NorthSec Courses

Request Smuggling 101

Explore HTTP Request Smuggling attacks, risks, and payloads. Learn to detect and mitigate vulnerabilities in load balancers and proxies. Includes live demonstration and practical mitigation strategies.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Burnout - Destabilizing Retention Goals and Threatening Organizational Security

Explore strategies to prevent burnout in cybersecurity professionals, improve talent retention, and maintain organizational security through effective mental health support and skill development.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Security Metrics That Matter

Learn to identify and utilize security metrics that truly matter for effective organizational protection, focusing on improvement and smart resource allocation.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Forensicating Endpoint Artifacts in the World of Cloud Storage Services

Explore key forensic artifacts in cloud storage services like OneDrive and Dropbox, focusing on data exfiltration detection and acquisition techniques for endpoint investigations.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Blurred Lines - The Mixing of APTs with Crimeware Groups

Exploring the blurred lines between state-sponsored actors, APT groups, and crimeware gangs, challenging traditional classifications and discussing the emergence of second-tier APT categories.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Hacking K-12 School Software in a Time of Remote Learning

Análisis de vulnerabilidades en software educativo durante la pandemia, explorando ataques potenciales y sus implicaciones para la seguridad de dispositivos escolares y domésticos.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

CrimeOps of the KashmirBlack Botnet

Detailed analysis of KashmirBlack botnet's infrastructure, operation, and evolution. Explores its infection methods, global impact, and adaptability. Highlights the importance of CMS security and cyber hygiene in the digital age.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Full Circle Detection - From Hunting to Actionable Detection

Comprehensive guide to creating efficient detection rules, from initial hunting ideas to actionable alerts for security analysts, using a real-world example of an Outlook persistence technique.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Data Science Way to Deal With Advanced Threats

Explore data science methods for advanced threat detection in SOCs, combining unsupervised and supervised learning to reduce false positives and streamline anomaly triage using ML and interactive visualizations.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

dRuby Security Internals

Comprehensive analysis of dRuby's security vulnerabilities, exploring its API, internals, and wire protocol. Demonstrates novel exploitation techniques and discusses efforts to harden dRuby against identified issues.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

How to Harden Your Electron App

Learn techniques to enhance security in Electron apps, focusing on threat modeling, separation of concerns, and best practices. Discover insights from building a secure password manager using this framework.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Kubernetes Security 101 - Best Practices to Secure Your Cluster

Learn essential best practices for securing Kubernetes clusters, covering key vulnerabilities, attack vectors, and protective measures to safeguard containerized applications.

• YouTube
• 3 hours 28 minutes
• On-Demand
• Conference Talk

DIY Static Code Analyzer - Building Your Own Security Tools with Joern

Learn to build custom security tools using Joern for static code analysis, enhancing your ability to detect vulnerabilities and improve software security.

• YouTube
• 3 hours 3 minutes
• On-Demand
• Conference Talk

Automated Contact Tracing Experiment on ESP Vroom32

Hands-on workshop exploring automated contact tracing using ESP Vroom32 microcontroller, focusing on practical implementation and experimentation with the NorthSec 2021 badge.

• YouTube
• 2 hours 1 minute
• On-Demand
• Conference Talk

Introduction to Fuzzing

Explore the fundamentals of fuzzing, a powerful software testing technique, in this comprehensive workshop led by expert Dhiraj Mishra.

• YouTube
• 3 hours 28 minutes
• On-Demand
• Conference Talk