Training Opportunities
To register for a training session, you must be registered for the Summit. If you are already registered and you would like to add on a training, you may do so in your personal registration portal which you can access from your registration confirmation email or email NCSregistration@eventPower.com for assistance. If you have not registered for the Summit, you may register now below.Register Now
Two Day Trainings
Basic Wireless Fundamentals
Training by Skinny Research and Development LLCPresenter: Mr. Jason Baird, Owner
Date: Monday, September 18 & Tuesday, September 19, 2023 | 9:00a.m. - 4:00p.m.
Price: $375.00
Description
Basic Wireless Fundamentals is for students that are beginning their wireless protocol journey. The class will focus on the topics of Bluetooth and Wi-Fi. The class will begin with students getting acclimated to the Linux operating system. The Linux file structure and some terminal commands will be reviewed. This will provide a foundation as we move into understanding Bluetooth protocols and tools. We will discuss Bluetooth security considerations and perform labs that focus on surveying the wireless Bluetooth environment.
The Wi-Fi portion of the class will examine the different varieties of the protocol as well as explore how Wi-Fi connections occur. We will take a look at Wi-Fi infrastructure, examine the capabilities of Wi-Fi devices, and perform labs involving Wi-Fi surveys while using Wireshark to understand Wi-Fi connections. We will also discuss how Wi-Fi devices differ between manufacturers and how that affects the security of a Wi-Fi device.
This class will be filled with hands-on learning opportunities. Students are required to bring their own laptop. A limited supply will be on-hand for student use.
Cyber Intrusion Fundamentals
Training by Skinny Research and Development LLCPresenter: Mr. Josiah Bryan, Senior Software Engineer
Date: Monday, September 18 & Tuesday, September 19, 2023 | 9:00a.m. - 4:00p.m.
Price: $375.00
Description
Cyber Intrusion Fundamentals is a two day course that provides students basic hands on hacking skills. The objective of the course is to teach defensive minded people how bad guys do their job. It encompasses the following:
- Basic linux commands
- Recon using google
- Finding credentials
- Basic nmap
- Basic metasploit
The class's intent is to slowly step students through the compromise kill chain and provide an environment to practice the very basics from OSINT to compromise. Students will be armed with technical and procedural skills required to perform internal and external cyber assessments focused on acquiring access to data and computer resources. Without a firm understanding of how hackers successfully execute cyber intrusions, it is impossible to properly defend any electronic asset in an era constructed on Internet-connected devices.
Real Network Penetration Testing
Training by Real HaxPresenter: Mr. Royce Davis, Principal Engineer
Date: Monday, September 18 & Tuesday, September 19, 2023 | 9:00a.m. - 4:00p.m.
Price: $475.00
Description
On day one, you will begin by attacking a pre-configured virtual network environment modeled after a modern enterprise. This environment consists of workstations and servers running various Linux and Windows operating systems. You will utilize your newly acquired skills to identify and enumerate network services, uncover and attack exploitable weaknesses, and perform privilege escalation techniques on both Windows and Linux systems. Once compromised, targets will reveal access to Newley available systems which you will penetrate to further your foothold within the enterprise environment
Day two will focus on setting up a Command and Control (c2) infrastructure, deploying phone-home agents on multiple targets, and uncovering a path to Domain/Network-level admin on the target enterprise environment. You will also learn how to create a professional-grade report, that includes the eight components of a solid pentest deliverable.
By the end of this training, you will have a comprehensive understanding of the challenges professional penetration testers face and the tactics, techniques, and procedures (TTPs) needed to overcome them. You will leave feeling empowered and well-equipped to tackle even the toughest of engagements.
https://www.hackspacecon.com/trainer-royce-davis
One Day Trainings
Dark Web Investigations - JUST ADDED
Training by EC-CouncilPresenters: Mr. Wayne Burke, Cyber2 Labs
Date: Tuesday, September 19, 2023 | 9:00a.m. - 4:00p.m.
Price: $174.00
Description
This one-day workshop is a complete guide to dark web investigations. Students will learn the technical issues of the dark web and will be given a thorough tour of the dark web. Students will also be taught specific investigative techniques with examples for a wide range of investigative needs. This training is useful for any forensic investigator but is particularly interesting to those trying to trace data leaks, financial crimes, and related crimes. This course includes many hands-on labs.
Cyber Threat Intelligence: The Return of the Analyst
Training by Accenture Federal ServicesPresenters: Mr. Brad Rhodes, Sr. Manager, Mr. Craig Jones, Manager, Mr. Michael Molinari, Sr. Manager
Date: Monday, September 18, 2023 | 9:00a.m. - 4:00p.m.
Price: $75.00
Description
A not so long time ago in a Security Operations Center (SOC) not so far away...
Cyber Threat Intelligence (CTI) was used, but everything was a priority and the abundant tooling created false positives, rabbit holes, and alert fatigue reigned throughout. That was when The Analyst returned, cutting through the noise with priorities, processes, and documentation to deliver the actionable intelligence the SOC needed to catch threat actors and thwart their evil efforts! The SOC was saved, the organization protected, and leadership listened when The Analyst spoke about things that actually mattered!
