Central Maryland Chapter of ISSA

SANS CyberThreat Security Summit (Virtual + free)
2022-09-12 - 2022-09-13 | MD
CyberThreat Is Back!
CyberThreat 2022 will bring together the UK and Europe’s cyber security community. Designed for security practitioners and spanning the full spectrum of offensive and defensive disciplines, the event has a strong technical emphasis.
The two-day conference (Sep 12-13) is hosted by the UK’s National Cyber Security Centre (NCSC) and SANS Institute and takes place at the Park Plaza Westminster Bridge London. CyberThreat 2022 evidences the UK Government’s commitment to equip practitioners with the skills and knowledge required to defend against cyber threats and also addresses the cyber skills gap, by developing and growing talent. CyberThreat aims to deliver the best technical conference in Europe for cyber security practitioners. In addition to presentations from world-renowned cyber security experts and rising industry stars, CyberThreat 2022 features many hands-on opportunities for delegates in the form of CTF events, team problem solving and “Hackathon” challenges against some of the latest devices and products.

Hacker Trivia
2022-09-08 17:00 - 20:00 (America/New_York) | Hysteria Brewing Company, 9570 Berger Rd Suite J, Columbia, MD, 21044
Test your security knowledge in our trivia event

Booz Allen’s National Cyber team presents Hacker Trivia. Hacker Trivia is a bar-style trivia event with questions that cover topics in cybersecurity, programming, networking, cryptography, and reverse engineering. Some questions are general trivia while others will test your team’s ability to solve harder challenges with pen and paper.
Teams can be up to a maximum of six people. There’s $3 off food and two complimentary drink tickets for participants. Come for the fun atmosphere and challenges, and see if your team is “1337” enough to bring home bragging rights.

Thursday, September 8, 2022
Happy Hour 5-6 pm
Trivia starts promptly at 6 pm

Jailbreak Brewing Company
9445 Washington Blvd N, Ste F, Laurel, MD 20723

Labor Day
2022-09-05 | MD

SANS Blockchain Security Summit (Virtual + free)
2022-08-31 - 2022-09-01 | MD
Now is the time to learn about blockchain technology and how to defend it
Like it or not, blockchain and smart contract security will be an essential part of cybersecurity programs moving forward. Organizations are starting to understand the benefits of this technology, and large enterprises, including Walmart, IBM, Microsoft, and many others are already utilizing blockchain and smart contracts. Financial companies are also adding cryptocurrencies, and other digital assets to their balance sheets.
New technologies often bring new security concerns to the forefront. This is no different with blockchains and smart contracts. Recently, there have been highly publicized security breaches, fraud, and hacks on blockchain platforms, resulting in billions of dollars in losses. As a community, we need to understand how to protect and defend against these attacks, program safe smart contracts, and custody keys in a secure manner.
Join SANS for the first-ever Blockchain Security Summit:
The SANS Blockchain Security Summit brings together the industry’s leading experts in blockchain security to share current threats, mitigations, and techniques for safeguarding this new technology, and will teach those who attend how to defend it. This virtual Summit includes:

Immersive workshops – attend half-day sessions taught by the blockchain security experts from SANS and Halborn that cover blockchain security fundamentals, smart contract hacking, blockchain defenses, exploiting NFTs, and more.
Keynotes, panel discussions, and in-depth Summit presentations – hear from the top security practitioners as they share their latest blockchain security research, tools, and case studies.
ZIION – all attendees will receive the blockchain and smart contract testing and development platform.
One-of-a-kind virtual networking experience – connect with your fellow summit attendees, leading experts and analysts, as well as SANS faculty and resources.
Workshops for Spanish speaking attendees – attend the opening keynote and then dive into two workshops presented in Spanish.

Capture The Flag
2022-08-25 18:00 - 21:30 | Virtual

Membership Meeting 8/24/2022
2022-08-24 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
The August ISSA membership meeting is sponsored by:

Click Here to register for the August 24, 2022 ISSA Membership Meeting.
Chapter Business Meeting Slides: 2022-08-24 Membership Meeting Slides
Speaker Slides: 2202-08-24 Supply Chain Security

Topic: Supply Chain Security: Preventing Second Hand or Counterfeit Computing Device Components
Increasingly, large enterprise customers are requiring Original Design Manufacturers (ODMs) and/or Original Equipment Manufacturers (OEM) to show demonstrable proof that they have a secure supply chain. These manufacturers must prove, through controlled, documented, and audited means, that their supply chain ecosystem is secure throughout the product development lifecycle (pre-manufacturing through product end-of-life.) This legitimate concern is based on the growing threat posed by second hand or counterfeit computing device components. Disruptions in supply chains and the possible introduction of counterfeit components can increase risks to the proper functioning and overall reliability of electronic devices. Even worse, such contaminated platforms may include malware that could potentially lead to data theft or other types of system compromise. To prevent this, organizations should only partner with technology vendors that provide verifiable proof that their products are free of second hand or counterfeit components. To do so, a manufacturer should be able to trace serial numbers or similar identifiers that are stamped or embedded on hardware during downstream manufacturing. For software components, these manufacturers should work with their software vendors to ensure that only accurate, non-counterfeit software is ever installed on their products.
Speaker: Kevin McPeak, Deputy Director within the Lenovo Chief Security Office

Kevin McPeak, CISSP, ITILv3 is a Deputy Director within the Lenovo Chief Security Office. Kevin is a technical SME for endpoint management, endpoint security, data loss prevention, encryption, mobile device app management, secure mobile content delivery, and new defensive technologies. Kevin has two Masters of Science degrees, with one being earned at Johns Hopkins University and the other being earned at Virginia Tech. He is a part-time PhD candidate at Virginia Tech’s northern Virginia extension campus and is completing his dissertation. Kevin previously worked for Symantec Corporation where he was their Public Sector Principal Cybersecurity Architect. Prior to Symantec, Kevin worked as an on-site contractor (CACI, Lockheed Martin, and AlphaInsight) where he conducted cybersecurity work across numerous Federal Government agencies. Additionally, Kevin is a US Army veteran of both Operation Enduring Freedom (2003) and Operation Iraqi Freedom (2010 – 2011).
Click Here to register for the August 24, 2022 ISSA Membership Meeting.

SANS Digital Forensics & Incident Response Summit & Training (Virtual + free)
2022-08-15 - 2022-08-16 | MD
As we celebrate the 15th anniversary of the SANS DFIR Summit & Training, we’re feeling nostalgic and having some fun looking back on the great strides we’ve made since our first DFIR Summit. It feels like just yesterday when a group of DFIR superheroes gathered for the first time to share ideas, learn new techniques, and have a little bit of fun. The DFIR community has come a long way since then, and we can’t wait to see what’s next.
Join us this year at the 2022 SANS DFIR Summit Live Online or attend in Austin! If you’ve attended before, you know you’ll walk away from the summit with a story, connection, and maybe even one of those limited edition DFIR superhero Legos. If it’s your first time attending, we look forward to meeting you at the most comprehensive DFIR

ISSA Chapter Leader Summit
2022-08-08 08:00 - 15:00 | MD
ISSA Chapter Leader Summit

August 8th, 2022

MGM Grand Las Vegas
3799 S Las Vegas Blvd Las Vegas, NV 89109
877-880-0880
Join your fellow chapter leaders for the annual chapter leader summit.
Why attend:

Hear the latest updates on tools and resources available to you
Listen to various trainings focused on topics to help build chapter membership and growth opportunities.
Interact by live discussion regarding chapter needs and suggestions for ISSA International to better serve the chapter community
Network with other chapter leaders and forge relationships with other chapter leaders

ISSA Awards Gala
2022-08-06 20:00 - 23:00 | Virtual

Black Hat USA 2022
2022-08-06 - 2022-08-11 | MD

SANS Security Awareness Summit (Virtual + free)
2022-08-03 - 2022-08-04 | MD
oin us in-person in Austin, TX, or attend Live Online for FREE! Register today.
Summit Chair: Lance Spitzner | Summit: Aug 3-4 | Training: Aug 1-2 & Aug 8-13 | Summit CPE Credits: 12

Managing Human Risk
Join us for the 9th annual SANS Security Awareness Summit to learn, connect, and share with thousands of fellow security awareness and culture professionals from around the world. For this year’s event you have the choice of attending live online or in-person*.
The focus for this year is “Managing Human Risk”. Traditionally security awareness events have focused only on topics such as engagement, interaction, and gamification. While these topics are important and will be covered, we should remember that security awareness is about driving behavior change and ultimately reducing human risk. Join us to learn how to mature your security awareness program, from gaining the support you need from your leadership to having an impact that you can measure.
The 2022 Security Awareness Summit will feature:

In-depth Summit Talks – The industry’s top practitioners will share their latest security awareness research, solutions, tools, and case studies. Gain insight on the latest proven advances and approaches in communicating to, engaging and securing your workforce.
Workshops – Interactive, hands-on workshops for those attending in person in Austin.
A One-of-a-Kind Networking Experience – This event is designed by the community for the community. This Summit offers exclusive access to connect with your fellow Awareness community, leading experts and analysts, as well as SANS instructors and staff. Attendees tell us time and again that one of the greatest takeaways from a SANS Summit is the many industry connections they forge or deepen during their time with us.
Closely Aligned SANS Awareness Courses – Enhance your knowledge base and add to your toolkit with a hands-on, immersive course taught by top SANS instructors and course authors.

