- This event has passed.
#misec Lansing meeting
June 12, 2019 @ 6:30 pm - 8:30 pm
Your monthly dose of #misec in Lansing
Talk title: Incident Response Workshop
Speaker: David Reed
Summary: We all hear that we should have an Incident Response plan and be ready at a moment’s notice. But having an environment to test those tools and procedures isn’t always easy. In this workshop we will take a look at a small scale business network from the eye of an incident responder. We will utilize common techniques and scalable opensource tools to gain visibility and respond to an incident. Feel free to bring any blue team tools that you would like to test out in the environment as well.
This workshop will utilize a closed network lab environment.
For participating on the range:
- Wireless capable device with your preferred Blue Team toolset. Your device will be connected directly to the range and you are responsible for the security of your device. Corporate devices are not recommended.
- I recommend a CommandoVM (https://www.fireeye.com/blog/threat-research/2019/03/commando-vm-windows-offensive-distribution.html) as well as a Kali VM if you don’t have a toolset already.
- Recommend bringing a long patch cable as a physical switch connection will be available and provides better connectivity and reliability than wireless.
If you have any questions about requirements, please contact David at: david | @ | reedtechno.com or via LinkedIn/Slack/Twitter.
About the speaker: David Reed (IT System and Security Administrator at National Heritage Academies)
David currently works for one of top 100 largest K-12 education systems in the nation as the lead for everything IT Security and Identity. In his role, he has implemented multiple technical and cultural solutions to reduce risk and raise awareness across the organization. David’s experience also includes 5 years with the Michigan Army National Guard where he served as a team manager of the 172 Cyber Protection Team.
Pizza and pop will be provided by TEKsystems; at least one representative will also be present during the event.
The session will start at 6:30pm and will run until 8:30pm. However, you will be able to arrive and depart when it’s most convenient for you.
Please see map below for more details on location.
VENUE: MSU Engineering Building, Room 2400