Save the date! On July 20-22, 2021, the Virginia Cyber Range presents the 2021 Cybersecurity Education Conference. This will be a virtual conference and the Call for Proposals is open for workshops and presentations fitting this year’s theme: “Cracking the Code to Cybersecurity Education”. Follow the link above fore more information and stay tuned to the Virginia Cyber Range website or Twitter (@VaCyberRange) for more information.
We thank Randy Marchany for returning to discuss the Critical Security Controls. Find recording of the event on our YouTube channel.
This November marks 5 years of Roanoke InfoSec Exchange. What started as a simple idea for a free, informal group discussing InfoSec topics has managed to stay alive and continue to draw interest 5 years later. Looking back, this isn’t a trivial feat. One of, if not the, core principles of RISE is maximum inclusion of attendees in the area. Whether you are a seasoned professional, a student, in another career and looking for a change, or just an enthusiast – we want you to attend and benefit from RISE. “Exchange” means the exchange of knowledge for the improvement of our community and profession. We try to stay true to this principle by keeping meetings informal and free from “sales pitches”. When you come to a RISE meeting you should feel you’re getting honest information and free exchange of ideas.
This couldn’t happen without you. Your attendance, enthusiasm, and participation enables RISE to continue. If you are a RISE “elder”, we thank you for your continued participation in the group. If you are relatively new – welcome! We thank you for joining us and helping continue the spirit of InfoSec Exchange.
With your support we hope to continue bringing the community together for time to come. Thank you for your support to RISE and the local InfoSec community!
-Rob Garbee, Nate Sykes, & Ed Summers
For December we have asked that Logan Diomedi return and give us an in-depth dive into Burp Suite. As you may remember Logan gave us a quick overview of Burp Suite back in February and many of you requested more so here it is.
Logan Diomedi and Burp Suite, Part 2, Pro Edition
Burp Suite is one of the many free tools available in Kali Linux. Burp Suite allows anyone to test and verify their web applications using various techniques from initial mapping and analysis of an application’s attack surface, to finding and exploiting security vulnerabilities. In this meeting Logan will show us how he uses Burp Suite in his “Red Teaming” pen tests and how you can use the tool to test your own websites.
December 10th @ 5:30pm; This will be a virtual meeting
Logan Diomedi is a 24-year-old Roanoke native and has been in the Information Security world since his early teens. He currently works as a penetration tester for an offensive information-security firm known as Depth Security, where he performs network, application-based, social engineering, and physical penetration testing. Logan is a Capture-the-Flag & HackTheBox regular, and regularly performs infosec-related research in his spare time. Logan has been a RISE attendee for almost 2 years now and has a passion to bring knowledge and resources to the greater Roanoke information security community.
Click through to access the slides and video for November’s virtual meeting on Zero to the Evidence Room with Tyler Booth.
Our next RISE meeting is going to be a great one. Our own Tyler Booth (Hacker Extraordinaire) will be presenting “Hacking a Police Station, From Zero Access to the Evidence Room”. Tyler will be covering one of his favorite Red Team exercises “Hacking a Police Station”. During this exercise Tyler used several hacking techniques to move from outside with no access all the way to the evidence room. The good new for us is that he will be explaining many of these techniques and how he leveraged them.
The meeting will be November 12th, at 5:30pm via WebEx (WebEx info to be released later). Looking forward to virtually seeing you all there.
Tyler Booth is your friendly neighborhood red teamer. He works as a Senior Information Security Consultant at CDW and can never stop hacking things.
To quote Tyler
“I have one cert and wrote a few blog posts on a currently defunct blog (dru1d.ninja). I guess that makes me a bit of an expert, amirite?”
We always ask for new people to step forward and present at a RISE meeting. You bring variety to the group in your experiences and delivery. But maybe you’ve never presented before, or walked away from a bad experience presenting in another forum. You’re looking for advice on how to get back behind the podium. Or you just enjoy an entertaining webcast.
Check out this webcast from Black Hills Information Security titled “How to Present: Secrets of a Retired SANS Instructor”. John Strand and friends share some of their sage advice from combined years of experience presenting to all manner and sizes of audience. These folks speak at the top conferences, face tough criticism, and know when not to drink the water. Anyone would benefit from the lessons they share – why not take advantage of community wisdom?
After you’ve watched the video send us an email at firstname.lastname@example.org with your presentation topic for our next meeting!
For our next meeting we want to focus on all those remote workers, you know those guys that we kicked out the door in March and April. Now that we have an opportunity to look at what we have done, let’s discuss how well we secured our remote environments? Do you have concerns? Do you have some great ideas to share? This is your time to shine. We want your input and thoughts as we discuss how to secure remote infrastructure. Our speaker well give his thoughts and then we will open it up to discussions and thoughts afterwards.
September 10th, 5:30 PM, WebEx information will be sent via E-Mail
As the COVID-19 pandemic spreads across the US many organizations have reduced their physical employee presence and have moved to a remote workforce. This has resulted in many organizations to hastily provide a remote access solution to their employees. This has also, conversely, increased many organizations attack surface to insider or adversarial activity against their organization. In this talk I will be looking to address common shortfalls of these environments coupled with several war stories and defensive strategies to reduce the exposed risk.
Matt Burch is a seasoned InfoSec veteran with 17yrs of collective experience who has transitioned from defensive to offensive security tactics. This has led Matt to develop an understanding of defensive security challenges in addition to adversarial abuse of these strategies. Matt is a Principle Consultant with Optiv’s Threat Management – Attack and Penetration team. Over the past decade, Matt has fulfilled various Subject Matter Expert (“SME”) positions and currently maintains Optiv’s assessment methodology for Product Security Testing.
Tom Weeks (aka “Tweeks”), from Virginia Tech & The Virginia Cyber Range will be giving a hands on, Black Hat / White Hat, Cyber Range Workshop on Defending against hackers on public WiFi networks. Each workshop participant will get a Kali Linux VM and a vulnerable Windows 7 VMs running on the VA Cyber Range, and lab handout simulating a vulnerable laptop on a coffee shop or airport public wifi and how to defend against it.
 – http://nrvr.org/
I know that it seems that RISE has been out of sorts these past few months and the reality is that you’re not wrong. As you know many members of the core RISE team also serve as key team members on various Cyber teams within their own companies. With the onset of the Covid-19 pandemic we have been laser focused on setting up secure remote workforce solutions and protecting network resources as various attack patterns continue to rise. These efforts have resulted in us not being able to dedicate the time needed to ensure that the RISE presentations that you see are both content rich and well-polished. This is not what we desire nor will we continue down this path. I want to assure you RISE is focused on getting you the content that you need and want.
Each month we want to make sure that each presentation is polished and presented with a knowledgeable speaker. We also want to ensure that each meeting provides members an opportunity to socialize, share experiences and create comradery within the local Cyber community. Lastly, I want to assure you that RISE is not going away or losing steam. Your core team members are still dedicated to getting you presentations that are both relevant and content rich. With that being said, I want to let you know that we will need to cancel this week’s presentation. Due to work related duties we were not able to capture the details needed to ensure a polished presentation. This means that we will move forward with our scheduled presentation for July and it should be a good one. Please stay tuned as we will be sending out details within the next few days.
Again, we are sorry that we have had to cancel this week’s presentation and I promise this is not indicative of things to come, this is merely a small speed bump as we traverse these crazy times.
Stay safe and healthy and we look forward to seeing you all in July.