NorthSec Courses

When the Threat Actor Lives Under Your Roof - Addressing Technological Abuse in Domestic Violence

1 rating

Explore how domestic abusers exploit technology to control victims and learn strategies to improve digital literacy and safety tools for vulnerable populations.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Under the Radar: Zero-Day Vulnerabilities in Build Pipelines

Dive into critical vulnerabilities in Open Source build pipelines, exploring attack methodologies, real-world 0-day discoveries, and essential mitigation strategies for GitHub Actions and supply chain security.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Evading AV and EDR Entropy Checks - A Guide to Payload Detection Evasion

Discover effective techniques for bypassing AV/EDR detection through entropy manipulation, from fundamental concepts to advanced shellcode concealment methods and practical evasion tools.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Kerberos S4U and U2U Extensions in Active Directory Security

Découvrez les extensions Kerberos S4U et U2U dans Active Directory, leurs mécanismes de fonctionnement et les vulnérabilités associées, notamment les attaques spn-less-rbcd, unpac-the-hash et sapphire ticket.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Privacy Through the Lens of Code: Using Static Analysis for Privacy Bug Detection

Explore how static analysis techniques can revolutionize privacy protection in software development by identifying and fixing privacy issues at the code level, before deployment.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Vulnérabilités des Réseaux Overlays VxLAN dans les Datacenters

Découvrez les vulnérabilités des réseaux VxLan dans les datacenters modernes, leur exploitation via SCAPY et les faiblesses des protocoles de segmentation réseau utilisés par les grands acteurs d'internet.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Asylum Ambuscade: Analyzing the Convergence of Crimeware and Cyberespionage

Delve into the complex operations of Asylum Ambuscade, a unique threat group combining espionage and crimeware activities targeting European diplomats, cryptocurrency traders, and government personnel since 2022.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Tracking Bumblebee Malware Development and Evolution - A Technical Analysis

Dive into the evolution of Bumblebee malware loader, exploring its execution, development cycles, and comparative analysis with other botnet families through real-world cybersecurity insights.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

From On-Premises to Cloud: A Comprehensive Analysis of SAP Security Issues

Explore critical security vulnerabilities in SAP landscapes, from on-premises to cloud deployments, and learn effective mitigation strategies for protecting enterprise systems and sensitive data.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Technical Analysis in Malware Reverse Engineering - Past, Present, and Future

Dive into advanced malware reverse engineering techniques, from efficient unpacking methods to automation tools, guided by over a decade of practical experience in threat analysis.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Redefining Digital Security - A New Approach for IPV Victims

Explore how digital privacy strategies can be redesigned to better protect Intimate Partner Violence victims, examining the intersection of user experience, security settings, and data governance practices.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

A Tabletop As Big As the World - Designing Multinational Cybersecurity Exercises

Explore large-scale cybersecurity tabletop exercises involving geopolitical intrigue, multinational corporations, and diverse threat actors for comprehensive incident response training.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Vulnerability Haruspicy - Using Woo To Confirm Your Biases

Explore the absurdities of vulnerability scoring systems like CVSS, EPSS, and SSVC, comparing their theoretical promises to real-world security team practices and biases.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Enhancing Identity Credential Privacy with Zero-Knowledge Proofs

Explore zero-knowledge proofs for enhancing digital identity privacy, featuring the Crescent framework and practical demos of anonymous credential verification.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Persōna Theory - Infiltration and Deception of Emerging Threat Groups

Explore advanced techniques for infiltrating threat actor groups using persona construction, linguistics, OPSEC, and social engineering with real ransomware case studies.

• YouTube
• 31 minutes
• Self-Paced
• Free Video