Billington CyberSecurity Summit
2020-09-08 - 2020-09-09
Following a sold-out Summit in 2019, the 11th Annual CyberSecurity Summit promises to continue the proud tradition of convening the top “who’s who” in cybersecurity leadership for an unparalleled two days of high-level networking and knowledge-sharing to advocate cyber mission in the U.S. and among allied countries.

Rosh Hashanah Jewish Holiday
2020-09-19

Membership Meeting 9/23/2020
2020-09-23 17:00 - 19:30 (America/New_York) | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2020-09-23-Meeting-Presentation.pdf
Speaker Slides: UAS-Forensics-Framework-2020-09-23.pdf
Topic: A Study on Drone Forensics Framework
As consumer unmanned aircraft systems (UAS) or drones are used more commonly in public areas, an approach for a drone forensics framework is needed to guide forensics investigators in analyzing recovered drones that entered the unauthorized national airspace system (NAS). The presentation is based on a doctoral research study focused on whether a single framework and multiple frameworks for drone forensics. The data collected through an online survey provided detailed descriptions of the participants’ most commonly used forensics frameworks or guidelines. The data collected from participants in the United States measured the occurrences of the type of guidelines forensics examiners used. The results of the study identified a need for a standard drone forensic framework across digital forensic disciplines and aircraft accident investigation for use by investigators to produce admissible evidence for litigation in the U.S. courts. The research led to a proposed basic drone forensics framework, which can be improved upon in future research.
Speaker: Nagi Mei, D.Sc.

Dr. Nagi Mei has over 14 years in management and technology consulting service offerings to the commercial and health industries, and federal, state, and local governments. She has extensive experience in strategic initiatives and operational responsibilities grounded in information security management. Dr. Mei is a project manager where she leads teams in implementing information security projects. Dr. Mei received a Doctor of Science in Cybersecurity from the Capitol Technology University. She holds a Master in Business Administration, a Master of Science in Information and Telecommunications Systems from the Johns Hopkins Carey Business School, and a Bachelor of Science in Information Systems concentrating in Digital Forensics from the Johns Hopkins University. She holds certifications in Sec+, PMP, PMI-ACP, SSM, CSM, and ITILv3.

Yom Kippur Jewish Holiday
2020-09-28

Data Connectors Baltimore 2020
2020-09-30
Capital Region:
Virtual Cybersecurity Summit
A live, interactive experience!
Wednesday, September 30th
More than 70,000 members of the Data Connectors Cybersecurity Community are in the DC area. The Virtual Summit will be conducted in real time, with the same panels, presentations and solution provider exhibits and demonstrations
Complimentary Registration Includes:

Keynote presentation
CIO/CISO Panel Discussion
Cybersecurity expert presentations
Virtual exhibits from solution providers with chat capability
CPE Credits
Prizes such as Air Pods, XBox, Amazon Gift Cards and lots more…

Register Here

Virtual Threat Defense Challenge
2020-10-08 10:00 - 16:00 | Virtual
Join our security experts for a hands-on learning experience as you navigate a simulated cyberattack in real-time. Learn to “think like a hacker” and then respond to and defend valuable assets. Whether you are a novice or a skilled security professional, this experience has something for everyone.
Compete in teams alongside your peers to run cyberattacks in a controlled environment. Premium prizes will be given to the team with the most points.
Join this action-packed session and learn to:

Understand the tools and techniques used by hackers
Identify infrastructure security gaps
Plan and implement security measures

There’s no cost to attend. Just bring your best game!
Register Here; https://resources.trendmicro.com/2020-Q4-NE-MA_TDC_OCT8.html

Columbus Day
2020-10-12

EC-Council - Hacker Halted Virtual Cyber Security Training and Conference 2020
2020-10-19 - 2020-10-23 | Virtual
Hacker Halted is a global series of computer and information security conferences presented by EC-Council. Hacker Halted is a global series of computer and information security conferences presented by EC-Council. The objective of the hacker halted conferences is to raise international awareness towards increased education and ethics in IT security.

