Skip to content

Details

Where:
We are virtual again this month!

We will be posting a Webex meeting link for all attendees to dial into remotley. Closer to the date we will send the meeting link to everyone who has RSVP'd Yes to the event (Keep an eye on your mail). People from outside Toowoomba are welcome to join us without the drive whilst we are in quarrantine mode! :D

Who is it for:
Anyone with an interest in Security, regardless of experience. More info on the format can be found on the SecTalks website https://sectalks.org

This months topic:
Colby Prior will be running 'An Introduction to Running Your Own Honeypot'.

Colby has a background in DevOps, managing infrastructure, a strong focus on security, and is involved in the information security community in Queensland.

Our public networks are probed for attack vectors every day. These probes and attacks can be identified and measured to build threat intelligence that we can use to identify compromised hosts.

Even our private networks are often more open than we would like with WiFi often provided with a convenience first and security second principal.

While Internet honeypots give a view of attackers and malware, local network honeypots can give a critical indication of active threats inside of your network.

Everyone participating this workshop will get hands on experience with the following:

  1. Running a Cowrie ssh honeypot
  2. Using Thug as a Javascript client honeypot
  3. Running Snare/Tanner web honeypot
  4. Attacking your own honeypots and analysing the results
  5. Exporting the honeypot results to tools like Elasticsearch to SOAR with relevant threat intelligence

Participants need an ssh terminal.

Please make yourself familiar with the Code of Conduct:
https://www.sectalks.org/coc/

Thanks to:
Cisco for catering and Webex.
Intalock for covering Meetup fees

You may also like