Monthly Archives: October 2018

November, 2018 Chapter Meeting

Our November chapter meeting is on Wednesday, November 7th, 2018 at 5:45PM. Please RSVP if you plan on attending!

Tales from the CSOC – APT Attack Survival

Abstract: Since early 2018, APT Leviathan (Fever Dream, TEMP.Periscope) has been conducting an ongoing wave of intrusions targeting engineering and maritime entities. This tale from the CSOC chronicles one such attack encounter. From the APT side of the story, we will explore how they achieved shell, conducted recon, gathered creds, moved laterally, established persistence and engaged their core target. From the CSOC side of the story, we will review how they were detected, pursued, and defeated in the last second cut-the-red-wire-before-detonation dramatic ending. We’ll conclude with lessons learned and recommendations.

Speaker Biographies:
Paul Speulstra has over 25 years of enterprise IT experience, is an accomplished cyber security specialist, software developer and IT manager. From the early days of the very first boot sector and macro viruses to today’s threats combating APTs, cyptomining and ransomware attacks, Paul has an extensive and diversified background in the IT security sphere. Currently serving as an incident responder in a Fortune 500 global cyber security operations center for the past 4 years, Paul has firsthand experience in the research, prevention, detection and remediation of current cyber security threats and malware. Paul also enjoys writing custom software security utilities to complement and enhance the defense-in-depth security posture at his workplace.

Schedule
5:45-6:00PM Networking, dinner
6:00-7:15PM Presentation
7:15-7:45PM Q&A

Location Information
Metro Health IT Facility
985 Gezon Parkway (across from Target loading dock)
Wyoming, MI, 49519

Map

October, 2018 Chapter Meeting

Our October chapter meeting is on Wednesday, October 3rd, 2018 at 5:45PM. Please RSVP if you plan on attending!

Building Security That Thinks

Abstract: Learn about evolving technology around machine learning, including fundamentals for Cyber Security Professionals.

Speaker Biographies:
Andy Bryan is the Head of Field Engineering at Vectra, Andy is a technologist who has spent most of his 23-year career moving early stage companies toward publicly traded companies with a heavy focus on Security Studies. Prior to joining Vectra, Andy spend a several years at FireEye / Mandiant, Aruba Networks, and Fortinet. Andy currently holds his CISSP and had taken numerous security certification courses from SANS and went to school at both Colorado Tech and Northeastern University for Computer Science. Early in his career Andy was indoctrinated into the security mindset with US Army where he attended several different schools and spent several years overseas while performing his duty to the United States.

Schedule
5:45-6:00PM Networking, dinner
6:00-7:15PM Presentation
7:15-7:45PM Q&A

Location Information
Metro Health IT Facility
985 Gezon Parkway (across from Target loading dock)
Wyoming, MI, 49519

Map