Tech Tip Thursday - Girls Go CyberStart

Girls Go CyberStart builds on the recent success of last summer's CyberStart. In Hawaii alone, 22 students received $1,500 scholarships from SANS. This round is just for high school girls. Registration is open between January 29 and February 16. Game play will be available from February 20-25. Good luck!

https://girlsgocyberstart.com/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday - 2017 SANS Holiday Hack Challenge

Are you home for the holidays with nothing to do? Why not take the SANS Holiday Hack and compete for the Grand Prize, a free SANS Online Training course (normally priced around $5,000). Answers must be submitted before January 10, 2018 but the content will remain available well after. If this is your first SANS Holiday Hack, I would recommend checking out past challenges first. There’s a lot of open source intelligence on the Internets.

https://www.holidayhackchallenge.com/2017/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Thursday - Risk

Over the past few days I saw many vendors at #AFCEATechNet Asia-Pacific and I realized that every product and service they offer is built to address one thing. Risk. The generally accepted risk equation is “Risk = Threat x Vulnerability x Impact” and different products take on different factors. A vendor that provides “real time threat intelligence” is focused on threats. The “vulnerability assessment” tools focus on the vulns. Other focus on maintaining “uptime” with “resilient networks” to reduce impact. This SANS article identifies Risk as one of the “Five Tenets of Cyber Security” but for me it all comes down to risk.

https://securingthehuman.sans.org/blog/2017/10/05/the-five-tenets-of-cyber-security/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday - SANS CyberStart

SANS CyberStart is a unique program that offers users a challenging environment to learn more about cybersecurity and the opportunity to tap into $650,000 in scholarships. The assessment challenges are available from now till July 28th and the full-scale program will run from August 1-28, 2017. It’s open to students 16 and older from seven states, to include Hawaii, and it’s FREE.

https://www.sans.org/cyberstart

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Web Penetration Testing (XSS and XSRF)

Here’s a preview to the SANS SEC642: Advanced Web App Penetration Testing, Ethical Hacking, and Exploitation Techniques course. The on demand virtual course goes for $5,910, so it’s nice to get a sneak peek for you sign up. The author goes over the techniques, tools and procedures (TTPs) to combine exploits in cross-site scripting (XSS) and cross-site request forgery (XSRF) for greater effects.

https://pen-testing.sans.org/blog/2017/03/02/modern-web-application-penetration-testing-part-1-xss-and-xsrf-together/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Evil Packet Analysis

Packet/network analysis tools are everywhere and everyone seems to think it will solve all your cyber security problems. It might but where do you start? This post asks and answers "What are the top 10 or so questions (what & why ask) you would ask yourself when looking at packets you suspect contain evil?"

https://isc.sans.edu/forums/diary/Packet+Analysis+Where+do+you+start/22001/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Know Abnormal… Find Evil

How do you find evil if you don't know what normal is? Normal windows processes have standard characteristics. Use this reference to know what's normal in Windows and focus on the outliers.

https://digital-forensics.sans.org/media/dfir_poster_2014.pdf

~ A big MAHALO to Ivan for the contribution.

If you have a #CyberPatriot Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – I’m Hacked, Now What?

The April edition of @SANs OUCH! Newsletter provides good information on how to determine if you have been hacked and what to do. This is not a one size fits all solution but it’s a good start.

https://securingthehuman.sans.org/newsletters/ouch/issues/OUCH-201604_en.pdf

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – 2015 SANS Holiday Hack

Are you home for the holidays with nothing to do? Why not take the SANS Holiday Hack and compete for the Grand Prize, a free SANS Online Training course (normally priced around $5,000). Answers must be submitted before January 4, 2016 but the content will remain available well after. If this is your first SANS Holiday Hack, I would recommend checking out past challenges first. There’s a lot of open source intelligence on the Internets.

https://www.holidayhackchallenge.com/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Metasploit Cheat Sheet

The SANS Institute puts together some great resources and this one is no exception. I recommend using this as your Kali 2.0 desktop image to make pentesting easier.

https://www.sans.org/security-resources/sec560/misc_tools_sheet_v1.pdf

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – SANS Cyber Aces Online Courses

SANS Cyber Aces provides free cyber security courses online. They also have a competition component with runs March 17-19, 2015. There is a public scoreboard to see how you rank nationally amongst your peers and top scores will also be invited to an online championship. Check this out, if you need something extra for that college application, resume bullet or continuing education credits.

https://tutorials.cyberaces.org/tutorials

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Netcat

It’s known as the Swiss army knife because it can do almost anything. Port scanning, banner grabbing, DNS forward/reverse checking, transferring files, and making Julienne fries. Well maybe not the fries. The good people at the SANS Institute put together this cheat sheet to help you get started.

http://www.sans.org/security-resources/sec560/netcat_cheat_sheet_v1.pdf

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.