Membership Meeting 10/28/2020
2020-10-28 17:00 - 19:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2020-10-28- Meeting Presentastion.pdf
Speaker Slides: 30 Years 20-10-28.pdf
Topic: Lessons Learned from 30 Years of Security Awareness Efforts
Organisations acknowledge that employees are often the weakest link, yet efforts to improve ‘user awareness’ tend to rely upon available tools and not true experience. Drawing on three decades of awareness efforts and experience improving true security behaviours, Ira Winkler will dispel many commonly held beliefs about security awareness, detailing what consistently works and what does not.
Learning Objectives:
1: Learn and apply what works consistently across hundreds of organisational awareness efforts.
2: Learn from research in other disciplines that improves awareness efforts.
3: Learn how to create a security culture that drives individual security behaviours.
Speaker: Ira Winkler, President, Secure Mentem

Ira Winkler, CISSP, is the President of Secure Mentem and Author of Advanced Persistent Security, and the forthcoming books, You Can Stop Stupid and Security Awareness for Dummies. He is considered one of the world’s most influential security professionals and was named “The Awareness Crusader” by CSO magazine in receiving their CSO COMPASS Award. He also received the ISSA Hall of Fame award. He has designed and implemented and supported security awareness programs at organizations of all sizes, in all industries, around the world. Ira began his career at the National Security Agency, where he served in various roles as an Intelligence and Computer Systems Analyst. He has since served in other positions supporting the cybersecurity programs in organizations of all sizes. Ira’s new book can be preordered here: https://tiny.cc/stupidbook

Veterans Day
2020-11-11

(ISC)² Security Congress
2020-11-16 - 2020-11-18 | Virtual
Join thousands of leading cybersecurity professionals virtually at (ISC)² Security Congress 2020 November 16-18. You will hear expert insights into the latest security challenges, and share best practices for combating threats, building teams and implementing the latest processes and procedures to better defend your organizations’ critical assets. We will discuss the latest issues facing the workforce, explore pathways for career advancement and discover new tools and solutions together.
Attend (ISC)² Security Congress from home and take advantage of the powerful collaboration that you can only find at a conference of your peers who are dedicated to helping one another solve the challenges we all face.
Early Bird pricing to (ISC)² members and associates of just $295 for an All-Access pass. Non-members will also benefit with Early Bird pricing of $395. Registration details will be announced when open. The Early Bird window will close on September 30. Registration and more information can be found Here!

Membership Meeting 11/18/2020
2020-11-18 17:00 - 19:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2020-11-18 – Meeting Presentastion.pdf

Speaker Slides: Roles of Artificial Intelligence and Deep Learning in Detecting Data Exfiltration
Topic: Roles of Artificial Intelligence and Deep Learning in Detecting Data Exfiltration
Essential Internet services are vital for many aspects of modern living, yet those services remain valuable to threat actors who use them for network intrusions and data exfiltration. Dr. Pena completed a quantitative research study analyzing the ability of a Convolutional Neural Network (CNN) to detect Domain Name System (DNS) covert communications generated by the DNSExfiltrator open source tool. The results showed the CNN model had100% accuracy when exfiltrated file sizes exceeded 2 Kilobytes (KB) using the default (maximum) transmission packet size, but its performance fell dramatically for files below 1 KB in size.
As AI/ML solutions become more prevalent in cybersecurity tools, professionals must understand where a model’s strengths and weaknesses lay in order to apply appropriate risk mitigations, such as tuning complimentary detection systems.
Speaker: Dr. Tomas Pena, L3 Harris Technologies

Dr. Tomas Pena is the Chief Technologist for Cyber Operations at L3Harris Technologies’ Space and Airborne Systems Segment. In that role, he’s responsible for cyber innovation and improving the resiliency of company products spanning land, sea, air, space, and cyber domains. He’s been in cyber-related systems engineering and defense contracting positions since 2013. Prior to that time, he completed 20 years of service in the United States Air Force as a Cyberspace Operations Officer where he organized, planned, executed full-spectrum cyberspace operations, stood up the United States Cyber Command’s 24/7 Joint Operations Center, and led Air Force Business Transformation Initiatives at the Pentagon. Dr. Pena has also filled roles such as managing the Global Positioning System satellite control systems, managing theater communications during Operations IRAQI FREEDOM and ENDURING FREEDOM. He is also the Founder and President of Parallax Cyber LLC, a small business focused on training and educating the workforce in Cybersecurity and Cyber Conflict, and the current Editor-in-Chief of the Military Cyber Professional Associations’ Military Cyber Affairs Journal.

