SecuraBit

Latest Episodes:

SecuraBit Episode 59: Too many acronyms, my head is going to explode! Jun 22, 2010

Show notes

SecuraBit Episode 59: Too many acronyms, my head is going to explode!

Hosts: Anthony Gartner – @anthonygartner http://anthonygartner.com Christopher Mills – @thechrisam Andrew Borel – @andrew_secbit Chris Gerling – @chrisgerling

Guests: Dan Philpott discusses NIST, Information Assurance, SCAP, FISMA, etc

Contact info: Twitter: @danphilpott

General topics: Federal Information Security Management Act (FISMA) Implementation Project http://csrc.nist.gov/groups/SMA/fisma/index.html

Special Publications (800 Series) http://csrc.nist.gov/publications/PubsSPs.html

Small Business Corner (SBC) http://csrc.nist.gov/groups/SMA/sbc/index.html

FISMApedia http://fismapedia.org/index.php?title=Main_Page

The Security Content Automation Protocol (SCAP) http://scap.nist.gov/ -Change Management

Windows Sysinternals http://technet.microsoft.com/en-us/sysinternals/default.aspx

Sysinternals Suite http://technet.microsoft.com/en-us/sysinternals/bb842062.aspx

Links: http://csrc.nist.gov/

Chat with us on IRC at irc.freenode.net #securabit

SecuraBit Episode 58: Forensic Goodness with Harlan Carvey Jun 07, 2010

Show notes

SecuraBit Episode 58: Forensic Goodness with Harlan Carvey

Hosts:

Anthony Gartner – @anthonygartner http://anthonygartner.com

Christopher Mills – @thechrisam

Chris Gerling – @chrisgerling

Jason Mueller – @securabit_jay

Andrew Borel – @andrew_secbit

Guests:

Harlan Carvey http://windowsir.blogspot.com/ Tools: http://tech.groups.yahoo.com/group/win4n6/

General topics: Timeline creation Regripper Forensic trends SIFT Lance Mueller http://www.forensickb.com/

Are you interested in taking an upcoming SANS course? Dr. Eric Cole is teaching the upcoming SANS vLive! 501 course which starts on June 22. You can register for the course using this link, and coupon code 501SB to save $500!

SecuraBit Episode 57: Doctor Cole, I Presume? May 26, 2010

Show notes

Hosts:Anthony Gartner – @anthonygartner http://anthonygartner.comChristopher Mills – @thechrisamChris Gerling – @chrisgerlingAndrew Borel – @andrew_secbit

Guests:Dr. Eric Cole, Ph.D. - @drericcole

General topics:Mr. Cole is teaching the upcoming SANS vLive! 501 course which starts on June 22. You can register for the courseusing this link, and coupon code 501SB to save $500!

We discussed VOIP security, or the lack thereof. Signature based security solutions are going the way of the dinosaur, it's all about behavior and dynamic detection, such as heuristics now. How to protect your privacy online:http://twitter.com/ChrisPirillo/status/13881888168

Links:http://www.sans.org/security-training/instructors_upcoming.php?id=34http://www.securityhaven.com/Sunbelt Software Webinar: Thursday, May 27, 2010, 2PM - 3PM EDTQuarterly Briefing: Turn the tables on Bad Guys: Malware Unmasked

The cyber threat landscape is constantly changing, and even with the most sophisticated security you’re never completely protected from attacks. As part of our mission to ‘keep the bad guys out’, SunbeltLabs presents in this webinar how we use our own sandbox technology to keep a step ahead.

Sunbelt Software’s Lead Security Analyst, Brian Jack and Malware Response Manager, Dodi Glenn will discuss the current threat landscape and dig deeper into some of the most dangerous and complicated threats out there. During this briefing we will focus on two different types of threats: malicious PDFs and rogue antivirus applications. Learn how to gain an edge when protecting your enterprise.

Whether you are dealing with spear phishing or mass attacks, join us to see how to deploy the right tools and learn how to quickly analyze and unmask malware. New threats require new technologies and techniques to protect yourself and your organization. Sign up now and turn the tables on the bad guys.

Chat with us on IRC at irc.freenode.net #securabit

SecuraBit Episode 56: "Try Harder" - Used with permission May 10, 2010

Show notes

SecuraBit Episode 56: "Try Harder" - Used with permission

Hosts: Anthony Gartner – @anthonygartner http://anthonygartner.com Christopher Mills – @thechrisam Chris Gerling – @chrisgerling Jason Mueller – @securabit_jay Andrew Borel – @andrew_secbit

Guests: Chris Hadnagy - @humanhacker Operations Manager and involved with www.offensive-security.com www.backtrack-linux.org http://www.social-engineer.org/

General topics: MSFU course Saturday the 8th from 10am to 5pm in Louisville, KY‎

Chris Speaks of a new kernel update released around the day of recording for Backtrack 4

Since you are able to listen to this podcast the DNS Security Update did not affect you

SANS Investigative Forensic Toolkit (SIFT) was updated

Links: http://www.exploit-db.com/ http://www.offensive-security.com/images/ryu-help-me.png Kid Friendly Podcast http://www.social-engineer.org/framework/Social_Engineering_Framework Free MSFU Course http://www.offensive-security.com/metasploit-unleashed/ SANS SIFT https://computer-forensics2.sans.org/community/siftkit/

Sponsor mention: Sunbelt Software Webinar: Thursday, May 27, 2010, 2PM - 3PM EDT Quarterly Briefing: Turn the tables on Bad Guys: Malware Unmasked

Chat with us on IRC at irc.freenode.net #securabit

SecuraBit Episode 55: 10000 Tubes of KY and a Case of Dog Biscuits! Apr 25, 2010

Show notes

Sponsored by Sunbelt Software! Creators of the Sunbelt CWSandbox, for all your malware analysis needs! Visit their website for more details!

