Guide - Broadcom Inc

SACON - Threat hunting (Chandra Prakash)

White Paper The Ongoing Malware Threat: How Malware Infects

Malware Hunting with the Sysinternals Tools

HTA-T07R Malware Hunting with the Sysinternals Toolsindex-of.co.uk/Malware/hta-t07r-license-to-kill-malware-hunting-with... · malware Professional antimalware analysis requires years

Threat hunting as SOC process

Cyber Threat Hunting with Phirelight

The Ongoing Malware Threat: How Malware Infects Websites and

Threat hunting workshop

2020 THREAT HUNTING REPORT - ExtraHop

Enabling Efficient Cyber Threat Hunting with Cyber Threat

(CMC THREAT HUNTING SERVICE)

SQRRL threat hunting platform

Kaspersky Threat Hunting · • Immediate protection against any detected threat through automatic antivirus database updates. • Retrospective analysis of incidents and threat hunting,

APT - Hunting 0Day Malware

Introduction into Threat Hunting - Sri Lanka CERT|CC · What is Threat Hunting Cyber threat hunting is an active cyber defence activity. It is "the process of proactively and iteratively

Threat Hunting Report can be viewed here - News · THREAT HUNTING REPORT 3. THRET HNTING REPORT 4 KEY SURVEY FINDINGS ... Among the respondents to the threat hunting survey, six in

Threat of Mobile Malware

DEMYSTIFYING THREAT HUNTING · 2021. 1. 26. · We wanted to clear up the confusion. Demystifying Threat Hunting will explain: • What threat hunting is – and what it isn’t

DATASHEET...• Прокси-сервера с поддержкой протокола ICAP; Group-IB Threat Hunting Framework / Sensor 4 group-ib.com Polygon Malware Detonation &

Genetic Malware Analysis for Threat Intelligence · Malware Family Classification Understanding if a threat is a generic malware, ransomware, or a nation-state sponsored attack,

Detailed Analysis Advanced Persistent Threat Malware

FALCON OVERWATCH MANAGED THREAT HUNTING · Director of Information Technology, TransPak. CrowdStrike Products FALCON OVERWATCH MANAGED THREAT HUNTING CROWDSTRIKE MANAGED THREAT HUNTING