SANS DFIRCON Miami 2024: Special Edition Presents: An Exclusive AlumNight Experience

Community Learning Day at DFIRCON - Sun, Nov 17 @ 8:00 AM

Join us for an exclusive, in-person Community Learning Day just before DFIRCON begins – a full day, jampacked with content led by industry thought leaders focused on enhancing your cybersecurity skills with open-source tools. This special day features (8) back-to-back sessions and offers a unique opportunity to learn from experts through interactive tutorials. Each session will guide you through the practical applications and best practices of using these tools in cybersecurity. You'll gain actionable skills and insights directly from the authors and developers in this immersive experience.

*Community Learning Day is only available to attend in-person.

View the full agenda here.

Threat Hunting and Criminal Infrastructure Analysis 
Speaker: Conan Beach, SANS Instructor Candidate

This hands-on session will take you through a detailed FOR589 lab focusing on the complexities of cybercrime infrastructure. You will delve into the critical types of infrastructure indicators—Atomic, Behavioral, and Computed—and their roles in detecting and understanding cybercrime activities.
Learn about the pivotal role that domains, IP addresses, and email accounts play as Atomic Indicators, and understand how Infrastructure-as-a-Service (IaaS) helps in identifying the ownership of these indicators. The workshop includes practical exercises where you will use advanced fingerprinting techniques not only to identify but also to predict cybercrime behaviors. This approach will enhance your skills in analyzing and countering cyber threats.
Learning Objectives:

• Learn to profile the technical infrastructure of cybercriminal sites, including malware Command & Control (C2) domains, phishing pages, and forums.
• Understand how to profile and disrupt the technical attack infrastructure of a cybercrime campaign.
• Develop skills to pivot and uncover additional elements of cybercriminal infrastructure.

Prerequisites:
This workshop consists of a series of practical exercises designed for cybercrime investigators or researchers looking to enhance their skills in analyzing criminal infrastructure. Participants should have a problem-solving mindset and be open to learning new methods for investigating cybercrime. The technical prerequisites for this workshop are minimal, making it accessible for those with a basic understanding of cybersecurity concepts.