NorthSec Courses

Blurred Lines - The Mixing of APTs with Crimeware Groups

Exploring the blurred lines between state-sponsored actors, APT groups, and crimeware gangs, challenging traditional classifications and discussing the emergence of second-tier APT categories.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Hacking K-12 School Software in a Time of Remote Learning

Análisis de vulnerabilidades en software educativo durante la pandemia, explorando ataques potenciales y sus implicaciones para la seguridad de dispositivos escolares y domésticos.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

CrimeOps of the KashmirBlack Botnet

Detailed analysis of KashmirBlack botnet's infrastructure, operation, and evolution. Explores its infection methods, global impact, and adaptability. Highlights the importance of CMS security and cyber hygiene in the digital age.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Full Circle Detection - From Hunting to Actionable Detection

Comprehensive guide to creating efficient detection rules, from initial hunting ideas to actionable alerts for security analysts, using a real-world example of an Outlook persistence technique.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Data Science Way to Deal With Advanced Threats

Explore data science methods for advanced threat detection in SOCs, combining unsupervised and supervised learning to reduce false positives and streamline anomaly triage using ML and interactive visualizations.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

dRuby Security Internals

Comprehensive analysis of dRuby's security vulnerabilities, exploring its API, internals, and wire protocol. Demonstrates novel exploitation techniques and discusses efforts to harden dRuby against identified issues.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

How to Harden Your Electron App

Learn techniques to enhance security in Electron apps, focusing on threat modeling, separation of concerns, and best practices. Discover insights from building a secure password manager using this framework.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Kubernetes Security 101 - Best Practices to Secure Your Cluster

Learn essential best practices for securing Kubernetes clusters, covering key vulnerabilities, attack vectors, and protective measures to safeguard containerized applications.

• YouTube
• 3 hours 28 minutes
• Self-Paced
• Conference Talk

DIY Static Code Analyzer - Building Your Own Security Tools with Joern

Learn to build custom security tools using Joern for static code analysis, enhancing your ability to detect vulnerabilities and improve software security.

• YouTube
• 3 hours 3 minutes
• Self-Paced
• Conference Talk

Automated Contact Tracing Experiment on ESP Vroom32

Hands-on workshop exploring automated contact tracing using ESP Vroom32 microcontroller, focusing on practical implementation and experimentation with the NorthSec 2021 badge.

• YouTube
• 2 hours 1 minute
• Self-Paced
• Conference Talk

Introduction to Fuzzing

Explore the fundamentals of fuzzing, a powerful software testing technique, in this comprehensive workshop led by expert Dhiraj Mishra.

• YouTube
• 3 hours 28 minutes
• Self-Paced
• Conference Talk

Atomic Red Team Hands-on Getting Started Guide

Hands-on guide for implementing Atomic Red Team, covering setup, execution, and best practices for effective cybersecurity testing and threat emulation.

• YouTube
• 1 hour 24 minutes
• Self-Paced
• Conference Talk

Reversing Android Malware for the Smart and Lazy

Learn efficient techniques for analyzing Android malware, focusing on smart and time-saving approaches to reverse engineering and threat assessment.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Reversing Android Malware for the Smart and Lazy

Learn efficient techniques for analyzing Android malware, focusing on smart and time-saving approaches to reverse engineering and threat assessment.

• YouTube
• 2 hours 59 minutes
• Self-Paced
• Conference Talk

Look! There's a Threat Model in My DevSecOps

Discover a fast-paced, backlog-based approach to threat modeling in DevSecOps environments without slowing development or requiring additional tools. Learn to implement effective security practices efficiently.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk