NorthSec Courses

When the Threat Actor Lives Under Your Roof - Addressing Technological Abuse in Domestic Violence

1 review

Explore how domestic abusers exploit technology to control victims and learn strategies to improve digital literacy and safety tools for vulnerable populations.

• YouTube
• 27 minutes
• On-Demand
• Free Video

10 Things I Wish I Knew Before My First Incident

Essential insights for effective incident response, covering crucial aspects often overlooked by beginners. Learn from real-world experiences to enhance your preparedness and decision-making during critical cybersecurity events.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Jumping the Air Gap - 15 Years of Nation-State Efforts

Explore nation-state techniques for breaching air-gapped networks, analyzing similarities across frameworks and providing practical advice to enhance security and detect potential attacks.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Introduction to Cryptographic Attacks

Hands-on workshop exploring real-world cryptographic vulnerabilities. Implement attacks using provided tools, gaining practical experience in identifying and understanding common cryptographic weaknesses.

• YouTube
• 2 hours 22 minutes
• On-Demand
• Conference Talk

Malware Morphology for Detection Engineers

Explore diverse malware implementations within techniques, analyze tool differences, and learn to build resilient detection rules by modeling procedures and evaluating similarities.

• YouTube
• 2 hours 47 minutes
• On-Demand
• Conference Talk

Hook, Line and Sinker - Pillaging API Webhooks

Explore techniques for exploiting API webhooks, including SSRF attacks that can lead to cloud compromise, and learn about unique attack vectors in modern web services.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

I Thought Writing a Technical Book Was Supposed to Be Fun?

Explore the journey of writing and publishing a 400-page security book, from initial concept to final product, with insights into the realities of the process.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

From the Cluster to the Cloud and Back to the Cluster - Lateral Movements in Kubernetes

Explore Kubernetes lateral movements, identity types, and cluster-to-cloud authentication methods. Learn about real-world misconfigurations leading to cluster takeovers and prevention strategies.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Privacy-Friendly QR Codes for Identity

Explore secure QR code frameworks for identity verification, focusing on privacy features that allow selective attribute disclosure. Learn about SMART Health Cards and a new open-source specification.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Public, Verifiable, and Unbiasable Randomness - Wassat?

Explore randomness types, their importance, and applications. Learn about drand, a distributed randomness software, and its role in providing public, verifiable randomness as a service.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Passive Recon & Intelligence Collection Using Cyber-Squatted Domains

Explore passive intelligence gathering through domain squatting, including low-cost techniques, data analysis, and defensive strategies against this cyber threat.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Tell Me Where You Live and I Will Tell Your Password

Explores factors influencing password quality across countries, revealing literacy levels and internet usage impact. Aims to understand macrosocial protection factors for adapting password lists.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

What Lies Behind Canada's Internet Regulation Reversal?

Exploring Canada's shift from pro-innovation to regulatory approach in Internet policy, covering broadcast, news media, online harms, and privacy regulations. Unpacks recent developments and government plans.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Advanced Process Injection Techniques

Hands-on workshop exploring APT tactics for privilege escalation and persistence. Learn to develop stealthy implants through 7 labs on Windows process injection techniques.

• YouTube
• 2 hours 5 minutes
• On-Demand
• Conference Talk

Web Application Firewall Workshop

Hands-on workshop exploring Web Application Firewall bypass techniques, including encoding, SQL injection, protocol switching, and syntax alternatives. Practical exercises with in-depth explanations for each method.

• YouTube
• 1 hour 53 minutes
• On-Demand
• Conference Talk