Click Here to register for the November 18, 2020 General Membership Meeting

Thanksgiving Day
2020-11-26

December 2020 "Lunch and Learn"
2020-12-16 12:00 - 13:00 | Virtual via Zoom, MD
O365 Lunch and Learn Abstract: We’ll navigate through uncharted security territory by analyzing the attack lifecycle in the cloud and dissecting a real-world attack. The same technology that makes the cloud dynamic can have the opposite effect on an organization’s ability to implement detection and response in cloud environments. This includes the adding additional layer of preventative controls in addition to MFA, because it’s increasingly being bypassed in O365 as an example. Chris Morales, Head of Analytics with Vectra, will help us navigate through the uncharted security territory by analyzing the attack lifecycle in the cloud, reviewing the top cloud security threats, and dissecting a real-world cloud attack. Additionally, he’ll provide key takeaways for managing access, detection and response, and security operations.
This event is sponsored by Vectra.

Click Here to register for this event. Thanks.

Membership Meeting 12/16/2020
2020-12-16 17:00 - 19:30 | Virtual via Zoom, MD
December meeting is sponsored:

https://redcanary.com/
Click Here for more information about on meeeting sponsor.

Chapter Business Meeting Slides: 2020-12-16 Membership Meeting

Speaker Slides: Least Privilege with PowerShell JEA

Speaker Recording: Least Privilege with PowerShell JEA
Topic: PowerShell JEA
PowerShell JEA allows us Systems Administrators to empower our fellow admins, developers, and security personal to accomplish what they need to on our systems. Give them just enough administrative permissions to accomplish their duties without interrupting your day or night. This talk shows how to assign roles and give the appropriate permissions to those roles.
Speaker: James Honeycutt

James is a dedicated cybersecurity professional who enjoys scripting and participating in capture the flags. He has served over 20 years in the military in various technical and leadership positions. He is part of a Cyber Protection Team and serve as the Microsoft Windows Expert. In past assignments, he served as the OIC (Officer in Charge) of both the battalion IT shop and brigade logistics IT shop, he was the “technology adviser to the Commander”. He has also served as a systems administrator, helpdesk manager, and classroom support tech. Some of his additional duties included being an Information Assurance Manager Alternate and Network Admin backup.
​James is working as a SANs Mentor and TrilogyEd TA. For SANs, he is mentoring SEC505 (Securing Windows and PowerShell Automation) and SEC511 (Continuous Monitoring and Security Operations) and for TrilogyEd, He is TA’ing a Cyber Security Bootcamp
During his career, James has been known as the “go-to guy” for IT questions and problems by his directors, commanders, and peers. He has received numerous awards for his work and knowledge, to include several Meritorious Service Medals and Company Grade Officer of the Year for the state of Arkansas. He has a Bachelors of Science in Management in Information Systems. James holds the following certifications: CISSP, VCP5-DCV, GWAPT, GPYC, GMON, GCWN, GPEN, GCIA, GCIH, GCFA, GSEC, GSNA, SEC +, C|EH

Christmas Day
2020-12-25

New Years Day
2021-01-01

Morning Membership Meeting 01/13/2021
2021-01-13 08:00 - 09:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2021-01-13 Breakfast Meeting Presentation

Speaker Slides: 2021-01-13 Sepio HAC Solution for ISSA
Sepio Whitre Paper: 2021-01-13 Sepio CMMC White Paper

