NorthSec Courses

Deep Dive Into Tor Onion Services

Explore Tor onion services: their evolution, security improvements, and critical applications. Learn about the new design's enhanced privacy, scalability, and development status.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Modern Reconnaissance Phase by APT - Protection Layer

Evolving APT reconnaissance techniques using malicious documents and watering hole attacks. Detailed analysis of obfuscation methods, scripting languages, and mitigation strategies for enhanced cybersecurity.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Stupid RedTeamer Tricks

Discover simple yet effective red teaming tricks to enhance assessments, including improved USB key drops, C&C concealment, and social engineering techniques using Outlook.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Playing Through the Pain - The Impact of Dark Knowledge and Secrets on Security and Intelligence Professionals

Exploring the psychological toll of classified knowledge on intelligence professionals, addressing cognitive dissonance, trauma, and coping strategies in high-stakes security work.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

BearSSL - SSL for All Things

Explore BearSSL, an SSL/TLS library optimized for constrained systems. Learn about secure crypto, SSL attacks and defenses, and implementing in small RAM environments.

• YouTube
• 1 hour 5 minutes
• On-Demand
• Conference Talk

Hack Microsoft Using Microsoft Signed Binaries

Explore advanced attack techniques using Microsoft signed binaries and PowerShell to bypass detection, manipulate memory, and achieve persistence in Windows systems.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Pentesting - Lessons from Star Wars

Explore threat modeling through Star Wars, gaining practical insights for effective offensive and defensive security strategies in software development.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Not Safe For Organizing - The State of Targeted Attacks Against Civil Society

Exploration of targeted cyber attacks against civil society groups, focusing on Tibetan community and Latin American cases. Discusses attacker tactics, victim impacts, and future trends.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Bypassing Application Whitelisting in Critical Infrastructures

Explore techniques to bypass application whitelisting in critical systems, including code execution, protection bypasses, and vulnerabilities in McAfee's application control.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Android - Practical Introduction into the Insecurity

Practical exploration of Android security vulnerabilities, covering user mistakes and system flaws. Includes demonstrations of local and remote attacks, emphasizing potential risks and damages.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Real Solutions From Real Incidents - Save Money and Your Job

Learn cost-effective strategies to prevent security incidents through real-world scenarios, gap analysis, and enterprise protection methods. Gain insights on leveraging incident response lessons for improved security programs.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Analysis of High Level Intermediate Representation in a Distributed Environment for Large Scale Malware Processing

Explore advanced malware analysis techniques using distributed reverse engineering and machine learning to identify code similarities and extract key characteristics from millions of samples.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Applying DevOps Principles for Better Malware Analysis

Leveraging DevOps principles to streamline malware analysis, automate lab setup, and enhance collaboration among security researchers for more efficient threat detection and response.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

CANtact - An Open Tool for Automotive Exploitation

Explore CANtact, an open-source tool for automotive network analysis. Learn to view, decode, and manipulate CAN traffic for reverse engineering and security testing of vehicle systems.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

How Anonymous Narrowly Evaded the Cyberterrorism Rhetorical Machine

Explore the factors that prevented Anonymous from being labeled as cyberterrorists, despite their global political activism and masked identity. Gain insights into the complex dynamics of digital activism and cybersecurity rhetoric.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk