Next Meeting

First  Presentation:  Threat Intel, Something For Everyone

Speaker: Christian Nicholson

Abstract: : This talk will discuss some of the basic principles of threat intelligence, and touch on how you can get started with a threat intel program of your own. We will then dive into the main focus of this talk, operationalizing the data via automation and a centralized platform of your choosing. This talk will make use of some free and commercial tools, and offer up some alternative options in the commercial and open source space that allow you to achieve the same goal. We will talk about the pros and cons of a few architecture variations, and most importantly how to use this solution to maximize your return on investment into the threat intel program, and minimize the amount of analyst hours needed to gather data to reach an incident close. Half this talk will be spent on the big “So Whats”, what does it cost, and what does it get me, alongside the basic input and outputs for a typical organization. We will also touch on who is the right consumer of this information, and to what degree, before diving in to a scenario in which the intelligence is leveraged, and show the difference between having and not having it.

Bio:

christian@indelible.global via email

https://indelible.global (company website)

@GuardianCosmos on Twitter

www.linkedin.com/in/christian-nicholson (LinkedIn)

Second Presentation: Six Degrees to Domain Admin Revisited, BloodhoundAD for Offense and Defense

Speaker: Christian Nicholson

Abstract:  This talk is an expansion on the original talk given at BSidesLV 2016, We touch on the original topic of six degrees to domain admin, and then take it a step further. Many focus on the offensive uses for BloodhoundAD, but what about the defensive uses? This talk aims to answer that question, and provide a brief list of usecases that are suitable for both red teamers and pentesters, as well as blue team forensicators and incident responders. We also talk about the ups and downs of the current tools iteration, how we can overcome them, and how we can build the tool into our processes to leverage the data for automation.

Bio:

christian@indelible.global via email

https://indelible.global (company website)

@GuardianCosmos on Twitter

www.linkedin.com/in/christian-nicholson (LinkedIn)