Teaching Day 2 of SEC564 - Red Team Exercises and Adversary Emulation today. Students are doing excellent! Asking all the right questions and enjoying the labs. #redteam #adversaryemulation #SEC564 @SANSOffensive @SANSInstitute
November 24, 2024 at 10:29 PM
Teaching Day 2 of SEC564 - Red Team Exercises and Adversary Emulation today. Students are doing excellent! Asking all the right questions and enjoying the labs. #redteam #adversaryemulation #SEC564 @SANSOffensive @SANSInstitute
Kicking off SANS #SEC564 Red Team Exercises and Adversary Emulation course for the #PurpleTeamSummit in a few minutes!
If you are interested in #redteam and #adversaryemulation you can take it OnDemand at any time: https://sans.org/sec564
If you are interested in #redteam and #adversaryemulation you can take it OnDemand at any time: https://sans.org/sec564
November 25, 2024 at 5:04 AM
Kicking off SANS #SEC564 Red Team Exercises and Adversary Emulation course for the #PurpleTeamSummit in a few minutes!
If you are interested in #redteam and #adversaryemulation you can take it OnDemand at any time: https://sans.org/sec564
If you are interested in #redteam and #adversaryemulation you can take it OnDemand at any time: https://sans.org/sec564
Looking forward to kicking of @SANSInstitute largest conference of the year #SANS2020 via #SANSCyberCast on Friday April 4!!
Hosting my 2 day #redteam and #adversaryemulation course. Spots still available and fully remote!! #SEC564...
Hosting my 2 day #redteam and #adversaryemulation course. Spots still available and fully remote!! #SEC564...
November 29, 2024 at 11:42 AM
Looking forward to kicking of @SANSInstitute largest conference of the year #SANS2020 via #SANSCyberCast on Friday April 4!!
Hosting my 2 day #redteam and #adversaryemulation course. Spots still available and fully remote!! #SEC564...
Hosting my 2 day #redteam and #adversaryemulation course. Spots still available and fully remote!! #SEC564...
Just submitted update to my #RedTeam #AdversaryEmulation class! #SEC564 update will run at #PenTest & Offensive Training 2021
Join us as we cover building a Red Team program and performing high-value adversary emulation:...
Join us as we cover building a Red Team program and performing high-value adversary emulation:...
November 25, 2024 at 1:37 PM
Just submitted update to my #RedTeam #AdversaryEmulation class! #SEC564 update will run at #PenTest & Offensive Training 2021
Join us as we cover building a Red Team program and performing high-value adversary emulation:...
Join us as we cover building a Red Team program and performing high-value adversary emulation:...
Hey Singapore and APAC friends, I will be teaching @SANSPenTest #SEC564 during Singapore Time!!! Sign up October 19-22. You will learn how to build a #RedTeam program and perform high-value #adversaryemulation Looking forward to teaching...
November 26, 2024 at 12:48 PM
Hey Singapore and APAC friends, I will be teaching @SANSPenTest #SEC564 during Singapore Time!!! Sign up October 19-22. You will learn how to build a #RedTeam program and perform high-value #adversaryemulation Looking forward to teaching...
I will be teaching SANS SEC564: Red Team Exercises and Adversary Emulation at Network Security 2019! Come out for two full days of Red Teaming fun! https://www.sans.org/event/network-security-2019/course/red-team-exercises-adversary-emulation
SEC565: Red Team Operations and Adversary Emulation for S...
Learn Red Team operations and adversary emulation for sec...
www.sans.org
December 1, 2024 at 4:36 AM
I will be teaching SANS SEC564: Red Team Exercises and Adversary Emulation at Network Security 2019! Come out for two full days of Red Teaming fun! https://www.sans.org/event/network-security-2019/course/red-team-exercises-adversary-emulation
Red Team Exercises and Adversary Emulation class starts in 10 days in Las Vegas!!!!! Still some open seats. Sign up now! https://www.sans.org/event/network-security-2019/course/red-team-exercises-adversary-emulation #SANS #SEC564 #RedTeam #AdversaryEmulation
SEC565: Red Team Operations and Adversary Emulation for S...
