Defend the Flag (DTF)

Target: Network and Operations Security Professionals
Length: 2 Days
Focus: Windows network and host attack, hardening and defense

Format: Lecture, Lab and Competition

Content:

iSEC Partners has partnered with Microsoft to deliver this unique, hands-on training exercise in network attack and defense on the Windows platform. Day one begins with a half-day tutorial on attacking Windows systems utilizing state of the art attack tools, (previous DTF delivery partners for this portion of the course have included Immunity and Core) followed by another half day of materials and labs developed and delivered by iSEC’s industry-leading experts on Windows platform security. On day two, the students will form teams to compete against each other, exercising skills learned in both attack and defense. While the class is applicable to all recent versions of the Windows operating system, Defending Windows focuses on Windows XP and Windows 2003 which are currently the most deployed Windows versions.

“Defending Windows” material includes:

  • Preparing for an attack
    • Discussion of hardening principles and methodologies
    • System classification techniques
    • Hardening network protocols, system services, DCOM
    • Security-relevant registry settings
    • User rights assignments
    • Audit and event logs
    • Account and password policies
    • Group Policy Settings
    • Basic forensic methodologies to assist in detecting/responding to attacks
  • During the attack
    • How to find out that a system is under attack or has been compromised
    • How to stop the attack
  • After the attack
    • Basic forensics
    • How to prevent recurrence

Due to the unique nature of this course, it will only be offered at select international security conferences. Please register to participate directly with the hosting venue.

Past events:

Black Hat DC Training 2008
District of Columbia, USA
Feb 18-19, 2008

Upcoming events include:

CanSecWest Vancouver 2008
Vancouver, British Columbia, Canada
March 24-25, 2008

SyScan ’08 Hong Kong
Hong Kong, China
May 27-28, 2008

AusCERT 2008
Gold Coast, Australia
May 18-23, 2008

SyScan ’08 Singapore
Singapore
July 1-2, 2008

Black Hat USA Training 2008
Las Vegas, Nevada, USA
August 2-5, 2008

More dates coming soon, or contact info@isecpartners.com for additional details.