Workshops

 
Workshops will run throughout GrrCON and do require an additional ticket and have limited space. The small cost is to ensure attendees who sign up intend to participate. The cost is approximately $5, but seating is limited

VIPs interested in attending a workshop for free must contact Marketing to receive instructions on signing up.
 
Hunt Teaming Workshop
In the modern Infosec landscape there is an increasing need to move beyond static alerting and response into proactive hunting for active threats on the network. This workshop will present a tool agnostic approach to start looking through network traffic and living off the land to identify threat actor activities within an enterprise network environment. We will discuss modern adversary techniques and methods that may be employed to detect these techniques using native windows and Linux tools as well as some basic scripting and basic data analytics to identify threat activity.

Note: You will need a laptop capable of running VMs.

Trainer: Joseph Ten Eyck

When: 10/6/2016, 10am

Eventbrite - Hunt Teaming Workshop

 
Windows Forensic Artifacts – What’s Going on in my system?
As of July 2016 21% of the operating systems running a desktop were Windows 10. As its market share continues to grow and corporate environments continue to move from Windows 7 to Windows 10 we will start to see more investigations with it. This workshop will present numerous artifacts that are present in Windows 10, some are new some are old and some have changed, and how we can interpret them and join different artifacts together to tell a story of what was happening on a system at a given time. Attendees will get introduced or reacquainted with numerous tools to help navigate all the different artifacts presented

Note: You will need a laptop capable of running VMs.

Trainer: Mark McKinnon
When: 10/7/2065, 10am

Eventbrite - Windows Forensic Artifacts - What's Going on in my system?

 

Registration:

Price $5
This training is open to registered GrrCON attendees ONLY.
YOU MUST HAVE A SEPARATE TICKET FOR GrrCON TO REGISTER FOR ANY TRAINING OR IT WILL BE VOIDED.
This training does NOT include a ticket for GrrCON

-= PLEASE NOTE: YOU MUST HAVE A SEPARATE TICKET FOR GrrCON TO ATTEND ANY WORKSHOP! =-