Technical Trainings

Enemy at the gates! an attacker has walked into our system using a file-less threat with minimum traces left on the hard disk. A proactive hunt is crucial to minizine the dwell time of these types of attacks. This hands-on workshop will discuss a comprehensive technical and proactive cyber threat hunting via system live analysis, window event logs investigation, memory forensics, and network traffic analysis.. more…

This two days hands-on training will teach the basics on how Antivirus (AV) and Endpoint Detection Response (EDR) products work, and modern techniques to get around them. The training is based on Windows based AV and EDR products only. On day one, students will learn how modern AVs operate, and how to bypass them. Windows Defender will be the focus, and at the end of day one, students will be able to bypass it. The primarily focus for day two will be on how EDRs operate and which modern techniques can allow to bypass detection. more…

This hands-on CTF-style training focuses on elevating your security knowledge into the cloud. Learn to defend your public cloud infrastructure by building automated detection, alerting and response pipelines for your public cloud workloads by using native cloud services. This training focuses on building security knowledge on the cloud and for the cloud. more…

Three days training covers topics of Windows & Linux vulnerability analysis and fuzzing that includes analysis of various bug classes, fuzzing strategies, fuzzing on modern Operating Systems and approaches to exploit development. The training will only focus on fuzzing and triaging crashes which include analysis of the vulnerability to identify potential vulnerability that can turn to code execution covering open and closed source programs. more…

This course is a 100% hands-on deep dive into the OWASP Mobile Security Testing Guide (MSTG) and relevant items of the OWASP Mobile Application Security Verification Standard (MASVS). We have structured this course around the OWASP Mobile Security Testing Guide (MSTG) and relevant items of the OWASP Mobile Application Security Verification Standard (MASVS), so this course covers and goes beyond the OWASP Mobile Top Ten. This course provides participants with actionable skills that can be applied immediately from day 1. more…

Modern Web and Desktop apps share traditional attack vectors and also introduce new opportunities to threat actors. This course will teach you how to review modern web and desktop apps, showcasing Node.js and Electron but using techniques that will also work against any other web or desktop app platform. Ideal for Penetration Testers, Web and Desktop app Developers as well as everybody interested in JavaScript/Node.js/Electron app security. more…