NorthSec Courses

Detection Engineering without Alert Fatigue - Correlating Minor Detections

Explore innovative approaches to balance detection coverage and alert fatigue in SOC operations, leveraging custom platforms and indicator correlation for effective threat hunting and investigation assistance.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Vulnerability Haruspicy - Using Woo To Confirm Your Biases

Explore the absurdities of vulnerability scoring systems like CVSS, EPSS, and SSVC, comparing their theoretical promises to real-world security team practices and biases.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

A Tabletop As Big As the World - Designing Multinational Cybersecurity Exercises

Explore large-scale cybersecurity tabletop exercises involving geopolitical intrigue, multinational corporations, and diverse threat actors for comprehensive incident response training.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

A Pirate's Guide to Snake Oil and Security

Explore vulnerability management through a pirate-themed journey, comparing security products and identifying useful tools versus ineffective "snake oil" solutions.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Linux and IoT Malware Analysis with r2ai

Discover how AI accelerates Linux and IoT malware analysis using r2ai, exploring decompilation techniques, defeating obfuscation, and managing AI limitations in cybersecurity research.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Living Off the Pipeline - Advanced Supply Chain Attacks in CI/CD Build Environments

Discover advanced supply chain attack techniques targeting CI/CD pipelines, learn to predict threats using adapted MITRE ATT&CK framework, and defend against XZ-like compromises.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

UNO Reverse Card - Exposing C2 Operators Through Their Own Logs

Uncover how cybercriminals become victims of their own infostealers, exposing C2 operators through stealer logs analysis and revealing diverse threat actor profiles.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Cyberespionage Tactics in Webmail Exploitation

Explore real-world XSS exploitation in webmail by cyberespionage groups, uncovering zero-day vulnerabilities in Roundcube and MDaemon used to steal government emails.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

One Certificate to Rule Them All - Uncovering a Global Botnet Infrastructure Through Certificate Analysis

Uncover how a single self-signed certificate exposed a 70,000-host botnet infrastructure, revealing GobRAT malware and the new Bulbature backdoor through detailed forensic analysis.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Uplevel Your Security Program with AI

Discover how LLMs can transform your product security program through dynamic risk assessment, enhanced team collaboration, and innovative workflows for future-ready protection.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Exploring MSIX Threat Landscape - Advanced Attack Techniques and Defense Strategies

Discover advanced MSIX attack techniques including VFS abuse for DLL Hijacking and AppDomainManager Injection, plus defensive strategies and detection methods.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Noise Pollution is Damaging Your SOC

Discover how excessive alerts create "noise pollution" in SOCs, causing analyst fatigue and decreased performance, with practical strategies to reduce false positives and improve threat detection.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Exploring Azure Logic Apps - Security Vulnerabilities and Attack Vectors

Uncover critical security vulnerabilities in Azure Logic Apps, from data exposure to privilege escalation, with real-world attack scenarios and defensive strategies.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Exploiting the Not So Misuse-Resistant AES-GCM API of OpenSSL

Explore AES-GCM vulnerabilities in OpenSSL's API and learn exploitation techniques for real-world cryptographic misuse scenarios in this security-focused presentation.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Oops, I Hacked It Again - Tales and Disclosures of Ethical Hacking

Discover real-world hacking stories from supermarket systems to ticketing platforms, exploring vulnerability discovery, ethical disclosure processes, and building trust between hackers and organizations.

• YouTube
• 25 minutes
• Self-Paced
• Free Video