Hosts: Anthony Gartner – @anthonygartner http://anthonygartner.com Christopher Mills – @thechrisam Chris Gerling – @chrisgerling Andrew Borel – @andrew_secbit

Missing Hosts: Jason Mueller – @securabit_jay

Guests: Joshua Wright - @joswr1ght http://www.willhackforsushi.com/

- Josh talks about the MiFi hack - Bluetooth Hacking - Barcode scanner hacking including the Bluetooth scanner hacks - SANS SEC617 SEC617 Course - 617BIT Discount Code for $500 off the vLive! Course - Upcoming courses taught by Josh Wright http://www.sans.org/security-training/instructors_upcoming.php?id=97 - Pentest summit - Baltimore, MD - Josh will be speaking there. His talk will be about essential crypto for pentesters. http://www.sans.org/pen-testing-summit-2010/

General topics: Mcafee Released a failed (fubar) virus definition Discussion thread Gmail authentication code stolen Someone we know was owned

Links: http://www.willhackforsushi.com/ SEC617 Course http://www.sans.org/security-training/instructors_upcoming.php?id=97 Bruce Schneier's book list Dark Reading - Taking Penetration Testing In-House

Chat with us on IRC at irc.freenode.net #securabit

SecuraBit Episode 54 - Lions and Tigers and Banking Trojans, OH MY! Apr 11, 2010

Show notes

Hosts: Anthony Gartner – @anthonygartner http://anthonygartner.com Christopher Mills – @thechrisam Chris Gerling – @chrisgerling Jason Mueller – @securabit_jay Andrew Borel – @andrew_secbit

Guests: Sean-Paul Correll - @lithium -http://malwaredatabase.net/blog/ Threat researcher at Panda Security

According to the Panda Annual security report, 66% of all malware are trojans:

http://www.pandasecurity.com/img/enc/Annual_Report_Pandalabs_2009.pdf

Definition of a Banking Trojan.

Mariposa bot net take down: http://pandalabs.pandasecurity.com/mariposa-botnet/

Virus Total Web: http://www.virustotal.com/

Appeared at Security B-side in San Francisco Playing with Fire – Live Demonstration of Today’s Most Dangerous Malware http://www.ustream.tv/recorded/5143692

http://www.securitybsides.com/

Chat with us on IRC at irc.freenode.net #securabit

SecuraBit EP53: Thotcon If you think it you will go to Chicago! Mar 28, 2010

Show notes

SecuraBit Episode 53: Thotcon If you think it you will go to Chicago

thotcon - http://www.thotcon.org/

Trustwave's Spider Labs - https://www.trustwave.com/spiderLabs.php

Chat with us on IRC at irc.freenode.net #securabit

Hosts: Anthony Gartner – @anthonygartner Christopher Mills – @thechrisam Andrew Borel – @andrew_secbit

Guests: Nick Percoc - Thotcon & Trustwave's Spider Labs Zach Fasel - Thotcon & Trustwave's Spider Labs

Links: http://www.thotcon.org/ https://www.trustwave.com/spiderLabs.php SpiderLabs Radio - http://itunes.apple.com/podcast/spiderlabs-radio/id300567984 https://www.trustwave.com/spiderLabs-tools.php

lacking Chris Gerling – @chrisgerling Jason Mueller – @securabit_jay

SecuraBit Episode 52: To catch a Mule with Krebs on Security! Mar 17, 2010

Show notes

Hosts: Anthony Gartner – @anthonygartner Christopher Mills – @thechrisam Chris Gerling – @chrisgerling Jason Mueller – @securabit_jay Andrew Borel – @andrew_secbit

Guests: Brian Krebs - @briankrebs - http://www.krebsonsecurity.com/

VRT Blog Post:

http://vrt-sourcefire.blogspot.com/2010/03/apt-should-your-panties-be-in-bunch-and.html

Eric Chien, Symantec Zeus, King of the Bots: http://www.noryak.net/papers/zeus.pdf

Chat with us on IRC at irc.freenode.net #securabit

SecuraBit EP51 - Malware Detection With Sunbelt Software Mar 02, 2010

Show notes

SecuraBit EP51 - Malware Detection With Sunbelt Software

Listen in as we discuss Sunbelt Software's CWSandbox and other products, along with in-depth malware detection and analysis!

#BSidesSF - Tuesday/Wednesday, March 2-3, 2010 @ 10am - 5pm #BSidesAustin - Saturday, March 13, 2010 #BSidesBOS - Saturday/Sunday, April 24-25, 2010 Chat with us on IRC at irc.freenode.net #securabit

Hosts: Anthony Gartner – @anthonygartner Christopher Mills – @thechrisam Chris Gerling – @chrisgerling Jason Mueller – @securabit_jay Andrew Borel – @andrew_secbit

Guests: Brian Jack - Sunbelt Software Chad Loeven - Sunbelt Software

Links:

http://www.sunbeltsoftware.com/

http://www.sunbeltsoftware.com/Malware-Research-Analysis-Tools/Sunbelt-CWSandbox/

http://www.securitybsides.com/

Shmoocon 2010 Podcasters Meetup - NSFW!!!!!! Feb 16, 2010

Show notes

This is the audio from the 2010 pod-casters meet up. This is UNEDITED and completely raw. This file is NOT safe for work. You have been warned.