Free

December (ISC)2 Alamo Chapter Monthly Membership Meeting

Event Information

Share this event

Date and Time

Location

Location

NuStar Energy

19003 Interstate 10 Frontage Rd

San Antonio, TX 78257

View Map

Event description

Description

Please join us!

The (ISC)²® Alamo Chapter Board of Directors invites you to attend our monthly membership meeting. Please register for this event to reserve your seat and make sure you are on the list for the facility's receptionist for badges. Non-(ISC)²® members are also welcome. Please e-mail us at membership@isc2chapter-sanantonio.com if you have any questions. Visit our web site at: http://www.isc2chapter-sanantonio.com/ for more information about the (ISC)²® Alamo Chapter.

December is the month for election of officers for next year. Please consider how you can help support our Chapter, attend and vote!

Dues for the calendar year are payable now. Dues have increased to $60/yr to cover the cost of providing lunch to our paid pre-registered attendees. Please visit our Chapter website to pay your annual dues via PayPal. Dues are pro-rated to the month of joining for new members only.

Lunch will be provided for all pre-registered paid members only. Non-members and guests will be asked to pay $8.00 for the lunch meal.

Topic & Speaker

This month’s presentation is “Hunting and Gathering your Credentials: A look at common and not so common ways of gaining access to your passwords and other sensitive data” by (Chapter Member) Jake Miller.

Synopsis

Credential theft is an important factor when determining the cause and effect of data breaches. While there are several defensive and offensive frameworks that discuss gathering credentials during different stages of an incident, there are still many methods of gathering credentials that very few people (if any) talk about. The better-known methods (phishing, password spraying, LLMNR/NTB-NS poisoning, Kerberoasting, Extracting from LSASS) are still very effective, but are often looked for, detected, or adequately mitigated. These well-known methods will be briefly discussed, but the majority talk will focus on other, lesser-known methods. These methods include:

• Indirect password guessing – Determining passwords through error messages

• MFA half guessing – Determining the password part of MFA to reuse somewhere else

• Guessing answers to security questions for password resets

• Searching the file system for sensitive info – What to look for?

• Dealing with encrypted files

• Stealing passwords from password managers

Each of these methods will be discussed in depth, and will focus on work conducted on networks that were primarily Windows-centric (although the techniques can be applied to other areas). Each method will include plenty of screenshots, occasional pre-recorded demos, and functioning code to demonstrate the concepts discussed.

Speaker's Biography

Jake is a senior cybersecurity consultant with over 10 years of experience in information security, information assurance, security operations, network security, with 5 years focusing on ethical hacking/penetration testing and independent security assessments. His expertise includes leading security assessments of web applications and networks, as well providing remediation efforts to fix cybersecurity weaknesses and deficiencies. As a Veteran of the United States Navy, Jake performed network and security operations services for Naval Facilities and Satellites and dealt heavily with the physical security of classified networks, facilities and items, as well as nuclear weapons and components.

Meeting Agenda

Intro and Membership Vote - 12:00 - 12:10; Speaker time - 12:10 - 12:45; Q & A - 12:45 - 1:00

Continuing Professional Education (CPE) Credit

The membership chairperson will submit one or more CPEs for this event for (ISC)²® members. Please bring your (ISC)²® membership number to the meeting. Attendees may also request an attendance receipt from one of the Chapter's Board members to support his or her continuing education requirements.

Sponsors

NuStar Energy L.P.. The (ISC)²® Alamo Chapter would like to thank NuStar Energy L.P. for providing the meeting space for us.

Your Employer? If your employer would like to sponsor a Chapter event, please inform one of the Chapter's Board members.

Share with friends

Date and Time

Location

NuStar Energy

19003 Interstate 10 Frontage Rd

San Antonio, TX 78257

View Map

Save This Event

Event Saved