Learn Red Team operations and adversary emulation for sec...
www.sans.org
December 1, 2024 at 4:26 AM
Red Team Exercises and Adversary Emulation class starts in 10 days in Las Vegas!!!!! Still some open seats. Sign up now! https://www.sans.org/event/network-security-2019/course/red-team-exercises-adversary-emulation #SANS #SEC564 #RedTeam #AdversaryEmulation
"If you know the enemy and know yourself, you need not fear the result of a hundred battles." - Sun Tzu, The Art of War #AdversaryEmulation #RedTeam #SANS #SEC564
December 1, 2024 at 4:26 AM
"If you know the enemy and know yourself, you need not fear the result of a hundred battles." - Sun Tzu, The Art of War #AdversaryEmulation #RedTeam #SANS #SEC564
On my way to Vegas for #SANSNetworkSecurity to teach the newly updated SANS #sec564 Red Team Exercises and Adversary Emulation 2 day course! Two other chances to take the course this year: https://www.sans.org/course/red-team-exercises-adversary-emulation
Best Cyber Security Courses Online & In Person | SANS Ins...
SANS offers over 80 hands-on cybersecurity courses taught...
www.sans.org
December 1, 2024 at 4:21 AM
On my way to Vegas for #SANSNetworkSecurity to teach the newly updated SANS #sec564 Red Team Exercises and Adversary Emulation 2 day course! Two other chances to take the course this year: https://www.sans.org/course/red-team-exercises-adversary-emulation
Day 1 of #sec564, students will consume Threat Intelligence about APT33 to create an #adversaryemulation plan with the objective to gain persistent access to a government IT contractor (fictitious company). Very similar to:...
December 1, 2024 at 4:15 AM
Day 1 of #sec564, students will consume Threat Intelligence about APT33 to create an #adversaryemulation plan with the objective to gain persistent access to a government IT contractor (fictitious company). Very similar to:...
All setup and ready for Day 1 of #sec564 at #NetworkSecurity2019 Starting tomorrow at 9am in Octavius 14 #redteam #adversaryemulation
December 1, 2024 at 4:15 AM
All setup and ready for Day 1 of #sec564 at #NetworkSecurity2019 Starting tomorrow at 9am in Octavius 14 #redteam #adversaryemulation
Here are the three books you get when you take SANS #sec564 Over 400 pages of courseware and lab exercises to cover in 2 days of Red Team Exercises and Adversary Emulation fun! #redteam #adversaryemulation #SANSNetworkSecurity
December 1, 2024 at 4:15 AM
Here are the three books you get when you take SANS #sec564 Over 400 pages of courseware and lab exercises to cover in 2 days of Red Team Exercises and Adversary Emulation fun! #redteam #adversaryemulation #SANSNetworkSecurity
Ready for Day 2 of #sec564. Yesterday we setup C2 and obtained initial access. Today we cover discovery, privesc, persistence, defense evasion, execution, cred access, lateral movement, action on objectives (all mapped to ATT&CK) and reporting. #adversaryemulation
December 1, 2024 at 4:15 AM
Ready for Day 2 of #sec564. Yesterday we setup C2 and obtained initial access. Today we cover discovery, privesc, persistence, defense evasion, execution, cred access, lateral movement, action on objectives (all mapped to ATT&CK) and reporting. #adversaryemulation
PyXie write up by @cylanceinc covers a Python based RAT leveraging Cobalt and SharpHound. Emulating shouldn't be too difficult except the write up lacks @MITREattack mapping. Wish CTI vendors would provide this. #SEC564 teaches how to map CTI to ATT&CK...
November 30, 2024 at 3:07 PM
PyXie write up by @cylanceinc covers a Python based RAT leveraging Cobalt and SharpHound. Emulating shouldn't be too difficult except the write up lacks @MITREattack mapping. Wish CTI vendors would provide this. #SEC564 teaches how to map CTI to ATT&CK...
Looking into Octopus C2 that was released in Blackhat EU last week. Will be adding to #C2Matrix after teaching #SEC564 at #SANSCDI @c2_matrix https://shells.systems/unveiling-octopus-the-pre-operation-c2-for-red-teamers/
Unveiling Octopus: The pre-operation C2 for Red Teamers -...
Estimated Reading Time: 6 minutes This year in BlackHat ...
shells.systems
November 30, 2024 at 2:21 PM
Looking into Octopus C2 that was released in Blackhat EU last week. Will be adding to #C2Matrix after teaching #SEC564 at #SANSCDI @c2_matrix https://shells.systems/unveiling-octopus-the-pre-operation-c2-for-red-teamers/
Lookie lookie what @NonVictus hooked me up with! Beta of SANS Slingshot with Empire 3.0 shhhh tell only your best friends @BCSecurity1 Testing underway. Will perform a full #adversaryemulation of #APT33 like we do in #SEC564 and report back
November 30, 2024 at 11:49 AM
Lookie lookie what @NonVictus hooked me up with! Beta of SANS Slingshot with Empire 3.0 shhhh tell only your best friends @BCSecurity1 Testing underway. Will perform a full #adversaryemulation of #APT33 like we do in #SEC564 and report back
Great article about creating threat models based on adversary TTPs. Really a primer for Adversary Emulation. We cover CTI for Adversary Emulation in #SEC564 https://medium.com/@HockeyInJune/adversary-based-threat-modeling-6dfd88a684d
Adversary-Based Threat Modeling
Most threat models start with attack surface or critical ...