Membership Meeting 7/27/2022
2022-07-27 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Click Here to register for the July 27, 2022 ISSA Membership Meeting.
Chapter Business Meeting Slides: 2022-07-27 Membership Meeting Slides
Speaker Slides: Chernovite’s Pipedream

Business Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Chernovite’s Pipedream
Gain an in-depth look at old case studies and new research across 2021 highlighting new ICS threat groups, vulnerabilities, and insights from the field including incident response case studies of previously unreported incidents. This session will give a ground-truth reality and primer on what is really happening in our industrial environments.

Speaker: Ben Miller, Dragos

An information security veteran with over two decades experience, Ben has focused on the unique challenges of securing and defending industrial control systems. He began his critical infrastructure journey as an electric asset owner where he was responsible for detecting and responding to threats across a Fortune 150 enterprise where he became acquainted with security challenges for transmission, generation, and nuclear environments. Ben then joined the North American Electric Reliability Corporation (NERC). In what was to become the Electricity Information Sharing and Analysis Center (E-ISAC), Ben worked closely with federal agencies and industry across a variety threats, vulnerabilities, and other matters as it relates to the North American bulk electric system. He is an accomplished speaker at conferences around the world and occasionally writes for various publications. In his spare time he enjoys the simple pleasures of outdoor cooking with his family in Maryland.
Click Here to register for the July 27, 2022 ISSA Membership Meeting.

Cybersecurity Trivia Night
2022-07-14 16:00 - 20:00 | Jailbreak Brewing Company, J9445 Washington Blvd. N, Suite F, Laurell, 20723, United States

Independence Day
2022-07-04 | MD

Membership Meeting 6/22/2022
2022-06-22 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-06-22 Membership Meeting Slides
Speaker Slides: OpenText – NDR Empowering Cyber – June-2022

Business Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Achieving Vital Network Visibility and Proactive Threat Hunting with Network Detection and Response
Enterprise networks are experiencing a deluge of highly sophisticated threats from motivated attackers. Cloud computing, remote working, and traffic encryption expand the attack surface while making threats harder to detect. Addressing security gaps requires total visibility and a proactive approach to finding threats. This presentation will explore how Network Detection and Response (NDR) empowers security operations professionals in fast-evolving infrastructures.
Speaker: Carl Bolterstein is Director of Product Management for Bricata NDR
Carl Bolterstein is Director of Product Management for Bricata NDR for OpenText Enterprise Security. Carl has over a decade of cyber security engineering and analyst experience with an extensive background in the network detection and response platform space. He has focused on the full analyst experience of NDR which includes training on how to effectively leverage network data for both incident response and hunting for unknowns. Previously, he has held roles leading customer experience as well as technical roles in and around NDR platforms from sales to professional services.

PowerShell Training Class - Day 2
2022-06-18 08:00 - 17:00 | SigNet/Convergint Technologies, 6650 Eli Whitney Dr, Columbia, MD, 21046
2-day course (June 4th – Crash Course) and June 18th (Defensive).

Cost: $75 day/$125 for both days + Eventbrite fees.
Drinks + food (breakfast / lunch / snacks) to be provided for all attendees
PowerShell Crash Course (June 4th)
This course will give you the basics of PowerShell. You will learn the PowerShell syntax and Google if you need help. You will learn about repeating tasks, enumerating through a list of objects, and the various things you can do with PowerShell objects. You will learn new cmdlets, modules, and functions. You will gain experience by practicing what the instructor is teaching and demos production scripts and tools. The target audience is individuals new to scripting and new to PowerShell.
Defensive PowerShell (June 18th)
This workshop touches on the difference between PowerShell versions. It will detail how to use PowerShell to secure the systems, PowerShell remoting, and set up auditing. During this section, the specific modules discussed are PowerShell DSC (Desired State Configuration) and PowerShell JEA (Just Enough Admin). We will use PowerShell remoting to query system logs, query the registry, search for unwanted executables, and determine the type of file and if it is executable. The rest of the day, we will use PowerShell to investigate a system and hunt for evil.
Requirements
Participants must bring their own system (laptop) on which PowerShell 5.1 or above has been installed. (Note: 5.1 comes standard on Windows 10 or above.) It is helpful if the participant has escalated (Power User/Administrator) rights on the system.

