NorthSec Courses

When the Threat Actor Lives Under Your Roof - Addressing Technological Abuse in Domestic Violence

1 rating

Explore how domestic abusers exploit technology to control victims and learn strategies to improve digital literacy and safety tools for vulnerable populations.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Hook, Line and Sinker - Pillaging API Webhooks

Explore techniques for exploiting API webhooks, including SSRF attacks that can lead to cloud compromise, and learn about unique attack vectors in modern web services.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

I Thought Writing a Technical Book Was Supposed to Be Fun?

Explore the journey of writing and publishing a 400-page security book, from initial concept to final product, with insights into the realities of the process.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

From the Cluster to the Cloud and Back to the Cluster - Lateral Movements in Kubernetes

Explore Kubernetes lateral movements, identity types, and cluster-to-cloud authentication methods. Learn about real-world misconfigurations leading to cluster takeovers and prevention strategies.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Privacy-Friendly QR Codes for Identity

Explore secure QR code frameworks for identity verification, focusing on privacy features that allow selective attribute disclosure. Learn about SMART Health Cards and a new open-source specification.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Public, Verifiable, and Unbiasable Randomness - Wassat?

Explore randomness types, their importance, and applications. Learn about drand, a distributed randomness software, and its role in providing public, verifiable randomness as a service.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Passive Recon & Intelligence Collection Using Cyber-Squatted Domains

Explore passive intelligence gathering through domain squatting, including low-cost techniques, data analysis, and defensive strategies against this cyber threat.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Tell Me Where You Live and I Will Tell Your Password

Explores factors influencing password quality across countries, revealing literacy levels and internet usage impact. Aims to understand macrosocial protection factors for adapting password lists.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

What Lies Behind Canada's Internet Regulation Reversal?

Exploring Canada's shift from pro-innovation to regulatory approach in Internet policy, covering broadcast, news media, online harms, and privacy regulations. Unpacks recent developments and government plans.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Advanced Process Injection Techniques

Hands-on workshop exploring APT tactics for privilege escalation and persistence. Learn to develop stealthy implants through 7 labs on Windows process injection techniques.

• YouTube
• 2 hours 5 minutes
• Self-Paced
• Conference Talk

Web Application Firewall Workshop

Hands-on workshop exploring Web Application Firewall bypass techniques, including encoding, SQL injection, protocol switching, and syntax alternatives. Practical exercises with in-depth explanations for each method.

• YouTube
• 1 hour 53 minutes
• Self-Paced
• Conference Talk

Request Smuggling 101

Explore HTTP Request Smuggling attacks, risks, and payloads. Learn to detect and mitigate vulnerabilities in load balancers and proxies. Includes live demonstration and practical mitigation strategies.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Burnout - Destabilizing Retention Goals and Threatening Organizational Security

Explore strategies to prevent burnout in cybersecurity professionals, improve talent retention, and maintain organizational security through effective mental health support and skill development.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Security Metrics That Matter

Learn to identify and utilize security metrics that truly matter for effective organizational protection, focusing on improvement and smart resource allocation.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Forensicating Endpoint Artifacts in the World of Cloud Storage Services

Explore key forensic artifacts in cloud storage services like OneDrive and Dropbox, focusing on data exfiltration detection and acquisition techniques for endpoint investigations.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk