April 19, 2016, meetup agenda - Fire Talks

Eventbright signup

Our next meetup is a week from today, April 19, 2016, starting at 6:00 PM at our new location, the USC/Columbia Technology Incubator. Details are located on our site (http://www.colasec.org/how-to-find-us/). If you have any questions on how to get there respond to this thread or contact Adam directly.

Our meetup agenda will include our usual intro plus a recap of BSides Nashville.Then we'll move into our four 15-minute Fire Talks for the evening.

Fire Talks

The Powerup your attacks with PowerShell - Ralph Collum

Abstract: We will cover a few PowerShell basics to get everybody warmed up. Then we will explore the hacking methodology starting with reconnaissance and moving through to Post Exploitation using PowerShell.
 

Using network flow records for good - Jeff Lang

Abstract: As part of real-time traffic monitoring and historic forensic investigations, Network Flow records can be an invaluable asset.  Flow records are summary data about all the network traffic that is passing through your network devices to answer questions such as how many hosts are talking, whois is talking to whom, and how often?  The main purpose of this FireTalk is to discuss common incidents that might occur on a network and show example Network Flow data for those incidents.

Cyber Horoscope of 2016 with a Focus on Ransomware - Jasun Tate

Abstract: A unorthodox approach at securing an organization from 12 positional facets, with an highlight on strategy deployment from the below:

• Threat Intelligence Manager
• Backup Manager
• CXO
• CISO
• Front End Developer
• Compliance Director
• Human Resources
• Configuration Manager
• Internal Audit
• Fraud Examiner
• Patch Manager

Fire Talk abstract slacker - Adam Twitty

Abstract: One of the fundamental problems with using the internet is that you don't know where it's been. Who owns the wire, the switch, the router, the server once data leaves your network?  How do we protect this information?

This talk will explore the various methods and protocols that we use every day to protect our information and make sure that we know who we are talking to.  You'll also learn what the difference is between encoding, hashing, and encryption.  Finally we'll explore some of the more obscure ways of obfuscating data that you might not have heard of before.

I'm looking forward to seeing you all there!

March 15, 2016, meetup agenda

This month one of ColaSec's own, Josh Huff, will put on a presentation regarding Open Source Intelligence (OSINT).

Abstract: Open Source Intelligence – OSINT: The tools and some uses

Open Source Intelligence is defined by the Army as an intelligence discipline that pertains to intelligence produced from publicly available information that is collected, exploited, and disseminated in a timely manner to an appropriate audience for the purpose of addressing a specific intelligence and information requirement.  That’s a pretty intense way to say that once we find the Open Source Information we use it for a specific purpose.  My talk will show you some of the purposes for finding Open Source intelligence and the tools we use to gather it.  OSINT is everywhere… for example what information can we pull from a social media post showing a great deal at the gas pump? How bad are those pictures of debit cards where people obscure some of the digits on their card? What can we learn from the Internet of things and what can we do to protect ourselves from leaking this information all over the place?  The bonus round includes locating places that our heroes from The Walking Dead snuck around when filming in Atlanta.  

Join us for networking from 6:00 - 6:30 at IT-ology. Then the OSINT presentation by Josh Huff beginning at 6:30. Food and beverages will be available. We look forward to seeing you there!

February 16, 2016, meetup agenda - privacy and big data analytics

We are very excited to have Csilla Farkas an Associate Professor at the Department of Computer Science and Engineering and Director of the Center for Information Assurance Engineering at the Unviersity of South Carolina with as for our next meetup. She will be presenting on privacy issues in the context of big data analytics. An Abstract and more about Csilla can be found below.

Come out for a great talk, infosec fellowship, food, and adult beverages. We meet every third Tuesday at IT-ology at 6:15 p.m. Check out our directions page for how to get to IT-ology and the meeting room.

Abstract

This talk investigates the privacy issues in the context of big data analytics. The need to support data-driven decision making led to the development of sophisticated technologies to collect and analyze large data sets. However, this useful means of analyzing data comes at a cost: sensitive data may be disclosed and individuals' privacy may be violated.   Enterprises, organizations and government agencies collect and analyze vast amounts of data with and without the individuals' knowledge. Even if the raw data is properly sanitized, the result of the analysis may reveal information about specific individuals. Privacy preserving data mining methods have been developed to provide useful analytics without violating users' privacy.  However, these privacy preserving approaches are still limited with respect to the security problem when data mining results are combined with external knowledge to create security violations.  This talk shows some promising approaches that use semantic web technologies 1) to detect undesired inferences due to combining external knowledge with data mining results and 2) to enable individuals (data suppliers) to specify and evaluate privacy preferences in the context of big data analytics.

Bio

Csilla Farkas is an Associate Professor in the Department of Computer Science and Engineering and Director of the Center for Information Assurance Engineering at the University of South Carolina .  Dr. Farkas’ research interests include information security, data inference problem, financial and legal analysis of cyber crime, and security and privacy on the Semantic Web.  She is a recipient of the National Science Foundation Career award.  The topic of her award is “Semantic Web: Interoperation vs. Security – A New Paradigm of Confidentiality Threats.”  Dr. Farkas actively participates in international scientific communities as program committee member and reviewer.

Csilla Farkas received her PhD from George Mason University, Fairfax.  In her dissertation she studied the inference and aggregation problems in multilevel secure relational databases.  She received a MS in computer science from George Mason University and BS degrees in computer science and geology from SZAMALK, Hungary and Eotvos Lorand University, Hungary, respectively.

January 19, 2016 meetup agenda - Gnome in your Home and OSINT

Hello 2016!

We're kicking of the first meeting of the New Year with some OSINT and a hacking challenge.

The plan for this month's meetup, January 19th, 2016, is simple: somplete the SANS Holiday Hack Challenge. The competition might be over, but the fun is still available online. Bring your computers and get ready to have some fun as we work our way through the challenges.

Before that thought, Josh will be giving a short OSINT presentation on yours truly. That's right I told Josh to go find the most embarrassing or most controversial thing online for me.

All that and more for this month's meetup. The fun begins at 6:30 p.m. at IT-ology.

December 15 meetup agenda at the Flying Saucer

We've decided to do the same thing we did last year for our December meetup. We will be going to a restaurant to enjoy some food that is not pizza, drinks, and some casual infosec discussion. This year we're going to head to the Flying Saucer Draught Emporium in downtown Columbia.

We've submitted some infosec related questions for trivia. If you wish to participate in trivia we recommend getting to the Flying Saucer by 7:00 p.m. We hope to see everyone there.

November 17, 2015, meetup agenda - Catalyst AMA

This month Michael Santarcangelo will be joining us for an Ask Me Anything (AMA AKA Q&A AKA Question & Answer) at our November 17, 2015, meetup. Michael currently resides in Myrtle Beach. He contributes regularly to the Security Weekly and the Down the Security Rabbit Hole information podcasts. He's also a contributing editor to CSO online.

His focus is developing exceptions leaders and powerful communicators for the information security community. Check out his website at securitycatalyst.com.

BSides Charleston is this Saturday, November, 14, 2015. Several members of ColaSec plan to be there for the event. We will have short wrap-up on the conference during the opening introductions.

Festivities begin at 6:30 p.m. at IT-ology.

October 13 and 17, 2015, meetup agenda

This month we will be putting on our first CTF event for ColaSec. We will meet October 13, 2015, at 6:30 p.m. at IT-ology for a CTF primer. The primer will be facilitated by Jeff and we'll walk through some basics and ensure Kali and other tools get installed on CTF machines.
Prior to all that Josh will give a presentation on his experiences at DerbyCon.

Schedule and requirements:

October 13 meetup - CTF Primer - IT-ology 6:30 p.m. - 9:00 p.m.

If you have problems loading Kali we can address them at the meeting. Here is a list of other programs that may be useful for the CTF:

• nmap
• netdiscover
• nikto or wikto
• wireshark
• some form of ssh client
• password cracker(online and offline)
• netcat
• dirbuster
• some proxy
• cookie editor
• steganalysis tool(stegdetect or stegspy)
• hex editor
• picture viewer(infanview)
• debugger(ollydb)
• malware analysis(IDA, PEiD, PEView, PEScanner.py)
• sqlmap

We will figure out teams at the Tuesday meetup as well.

October 17 CTF - Training Concepts - 1 p.m. to 5 p.m.

Ralph is putting together the CTF using VulnHub. He plans to have 3-4 local VMs with 1-2 additional online CTFs.

We will be at Training Concepts for the actual CTF on Saturday. 

250 Berryhill Rd # 502, Columbia, SC 29210

Bring your Kali-loaded laptops or just bring yourself. There will be computers available for people who don't have a laptop to use for the CTF.

July 21, 2015, meetup agenda - OSSEC

Robert Wilson will be giving us a presentation on OSSEC host intrusion detection software and will be covering the following questions

• What is it?
• How do you get it?
• What exactly does it do?
• What does it NOT do?
• How do you use it?
• What are some real-world examples of using OSSEC
• What about querying? What about all of the chatter?

If you have any other questions about OSSEC be sure to bring to drop them on our listserv or bring them to the meeting next week.

