NorthSec Courses

NorthSec 2015 - Jean Francois Cloutier & Francois Gagnon - CHEKS

Explore the science and technology behind the Chaotic Encryption Key System (CHEKS), including its concept, implementation, and practical application in a basic chat demo.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

OO RE with HexraysCodeXplorer

Explore object-oriented reverse engineering techniques for modern malware analysis, focusing on C++ code reconstruction and tools like HexRaysCodeXplorer for tackling complex malware frameworks.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Hopping on the CAN Bus

Learn to hack your car's CAN bus using an open-source toolkit. Explore CAN basics, attack methods, hardware/software tools, diagnostic protocols, and security implications for modern vehicles.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

MuddyWater: From Canaries to Turkeys - Evolution of APT Campaigns 2021-2022

Detailed analysis of MuddyWater APT group's evolving tactics, including use of Canarytokens, mixed payload delivery, and WSF-based RAT. Explores campaigns targeting Turkey, Armenia, Pakistan, and Arabian Peninsula.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

The Road to BeyondCorp - Implementing Zero Trust Architecture

Insights into BeyondCorp fundamentals, misconceptions, and roadmap for implementing zero trust architecture in organizations, addressing the lack of concrete guidance amidst vendor noise.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Evasion Techniques for Red Team Engagements

Techniques for deploying code undetected during red team engagements, evading modern EDR solutions. Insights from an experienced red teamer on covert operations in complex environments.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Deception Techniques for Penetration Testers - NSEC 2023

Explore deception techniques for pentesters, drawing insights from magicians. Learn key social engineering concepts, practical tips for phishing, phone engineering, and physical intrusion.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Obfuscation Classification via Machine Learning for JavaScript, Python, and PHP

Explore machine learning techniques for classifying obfuscated code across JavaScript, Python, and PHP, enhancing cybersecurity analysis and threat detection capabilities.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Empowering Security with Generative AI - Fundamentals and Applications of GPT Models

Explore GPT models' potential in security research, covering semantic searching, few-shot learning, and code generation. Gain insights and inspiration for leveraging AI to empower security teams.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Infrastructure as Code, Automation, and Testing in Detection Engineering

Explore detection-as-code for security teams: automate, test, and deploy robust detection systems using Azure DevOps, Microsoft Sentinel, and Defender suite. Improve effectiveness and maintain control across environments.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Burp Suite Pro Tips and Tricks for Efficient Bug Hunting and Pentesting

Discover advanced strategies for efficient bug hunting and pentesting using Burp Suite Pro. Learn GUI optimization, task automation, essential extensions, and niche techniques to enhance your workflow.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Go Reverse-Engineering Workshop

Develop specialized skills for reverse-engineering Go binaries, focusing on offensive security tooling. Learn methodologies and disassembler plugins to tackle this challenging language.

• YouTube
• 2 hours 28 minutes
• Self-Paced
• Conference Talk

Tokens, Everywhere!

Hands-on deep-dive into Azure AD's OAuth implementation, covering JWT, token types, and attack scenarios. Learn to secure environments and detect token abuse.

• YouTube
• 2 hours 22 minutes
• Self-Paced
• Conference Talk

10 Things I Wish I Knew Before My First Incident

Essential insights for effective incident response, covering crucial aspects often overlooked by beginners. Learn from real-world experiences to enhance your preparedness and decision-making during critical cybersecurity events.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Jumping the Air Gap - 15 Years of Nation-State Efforts

Explore nation-state techniques for breaching air-gapped networks, analyzing similarities across frameworks and providing practical advice to enhance security and detect potential attacks.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk