Information Warfare Summit

Kevin Turner will host the joint Oklahoma Military/State Team panel with commander National Guard Cyber Command Captain Dan Slusarchuk, this year sharing behind the scenes discussion from team members that participated in Cyber Shield 2021.

This presentation is an extension of the SANS Rekt Casino series which is based on numerous real world ransomware attacks.
In this presentation I will talk about what it's like from the incident responder perspective, the IT team perspective, and from the business perspective.
I will cover how to respond to the incident, negotiating with the attackers, recovering from the attack, and reporting to the business as an independent consultant, or as a member of the IT or security team.

Things never go as planned and this provides good insight as to what actually happens behind the scenes and how things can go very wrong with the appropriate preparation.

"Dependencies, pipelines, and vulnerabilities -- Oh, my!

Security teams and developers are often at odds with one another. With the fast and furious adoption of agile development cycles, how can we, as security professionals stay on top? Bridging the gap is now more important than ever!"

Security professionals won't allow users into their environment with hacking tools, so how do you address people with implants? People are the attack vector and the tool. The ability to compromise contactless tech threatens physical & digital security. How do you stop a Cyber threat from a human?

COVID demonstrated to the world that supply chains are critical to our society and are vulnerable to many different types of disruptions. Not just cyber security disruptions.

Go mingle!

Come grab a drink with us!

Sponsored by Optiv and Palo Alto. Give them thanks for the drinks!

Passive EDR tools were designed to focus on the detection of suspicious activities on endpoints. These tools were different from earlier security solutions in that they did not necessarily focus on identifying specific malware, but instead looked for anomalous activities.

Have you reviewed your organization's governmental information security compliance requirements? This talk is a cheat sheet for evolving FTC InfoSec safeguards required of organizations electing to store consumer financial information.

Many new and experienced developers turn to Google for code examples when building software. Some will even copy and paste these examples into their project and publish without thinking twice. How is this affecting our systems' security?

Every Info Sec career has a report writing moment (likely several). Be it an email brief to management or a risk assessment, incident response, metrics or executive report. Your CEO, Board, VP, CISO, CIO, Director, etc. will thank you for learning these tips for successful Info Sec writing.

This is mission critical defense for your Linux systems! Red team rascals on the the outside, check! How do you make the the inside sider threat a non starter? And the worst gut check of all - the auditors! Come to this talk and learn documents to learn from and practices to don Lets suit up!

Learn about the OSSEM project and how it is being implemented in Azure Sentinel to normalize events from all types of sources, making searching your logs easier than ever. You will learn some Kusto Query Language (KQL) during the talk, but you don't need to know it beforehand.

Go mingle!

Come grab a drink with us!

Sponsored by Optiv and Palo Alto. Give them thanks for the drinks!