medium.com
November 30, 2024 at 10:51 AM
Great article about creating threat models based on adversary TTPs. Really a primer for Adversary Emulation. We cover CTI for Adversary Emulation in #SEC564 https://medium.com/@HockeyInJune/adversary-based-threat-modeling-6dfd88a684d
Wild West Hackin' Fest - Way West (San Diego) training is up! I will be teaching the 2 day SANS #SEC564: Red Team Exercises and Adversary Emulation course. Sign up now! https://www.wildwesthackinfest.com/now/training/#schedule
Training Registration – Wild West Hackin' Fest
www.wildwesthackinfest.com
November 30, 2024 at 9:39 AM
Wild West Hackin' Fest - Way West (San Diego) training is up! I will be teaching the 2 day SANS #SEC564: Red Team Exercises and Adversary Emulation course. Sign up now! https://www.wildwesthackinfest.com/now/training/#schedule
I am a HUGE fan of VECTR, a tool for tracking and reporting Red and Purple Team exercises. We have an entire lab in #SEC564 on using it. Here is how to import the Iranian TTPs into VECTR to create heat maps of detective and preventive controls....
November 30, 2024 at 9:39 AM
I am a HUGE fan of VECTR, a tool for tracking and reporting Red and Purple Team exercises. We have an entire lab in #SEC564 on using it. Here is how to import the Iranian TTPs into VECTR to create heat maps of detective and preventive controls....
VECTR update was just released version 5.4 is out! Thank you @secrisk SANS #SEC564 has a lab for APT33 and this version makes it even easier to map already tested TTPs to adveraries!
https://github.com/SecurityRiskAdvisors/VECTR/blob/master/media/VECTR%20v5_4%20Feature%20Breakdown.pdf
https://github.com/SecurityRiskAdvisors/VECTR/blob/master/media/VECTR%20v5_4%20Feature%20Breakdown.pdf
VECTR/media/VECTR v5_4 Feature Breakdown.pdf at master · ...
VECTR is a tool that facilitates tracking of your red and...
github.com
November 30, 2024 at 5:57 AM
VECTR update was just released version 5.4 is out! Thank you @secrisk SANS #SEC564 has a lab for APT33 and this version makes it even easier to map already tested TTPs to adveraries!
https://github.com/SecurityRiskAdvisors/VECTR/blob/master/media/VECTR%20v5_4%20Feature%20Breakdown.pdf
https://github.com/SecurityRiskAdvisors/VECTR/blob/master/media/VECTR%20v5_4%20Feature%20Breakdown.pdf
Setup a recording studio to make #SEC564 available to everyone online via SANS CyberCast, vLive, and OnDemand. #SANS2020 will be awesome! Sign up as more seats are now available!!!
https://www.sans.org/course/red-team-exercises-adversary-emulation
#CupHalfFull #redteam...
https://www.sans.org/course/red-team-exercises-adversary-emulation
#CupHalfFull #redteam...
November 29, 2024 at 5:36 PM
Setup a recording studio to make #SEC564 available to everyone online via SANS CyberCast, vLive, and OnDemand. #SANS2020 will be awesome! Sign up as more seats are now available!!!
https://www.sans.org/course/red-team-exercises-adversary-emulation
#CupHalfFull #redteam...
https://www.sans.org/course/red-team-exercises-adversary-emulation
#CupHalfFull #redteam...
What is red teaming? Check out this short video on why you should perform Red Team Exercises and Adversary Emulations: obtain a holistic view, measure people, process, and technology, test assumptions, and train and improve the blue team. #SEC564 #redteam
https://youtu.be/sbmxC1b9rwU
https://youtu.be/sbmxC1b9rwU
November 29, 2024 at 5:36 PM
What is red teaming? Check out this short video on why you should perform Red Team Exercises and Adversary Emulations: obtain a holistic view, measure people, process, and technology, test assumptions, and train and improve the blue team. #SEC564 #redteam
https://youtu.be/sbmxC1b9rwU
https://youtu.be/sbmxC1b9rwU