PowerShell Training Class - Day 1
2022-06-04 08:00 - 17:00 | SigNet/Convergint Technologies, 6650 Eli Whitney Dr, Columbia, MD, 21046

Memorial Day
2022-05-30 | MD

Membership Meeting 5/25/2022
2022-05-25 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-05-25 Meeting Slides
Speaker Slides: Speaker slides can be obtained from the VP of Operations (V_P_Operations@centralmarylandc-y5eorcwrmb.live-website.com)

Topic: Security, Identity and Compliance with AWS, Infrastructure and Services to Elevate Your Security in the Cloud

AWS has various security services, including identity management, detective controls, infra and data protection, and incident response services you can use in Amazon’s cloud. This presentation will discuss these services available via the Amazon AWS cloud.

Speaker: Conrad Fernandes, Principal Engineer at Amazon

Conrad Fernandes is an information security leader in Public Sector for the past 20 years. At Booz Allen, Conrad led the Computer Network Defense (CND) Reference Architecture initiative for the US Department of Defense (DoD) and the National Security Agency (NSA). He also conducted threat and forensics analysis at DoD Cyber Crime Center (DC3) to dissect nation-state activities targeted against the DoD and Defense Industrial Base (DIB). At the Johns Hopkins Applied Physics Laboratory, Conrad managed the Security Operations Center and extended defensive capabilities into commercial clouds such as Amazon Web Services (AWS) and Microsoft Azure. In his current role, Conrad is a Principal Engineer at Amazon and works closely with National Security customers to ensure secure workload deployments in AWS and on-premises. When he’s not busy innovating security in hybrid cloud architectures, Conrad enjoys most outdoor activities and exploring National Parks across the country with his wife and adult son.

Mid-Atlantic Quarterly Meeting
2022-05-17 18:30 - 20:00 | Virtual via Go To Meeting, MD

Membership Meeting 4/27/2022
2022-04-27 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-04-27 Meeting Slides
Speaker Presentation: PowerShell Remote Access and Demonstration Link
Meeting Recording (Business and Speaker): Zoom Meeting Recording – Meeting Recording
Topic: PowerShell Remoting
One of the powers of PowerShell is its ability to send commands to multiple machines at once. In this brief overview, I will cover all the various ways to use PowerShell remoting to accomplish your tasks. We will be connecting 1 on1, 1 to many, connecting to remote applications and even a Linux machine via SSH. That’s right PowerShell remoting via SSH instead of WinRM.

Speaker: James Honeycutt
Mr. Honeycutt has served in the military for 24 years. He has spent most of that time working in IT Operations in various positions, from helpdesk to a Microsoft Windows systems administrator. He currently works for the Maryland National Guard Cyber Protection Team (CPT) as a Cyber Operations Technician with a focus on incident response, forensics, and being the resident “Windows Expert”. In his off time, he likes to give back to the community by presenting at local community events. He spent time peer reviewing SANS SEC586: Blue Team Operations: Defensive PowerShell. He has presented at like BsidesCharm, AvengerCon, ISC2 Baltimore Chapter, ISSA Central Maryland Chapter, and University of Central Arkansas Community Outreach. He also enjoys teaching. He has been a SAN Mentor/Community instructor for SEC505: Securing Windows and PowerShell Automation, SEC511: Continuous Monitoring and SOC Operations. He was a teaching assistant for a Cyber Security Bootcamp offered by Trilogy. He also teaches at Howard Community College as an adjunct instructor. He currently holds a Bachelor of Science in Management in Information Systems, GIACx10, CISSP, C|EH, SEC+, VCP5-DCV.

Easter
2022-04-17 | MD

Cyber Threat Day at JHU/APL
2022-03-31 | JHU Kossiakoff Conference Center, 11100 Johns Hopkins Road, Laurel, MD, 20723

FutureCon Baltimore CyberSecurity Conference
2022-03-30 | MD
FutureCon Baltimore CyberSecurity Conference – FutureCon is hosting a cybersecurity conference on March 30th at the Hilton Baltimore BWI Airport and has graciously offered chapter members a free pass to the conference. For further details and to register, please visit https://futureconevents.com/events/baltimore-dc-2022/. Please use promo code ISSAMD to take advantage of the free pass. which includes all sessions, CPE Credits, light breakfast, lunch, and a celebratory happy hour. A conference flyer is attached as well.