Topic: Reducing The Risk of Unapproved and Rogue Devices
Meeting Recording: Reducing The Risk of Unapproved and Rogue Devices
Sepio delivers a Hardware Access Control (HAC) platform that reduces the risk of unapproved and rogue devices by providing complete visibility, control, and mitigation of all hardware assets. Sepio’s hardware fingerprinting, augmented by machine learning, discovers all managed, unmanaged, and hidden devices that are invisible to all other security tools. Sepio’s solution supports CMMC hardware controls, NNDA section 889 and also enhances zero trust, insider threat, BYOD, IT, OT, and IoT security programs.
Speaker: Jay Smilyk, Chief Revenue Officer, Sepio

Jay Smilyk is the Chief Revenue Officer for Sepio. He oversees the firm’s strategic operations including its growth, recruitment and channel development efforts. Previously, Smilyk served as vice president of North American sales at Safend/Supercom and held similar sales leadership positions at Cynet, RSA and Check Point Software Technologies.

Martin Luther King Day
2021-01-18

AFCEA January Luncheon
2021-01-21 11:30 - 13:00 | Virtual
Featured Speakers: GEN Keith Alexander (Ret.), Founder, Chairman & Co-CEO of IronNet Cybersecurity, is one of the foremost authorities on cybersecurity in the world. A four-star Army general, GEN Alexander was previously the highest-ranked military official of USCYBERCOM, NSA/CSS, where he led these DoD agencies during the conflicts in Afghanistan and Iraq.

Registration Page Here

Membership Meeting 1/27/2021
2021-01-27 17:00 - 19:30
Chapter Business Meeting Slides: 2021-01-27 Membership Meeting

Speaker Slides: 2021-01-27 Red Canary Threat Detection ReportTBD

MITRE ATT&CK home page: https://attack.mitre.org/
Github repo of Atomic Red Team: https://github.com/redcanaryco/atomic-red-team
Github Repo for Atomic Red Team execution fraemwork, Invoke-Atomic: https://github.com/redcanaryco/invoke-atomicredteam
Github repo for variation testing tool, AtomicTestHarnesses: https://github.com/redcanaryco/AtomicTestHarnesses
Installation wiki for Invoke-Atomic: https://github.com/redcanaryco/invoke-atomicredteam/wiki
Invoke-Atomic video tutorials: https://www.youtube.com/watch?v=-HEx-qfd54M&list=PL92eUXSF717W9TCfZzLca6DmlFXFIu8p6
About Atomic Red Team: https://github.com/redcanaryco/atomic-red-team/wiki/About-Atomic-Red-Team
Atomic Red Team microsite: https://atomicredteam.io/
Atomic Red Team Slack: https://slack.atomicredteam.io/
Atomic Test Harnesses Blog series:
Pt. 1: https://redcanary.com/blog/introducing-atomictestharnesses/
Pt. 2: ‌https://redcanary.com/blog/threat-research-questions/
2020 Threat Detection Report: https://redcanary.com/threat-detection-report/introduction/
Previewing the 2021 Threat Detection Report: https://redcanary.com/blog/2021-threat-detection-report-preview/
Someone asked about the difference between Caldera and Atomic Red Team: https://redcanary.com/blog/comparing-red-team-platforms/
Here’s some information on mapping to ATT&CK (both on the context of Atomic Red Team and in the context of behavioral analytics): https://redcanary.com/blog/mitre-sub-techniques/
Topic: Simulating Adversary Tradecraft with Atomic Red Team and the Red Canary Threat Detection Report
We plan to discuss two important resources that leading teams are using to improve their security:

2020 Threat Detection Report: Red Canary’s annual in-depth analysis of of the top techniques for tens of thousands of threats seen in the wild. For each technique, we include detection, prevention, and testing strategies.

Atomic Red Team: An open-source tool mapped to ATT&CK techniques valuable for benignly simulating specific adversary behaviors

Speaker: Brian Donohue, Red Canary
Brian has been writing about and researching information security for the last decade. He started his career as a journalist covering security and privacy. He later consulted as a threat intelligence analyst, researching adversaries and techniques for a variety of major banks, retailers, and manufacturers. At Red Canary, Brian helps guide research publication and technical messaging efforts.