I'll also be adding a new "The NEWS" segment to the meetup. We'll try it out and see how it goes.

Also, we are planning to go to Brew at the Zoo August 7, 2015, as a group. If you would like to commit to going to the event, let me know and bring some money or a checkbook to the meetup to pay for a ticket.

June 16, 2015, meetup agenda

Next week's meetup I will be giving a wrap-up of Circle City Con, which I am getting the opportunity to contribute to this year as a picture taker guy. I've been told that a few people plan to head to BSides Charolette this weekend and we'll hopefully have a review of that conference as well.

For the main event Jeff and Adam will be doing a demonstration on building your own home lab. Per Jeff:

"For next weeks meetup we will be doing some demos on how to install and configure a home virutal lab for Security testing and research.  We will primarily be using VirtualBox as our host virtual environment.  It will run on Windows, Mac, and Linux.  If people would like to play along, they should download the base Virtualbox installer for their OS as well as the extension pack.  The install is fairly straight forward and there are a lot of install guides out on the net. 

Once we have our host environment setup, we will walk through an OS install from a base ISO image.  We will also show how to move VMs from one machine and import them into another.  Finally we'll go through setting up DHCP and configuring the different network types that you can do with VirtualBox.  We will have a number of ISO images and some pre-built VMs that can be installed and configured"

Download VirtualBox on a laptop and bring that to the meetup if you'd like to follow along.

Also, we are planning to go to Brew at the Zoo August 7, 2015, as a group. If you would like to commit to going to the event, let me know and bring some money or a checkbook to the meetup to pay for a ticket.

May 19, 2015, meetup agenda - PwnAdventure3

The next ColaSec meetup we will be taking a look at the hacking game Pwn Adventure 3, which was featured at Shmoocon and in this article on WIRED. The game is a massively multiplayer online (MMO) game, where objectives are completed by hacking the game.

We have setup a server to run the game. Attendees will need to bring a laptop and download the game client from the Pwn Adventure 3 site. After downloading and installing, launch the client to run an update on it.

Some other things attendees might want to install/bring is a decompiler program to view the game files, like .NET Reflector. I've also found a walkthrough that uses utilizes Wireshark, so that might come in handy as well. Speaking of walkthroughs, feel free to do a little research ahead of time. Here are some links to get your started:

Ghost in the Shellcode - Home of the Pwn Adventure. Has walkthroughs on last year's version.

PwnAdventure3 - Main website.

Dead Packet Society - A walkthrough using Wireshark.

PwnAdventure2 walkthroughs:

balidani

Everlasting Wanderer

Lockboxx

List of tools for static code analysis - Wikipedia

This exercise is something I've never done before and I those most of the group hasn't done before, so I'm hoping we can all learn and grow from the game together.

January 20, 2015, meetup agenda

Tuesday January 20, 2015, is our first meetup of the new year.

This Friday Blackhat gets released to theaters and we're looking to have a special ColaSec meetup to go watch the movie. Shmoocon is also this weekend so be on the look out for items to talk about from there next Tuesday.

On the docket is me giving a presentation on how to keep up/get into information security. The title is still very much in the works, but it's a presentation that talks about some of the resources an information security professional can use to keep up with the latest happening in the community. This is my first presentation every and I'm hoping it's not too noobish and gives people some good information they can use. The goal is to be interactive so that those already following the infosec community can participate as well. Really, it's just a way for us to create some discussion and share some great resources to make us all better professionals.

Looking forward to seeing some old faces and some new faces at the next meetup.

ColaSec meetup agenda December 15, 2014

It's the final ColaSec meetup of 2014 and we're looking to do a little planning for 2015. We've had a good start to the security meetup and want to continue to grow and expand our membership. This is your opportunity to show up and let us know what you want out of this monthly meetup.

We will be meeting Monday, December 15, 2014, at Hunter-Gatherer Brewery on Main Street in downtown Columbia.

We'll also be talking about some of the latest news in infosec, including:

• Sony Hack
• POODLE part deux
• Target liability for last year's breach

Be sure to come out and join us. We would love to meet new information security professionals in the area.

ColaSec meetup agenda October 20th, 2014

Our next ColaSec meeting will be held at IT-oLogy on October 20th, 2014 at 6:00 PM.  We will have pizza, a demo of metasploit & some traffic analysis, a presentation on Google dorking, and a discussion of some of the InfoSec news from the past few weeks (there has been plenty).  Adult beverages are welcome, but this is a BYOB event

Please note that parking in the garage at IT-oLogy is free after 5:00 p.m.  You can access this garage on Gervais St between Marion and Sumter.  There's a foot bridge over into the area where we'll be meeting.  Directions will be posted on our website before the weekend.