Sound far fetched? Perhaps, but it is story found in organizations across government and commercial sectors. Using scenario-based, hands-on, and group work: this class will walk attendees through processes, tools (agnostic approach), priorities development, and products families spanning multiple industry verticals needed to deliver CTI that can be actioned by organizations to disrupt threat actor OODA-loops before they can impact the bottom-line!
CompTIA Data+ One Day Preview for Security Professionals
Training by ThinkData Solutions, Inc.Presenter: Ms. Robin Hunt, CEO & Instructor
Date: Monday, September 18, 2023 | 9:00a.m. - 4:00p.m.
Price: $200.00
Description
Learn from the people who created the CompTIA Official Content and Labs and taught the CompTIA Data+ Pilot Program! You could say we wrote the book about CompTIA Data+. We walk you through everything, so that you have a full understanding of all the materials and resources available to prepare you for the CompTIA Data+ certification exam. “We believe that one of the most valuable skills an employee can have is the ability to solve problems by working effectively with data” – Robin Hunt, co-founder of ThinkData Solutions and author of CompTIA Data+ Official Content. Individuals who earn the CompTIA Data+ certification have demonstrated their ability to analyze and report on complex datasets, to use oversight and data quality standards, and to communicate insights effectively to support data-driven decisions. This certification shows the holder has the data knowledge of someone with at least 2 years of data work experience. CompTIA Data+ is the only data analyst certification that covers baseline data analytics skills, assesses hands-on abilities and is vendor neutral. This certification gives you the skills you need to perform a data job regardless of the specific programs you’re using.
RMF 2.0
Training by Cyber BrewsPresenters: Ms. Karen Williams, CEO/Trainer
Date: Monday, September 18, 2023 | 9:00a.m. - 4:00p.m.
Price: $475.00
Description
This workshop is approximately will cover the latest National Institute of Standards and Technology (NIST) Special Publication (SP) 800-37 REV 2 "Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy." We will review other NIST 800 series documents that have been updated (800-53 rev 5, 800-53A, 800-160 v1, and 800-160v2). This workshop will include comprehensive overviews of System Security Plans (SSPs), System Security Engineering (SSE), Security Assessment Planning, and Plan of Action and Milestone (POA&M) management.
Mrs. Williams uses her experience working in the Department of Defense (DoD) as a government contractor for 18 years to explain how each step affects not only security professionals and system owners, but also project management, system development, and organizational risk tolerance.
So You Think You're Ready for a CMMC Level 2 Assessment?
Training by Kieri Solutions & Summit 7Presenter: Mr. Amira Armond, President & Ms. Joy Beland, VP Partner Strategy and Cybersecurity Education
Date: Tuesday, September 19, 2023 | 9:00a.m. - 4:00p.m.
Price: $105.00
Description
There are many different versions of “ready” when it comes to CMMC Level 2 Assessments by a C3PAO. Depending on the guidance you have received from an RP, PA, CCP Candidate, internal SME, external consultant, or just being self-taught, how ready you think you are vs. how ready you REALLY are can be a moving target.
In this session, Amira Armond and Joy Beland will workshop the following readiness components to use as your guidepost on the CMMC Readiness journey. We will provide a workbook with guidance in each segment, as we help you answer:
- Can you defend the scope you have presented with documentation of where CUI is stored and transmitted in your network? Will your boundaries stand up to the assessor’s criteria?
- If you use an External Service Provider like a MSP (Managed Service Provider) or MSSP (Managed Security Service Provider), do they know what evidence they need to bring to the assessment? Are you defining their role in a way that the assessor will accept?
- If you use Cloud Service Providers to store, process or transmit CUI, do you have the right “Body of Evidence” available for review?
- What are the three proofs
Splunk 4 Rookies
Training by SplunkPresenter: Mr. Phil Prophett
Date: Tuesday, September 19, 2023 | 9:00a.m. - 12:00p.m.
Price: $75.00
Description
In this workshop, we will walk through a series of exercises designed to get someone new to Splunk to the point where they understand what Splunk is and what it is capable of. Attendees will create their own Splunk app, add some data, and then search and analyze that data to create an interactive dashboard. Attendees will gain a good understanding of the value Splunk delivers, particularly in the areas of IT operations, security, DevOps and business analytics.
Enterprise Security Hands-On with Splunk
Training by SplunkPresenter: Mr. Phil Prophett
Date: Tuesday, September 19, 2023 | 1:00p.m. - 4:00p.m.
Price: $75.00
Description
Enterprise Security Hands-On is a modular, hands-on designed to familiarize participants with how to investigate incidents using Splunk Enterprise and Splunk Enterprise Security. This workshop provides users an opportunity to walk through multiple scenarios and see first-hand how Enterprise Security can be used from the creation of a notable event to investigate all the way to the raw event that identifies the adversaries action. The workshop leverages the popular Boss of the SOC (BOTS) dataset and is laid out in an interactive format. Users will leave with a better understanding of how Splunk and Enterprise Security can be used to generate notable events and investigate them as they occur in the enterprise."