Maryland Day
2022-03-25 | MD

Mid-Atlantic Quarterly Meeting
2022-03-23 17:30 - 19:00 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Click Here to register for the February 23, 2022 ISSA Mid-Atlantic Quarterly Meeting.

Topic: Emerging Technologies, Existing Policies and Architectures
This presentation we will discuss current architectures and policies and how it’s hard to match the speed of change. That the coalition of the willing can create change through sharing and leveraging the grassroots of organizations and drive-up consistencies in leveraging what you have to meet new constructs and open a discussion on what policies are required.
Speaker: Stephanie Neely, Defense Information Systems Agency

Stephanie Neely has 27 years of experience in cybersecurity and cyber operations. She has worked both sides of the fence as an ISSM to NOCs and SOCs. Currently she leads a team to ensure the Department of Defense Information Networks (DODIN) are postured through unified actions that deliver the successful evolution of modernized technology solutions. Currently we are working on defining zero trust minimum capability standards for the DODIN and will be performing risk assessments against each DAO’s architecture.
Click Here to register for the February 23, 2022 ISSA Mid-Atlantic Quarterly Meeting.

Membership Meeting 3/23/2022
2022-03-23 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-03-22 Meeting Slides
Speaker’s Recording: Zoom Meeting Recording – Speaker Recording

Meeting Sponsor Presentation: ASPG-Sponsor-Presentation-2022-03-22.pdf
Topic: Human Security Engineering: Stop Relying on the Failed Human Firewall
While the main perception is that the “user problem” is due to a malicious party trying to trick well intentioned users, users who are unaware, apathetic, careless, etc., are more likely to be the cause of loss. Either way, the cybersecurity industry realizes this and develops tactics such as awareness, MFA, DLP, etc. to mitigate the problem. Despite all of these tactics, 90%+ of all losses result from attacks targeting users. What this talk proposes is a comprehensive strategy to address the insider threat, whether it results from malicious or well meaning insiders.
Speaker: Ira Winkler, Chief Security Architect for Walmart

Ira Winkler, CISSP is Chief Security Architect for Walmart and author of You Can Stop Stupid. He is considered one of the world’s most influential security professionals, and has been named a “Modern Day James Bond” by the media. He did this by performing espionage simulations, where he physically and technically “broke into” some of the largest companies in the World and investigating crimes against them, and telling them how to cost effectively protect their information and computer infrastructure. He continues to perform these espionage simulations, as well as assisting organizations in developing cost effective security programs. Ira also won the Hall of Fame award from the Information Systems Security Association, as well as several other prestigious industry awards. CSO Magazine named Ira a CSO Compass Award winner as The Awareness Crusader. Most recently, Ira was named 2021 Top Cybersecurity Leader by Security Magazine.
Click Here to register for the March 23, 2022 ISSA Membership Meeting.

Membership Meeting 2/23/2022
2022-02-23 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-02-23 Meeting Slides
Business Meeting Recording: Zoom Meeting Recording

Topic: Emerging Technologies, Existing Policies and Architectures
This presentation we will discuss current architectures and policies and how it’s hard to match the speed of change. That the coalition of the willing can create change through sharing and leveraging the grassroots of organizations and drive-up consistencies in leveraging what you have to meet new constructs and open a discussion on what policies are required.
Speaker: Stephanie Neely, Defense Information Systems Agency

Stephanie Neely has 27 years of experience in cybersecurity and cyber operations. She has worked both sides of the fence as an ISSM to NOCs and SOCs. Currently she leads a team to ensure the Department of Defense Information Networks (DODIN) are postured through unified actions that deliver the successful evolution of modernized technology solutions. Currently we are working on defining zero trust minimum capability standards for the DODIN and will be performing risk assessments against each DAO’s architecture.

Washington's Birthday
2022-02-21 | MD

The Convergence of Digital and Physical Security
2022-02-01 11:00 - 12:00 | MD
Managing risk under one unified platform results in streamlined communications and response, faster remediation of disruptions, and ultimately, reduced impact to business continuity. Whether your employees are working from home, in the office, or in a hybrid environment, it’s more important than ever to prioritize resilience via situational and operational intelligence.
Featuring Tracy Reinhold, CSO of Everbridge with over 20 years’ experience in the FBI, and Eric Yunag, VP of Technology and Innovation at Convergint with over 20 years’ experience in security integration, join this conversational panel to learn:

How to quickly identify and act on all threat vectors to produce a reduced risk gap
Ways to break down siloed response activity for optimal resilience
Best practices to build a robust risk platform for success, including analysis of past performance
What to look for in a technology that will facilitate and automate your response needs

Reserve My Seat