Red Team Workshop
2021-01-28 09:00 - 12:30 | Virtual
Join the ISSA Central Maryland for a Red Team Workshop, an educational lab where individuals can better understand the skills and tactics of the adversary. Participants will learn about critical attack vectors and how attackers plot, ploy and work their way into enterprise vulnerabilities. Participants will then take training wheels off for an open play as a “Red Team” attacker. Attendees will reconvene for a working session, walking through the live attacks from the morning and how blue teams, or the threat hunters, actually identify, detect and respond to advanced threats.
Participant Requirements:

Skill level: novice to intermediate
Basic attacking skills (i.e. Threat Hunters, Security Analysts, etc)
Basic knowledge with Linux/Kali systems
VPN installation required

Receive 3.5 CPE credits and a digital certificate upon completion. The deadline to register is January 21st and is open to the first 30 participants.

AFCEA Virtual Lunch and Learn
2021-01-29 12:00 - 13:30 | Virtual
RAD for Small Business Panel
Discuss lessons learned and best practices to help Small Businesses take on Independent Research & Development as a way to advance innovative solutions and improve their outreach to their customers.

Panel Moderator: Robert Parlock – Vice President of Engineering, Engineering Solutions, Inc. (ESi)

Panel Members:

Joe Karolchik – President, Nteligen
Stephen Kahmann – Technical Director, iNovex Information Systems
Dustin Zepp – President/CEO, Clarity Innovations
Wayne Johnson – President, Ashton-Group Service
Kathryn Shamleffer – Chief Operating Officer, Helm Point Solutions

Click Here to Register for FREE!

Roger Grimes Teaches Ransomware Mitigation
2021-02-10 14:00 - 16:00
A Master Class on IT Security: Roger Grimes Teaches Ransomware Mitigation
Cyber-criminals have become thoughtful about ransomware attacks; taking time to maximize your organization’s potential damage and their payoff. Protecting your network from this growing threat is more important than ever. And nobody knows this more than Roger Grimes, Data-Driven Defense Evangelist at KnowBe4.
With 30+ years experience as a computer security consultant, instructor, and award-winning author, Roger has dedicated his life to making sure you’re prepared to defend against quickly-evolving IT security threats like ransomware.
Join Roger for this thought-provoking webinar to learn what you can do to prevent, detect, and mitigate ransomware.
In this session you’ll learn:

How to detect ransomware programs, even those that are highly stealthy
Official recommendations from the Cybersecurity & Infrastructure Security Agency (CISA)
The policies, technical controls, and education you need to stop ransomware in its tracks
Why a good backup (even offline backups) no longer save you from ransomware

You can learn how to identify and stop these attacks before they wreak havoc on your network. Register now and earn CPE credit for attending!
Date/Time: Wednesday, February 10 @ 2:00 PM ET
Save My Spot!

VMware Carbon Black Virtual Threat Hunting Challenge
2021-02-10 17:00 - 20:00
Copper River IT has partnered with VMware Carbon Black to deliver their popular gamified Threat Hunting Challenge in a work-from-home model.
Copper River IT cordially invites you to participate in this three-hour educational deep-dive which will allow you to gain hands-on experience threat hunting with VMware Carbon Black’s latest products. Participants of all security levels can enjoy 1:1 private in-game support from VMware Carbon Black technical experts.
During this event you will:

Learn how to find attacks used in actual incidents
Advance your skills with the latest Threat knowledge
Get hands-on with VMware Carbon Black Cloud and discover why real-time device assessment and remediation are key for a remote workforce
Talk to experts individually about how to uplift your organization’s SecOps strategy
Earn a certificate of completion worth 3 CPE Credits

