CiNPA - Security SIG

Meeting Topic:

Threat Hunting with the open source XDR / SIEM Wizard. Join us to lead how you can rapidly deploy a Wizard instance in your home lab or as POC to build a threat hunting environment. (PS this is the first lab of two for next years QCC. In the second lab we will deploy common post initial compromise advisories techniques so you can level up your threat hunting skills)

BTW, the version of Linux being demoed is Tsurugi Linux (90 GB after importing into virtual box) so people would need to download and install it ahead of time if you want to follow along (and bring a laptop).

Micah K Brown
is a member of the IT Security Technical Architecture team at [Company Redacted], a large financial organization. He is focused on building out the next generation of IT Security services and IT Security controls to protect the organization, the employees, the partners, and the customers. Afterhours, Micah is a board member of the non-profit setting up Queen City Con in Cincinnati Ohio!

About Us:

The CiNPA Security SIG is the Cincinnati Networking Professionals Association Security Special Interest Group. We meet monthly on the third Thursday of each month, starting at 6:30 p.m.

Please connect with us on Google Groups at https://groups.google.com/g/cinpa-security-sig to stay updated on notices. (This link will explain how to join the group.)

You can also follow us on Linkedin.

The CiNPA Security SIG's monthly meeting format typically consists of one or two main monthly meeting topics featuring live presentations or demonstrations promoting open and interactive group discussions. Our focus is primarily on the technical aspects of InfoSec, but we occasionally touch on other areas of cybersecurity as well. Information security news, announcements, and round-table discussions follow our main meeting topics.

Attendee Benefits:

• Attendance qualifies for 2 hours of CPE or CEU credit towards certification renewals

• Maintaining awareness of new vulnerabilities and exploits

• Learning about the latest security tools, utilities, products, services, solutions, strategies, techniques, frameworks, and best practices

• Sharing of information regarding trends concerning enterprise systems and technology

• Hearing announcements of upcoming area security conferences and events

• Networking with peers in the local Information Security (InfoSec) community