Workshops Bsides Cape Town 1 December 2023

ABOUT

Workshops

Please note that both workshops run simultaneously.

========================================

Full-day API workshop

[1 December - Friday 9:00-17:00]

========================================

This full-day workshop gives the attendee the skills necessary for offensive and defensive work with APIs.

In the first part, you will learn the skills essential to attack APIs, including the tools, techniques, discovery, and attack methods focused on the OWASP API Security Top 10.

The second part covers practical defense techniques at the code and runtime levels.

Requirements:

- A computer with a modern browser.

- Have Docker set up and running.

- Ideally, have a Kali Linux virtual machine available.

========================================

Elastic Security Analyst Workshop

[1 December - Friday 9:00-12:30]

[1 December - Friday 13:30-17:00]

========================================

The Elastic Security Analyst Workshop aims to provide participants with common daily workflows and analyses that a security analyst would leverage.

Requirements:

- A computer with a modern browser.

- An understanding of endpoint and network fundamentals is required.

- Experience working in an IT or security operations role, such as in SOC or incident response, is strongly preferred but not a hard requirement. 

- Experience using a SIEM and knowledge of adversary tradecraft is a bonus.

- Good vibes and a willingness to have fun with other like-minded people.

Workshop Key Takeaways:

- Ability to leverage the Elastic Security platform for Incident Response.

- Ability to understand common workflows for cyber security tasks.

- Ability to create security-focused visualizations.

- Ability to take a proactive approach to prevention and detection.

- Ability to operationalize the MITRE ATT&CK framework for security analyst workflows.

- Ability to apply comprehensive incident response with a case management workflow.

DIRECTIONS