Register HERE

Presidents Day
2021-02-15

Webinar on Human Trafficking
2021-02-17 09:00 - 12:00 | Riggs Alumni Center – University of Maryland
I just want to remind everyone that the Infragard Maryland Member’s Alliance (IMMA) will be hosting a webinar on human trafficking next Wednesday (February 17th) at 9:00 am. This eye-opening and informative webinar will explain how human trafficking persists in our communities and remains a largely invisible crime to most people, while at the same time shattering the lives of numerous victims. Our presenters will be a FBI Special Agent and a Task Force Officer from the Maryland State Police who are assigned to a FBI squad that investigates these crimes. In this presentation you will learn what indicators you should look for and who to notify if you suspect an incident of human trafficking. This information is especially useful for businesses in the service and hospitality industries, but it is also useful for everyone, as human trafficking can be occurring right in your own neighborhood. It seems like every week there are stories in the press about how alert citizens became suspicious that a person might be the victim of a human trafficking operation, notified the authorities and made a world of difference.
Please use the link below to register and I hope to see you online next week:
https://www.eventbrite.com/e/infragard-maryland-february-webinar-human-trafficking-awareness-tickets-139684755865
Sincerely,
Special Agent Mike Miller
Infragard Coordinator
FBI Baltimore

Membership Meeting 2/24/2021
2021-02-24 17:00 - 19:30
Chapter Business Meeting Slides: 2021-02-24 Meeting Presentation

Topic: Lockpicking 101
Meeting Recording: Lockpicking 101
The session will begin with a 15 presentation on primer on the pin picking (SPP) of pin and tumbler locks following by a 30-minute demonstration/interactive session. Participants are welcomed to purchase equipment to work along with the instructor. The simplest options to get are Number 3 Masterlocks:
https://usa.banggood.com/DANIU-12Pcs-High-Quality-Lock-Picks-Tools-Set-Lock-Opener-Locksmith-Tools-p-1139437.html
https://lockpicktools.com/tension-tool-2500-series-set/

Speaker: Michael, Unallocated Space

Flay is a past President of Unallocated Spaces. Unallocated Space is a technology-based community center, based out of a 1600+ SF space located in Severn, MD. He has been lockpicking for years and was the 2 time winner of the GrrCon ‘Cage of shame’ lockpicking challenge. He thinks its great fun and is excited to be able to encourage others in the hobby.
Click Here to register for the February 24th Membership Meeting.

SANS ICS Security Summit & Training 2021
2021-03-04 - 2021-03-05 | Virtual
ICS Security Summit & Training
We’re opening this virtual Summit to the global community!
Register now for FREE.

In-depth ICS security Summit talks & interactive sessions featuring speakers from all around the world. Sessions will be held around the clock – choose one that fits your schedule → Agenda
Featuring a NEW ICS Solutions Track
Immersive ICS security courses → COURSES
Bonus sessions – an all-new CTF, Grid NetWars, SANS@Night talks, and more!

SANS and Dragos CTF: March 3 | Free ​Summit: March 4-5 | Training: March 8-13 | Summit CPE Credits: 12
Co-Chairs: Tim Conway, Robert M. Lee
The most comprehensive ICS security event of the year is back — and we’re opening it up to the community!
The annual ICS Security Summit brings together the industry’s top practitioners and leading experts from around the globe to share actionable ideas, methods, and techniques for safeguarding critical infrastructures. In-depth talks and interactive panel discussions deliver proven advances and approaches that make a real difference for the individuals leading this fight every day.

Cisco Umbrella Coffee Hour with Boston Medical Center
2021-03-18 11:00 - 12:00 | Virtual
Join us on Thursday, March 18th at 8 a.m. PT | 11 a.m. ET for a chat with Lee Cullivan, CISO at Boston Medical Center, and Kate MacLean, Head of Product Marketing at Cisco Umbrella, for a real world perspective on managing security amidst the pandemic and vaccine rollout.

What you’ll learn:

Gain insight into security trends, challenges and unexpected findings during the vaccine rollout
Hear a CISO viewpoint on considerations for security education during the pandemic
Discover best practices, lessons learned and outcomes seen from rolling out Cisco Umbrella

Don’t miss out, reserve your spot today.

Register now!
