- 10
- Episodes
- 2025
- First episode
About BHIS Webcasts
Podcast audio-only versions of weekly webcasts from Black Hills Information Security
- Publisher
- Black Hills Information Security
- Category
- education · technology
- Language
- en
- Explicit
- No
- First episode
- 19 Dec 2025
- Latest episode
- 10 Jul 2026
Latest episodes
10 episodes in the feed.
10 Jul 2026
Proxy Execution with Microsoft Edge WebView2 - Matthew Eidelberg
How do sideloading techniques work in today’s runtime environment? Join us for a free one-hour BHIS webcast with Matthew Eidelberg on proxy execution via Microsoft Edge WebView2. Matthew will break down techniques that blur the line between legitimate app behavior and malicious activity, showing how shared runtime components are changing execution and detection boundaries. You’ll learn how traditional sideloading concepts apply in modern environments, how WebView2 is increasingly embedded across the ecosystem, and how attackers can exploit it to bypass common detection methods. 🛝 Webcast Slides https://www.blackhillsinfosec.com/wp-content/uploads/2026/04/Proxy-Execution-with-Microsoft-Edge-Webview2.pdf (https://www.blackhillsinfosec.com/wp-content/uploads/2026/04/Proxy-Execution-with-Microsoft-Edge-Webview2.pdf) Chapters (00:00) - Intro - Proxy Execution with Microsoft Edge WebView2 - Matthew Eidelberg (00:49) - Agenda (01:31) - DLL Hijacking (04:48) - DLL Proxy Attacks (06:05) - Execution Flow (07:17) - Windows Apps (12:05) - What is WebView2? (13:21) - Webview Security Issue (16:42) - Domain_action.dll (20:01) - Weaponizing the Flaw (22:38) - Tooling - FaceDancer (24:11) - FaceDancer - Usage (25:32) - FaceDancer - Examples (27:06) - FaceDancer - Common Questions (30:00) - FaceDancer - Caveats (30:44) - Microsoft's Response Timeline (34:04) - Microsoft's Disclosure Process (36:29) - Defensive View (38:37) - Wrap Up (39:49) - Q&A Creators & Guests Ryan Poirier (https://bhispodcasts-webcasts.transistor.fm/people/ryan-poirier) - Producer Ashley Knowles (https://bhispodcasts-webcasts.transistor.fm/people/ashley-knowles) - Guest Matthew Eidelberg (https://bhispodcasts-webcasts.transistor.fm/people/matthew-eidelberg) - Guest Tom Smith (https://bhispodcasts-webcasts.transistor.fm/people/tom-smith) - Guest Chat with your fellow attendees in the BHIS Discord server: https://discord.gg/bhis (https://discord.gg/bhis) in the #🔴live-event-chat channel 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com (https://poweredbybhis.com/) Click here to watch a video of this episode. (https://www.youtube.com/watch?v=HTvLbzrf1R0) Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com (https://www.blackhillsinfosec.com/) ☯️ Introducing BHIS Fusion Penetration Testing https://www.blackhillsinfosec.com/fusion-penetration-testing/ (https://www.blackhillsinfosec.com/fusion-penetration-testing/) Antisyphon Training https://www.antisyphontraining.com/ (https://www.antisyphontraining.com/) Active Countermeasures https://www.activecountermeasures.com (https://www.activecountermeasures.com/) Wild West Hackin Fest https://wildwesthackinfest.com (https://wildwesthackinfest.com/) Click here to view the episode transcript. (https://share.transistor.fm/s/baffa913/transcript)
13 May 2026
Intro to PAMSkeletonKey for Persistence w/ Ben Bowman
How does PAM abuse fit into a real‑world attack chain? 🛝 Webcast Slides https://www.blackhillsinfosec.com/wp-content/uploads/2026/04/PAM_Tool_Slide_Deck.pdf (https://www.blackhillsinfosec.com/wp-content/uploads/2026/04/PAM_Tool_Slide_Deck.pdf) Join us for a free one‑hour BHIS webinar with Ben Bowman as he introduces PAMSkeletonKey, a tool designed for red teamers and CTF players to explore persistence, lateral movement, and privilege escalation on Linux systems. Ben will teach why the tool was created, how to use it safely in lab environments, and what this technique means for defenders working to detect or prevent authentication abuse. You'll learn a practical understanding of Linux PAM (Pluggable Authentication Modules) authentication and how it can be abused to create a skeleton‑key backdoor for persistence. Get started with PAMSkeletonKey: https://github.com/her3ticAVI/PAMSkeletonKey (https://github.com/her3ticAVI/PAMSkeletonKey) Chapters (00:00) - Intro – 2026-04-02 Intro to PAMSkeletonKey for Persistence - Ben Bowman (01:33) - What I Don't Know (02:14) - Remember Mimikatz? Me neither. (03:59) - What is PAM? (04:43) - PAM Architecture Deep Dive (06:54) - PAM Module Types (08:25) - How PAM Authentication Works (12:18) - What does this tell us? (13:44) - What Code Changes Do We Make? (17:28) - Pivoting & Attack Scenarios (18:57) - The Topic of Stolen Valor (21:14) - The Improvements (25:50) - Demo Time (41:57) - References (45:39) - Q&A (59:00) - Antisyphon Training's New LMS Walk Through Creators & Guests Ben Bowman (https://bhispodcasts-webcasts.transistor.fm/people/ben-bowman) - Guest Logan Bender (https://bhispodcasts-webcasts.transistor.fm/people/logan-bender) - Guest Ryan Poirier (https://bhispodcasts-webcasts.transistor.fm/people/ryan-poirier) - Producer Brett Jones (https://bhispodcasts-webcasts.transistor.fm/people/brett-jones) - Guest John Strand (https://bhispodcasts-webcasts.transistor.fm/people/john-strand) - Host Chat with your fellow attendees in the BHIS Discord server: https://discord.gg/bhis (https://discord.gg/bhis) in the #🔴live-chat channel 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com (https://poweredbybhis.com/) Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com (https://www.blackhillsinfosec.com/) Antisyphon Training https://www.antisyphontraining.com/ (https://www.antisyphontraining.com/) Active Countermeasures https://www.activecountermeasures.com (https://www.activecountermeasures.com/) Wild West Hackin Fest https://wildwesthackinfest.com (https://wildwesthackinfest.com/) Click here to view the episode transcript. (https://share.transistor.fm/s/9c9af1f5/transcript)
24 Apr 2026
Learning to Trust AI Agents with Automation w/ Ethan and Derek
What if you could safely harness AI agents to automate real work, without spending a dime? Join us for a free one-hour BHIS webcast with Ethan Robish and Derek Banks to cut through the hype and learn what coding agents really are, why they’re not just for developers, and how to start for free. You’ll learn how tools like Opencode work, how to overcome security and trust barriers, and how to give agents the context, skills, and guardrails they need to safely plan, execute, and iterate. 🛝 Webcast Slides https://www.blackhillsinfosec.com/wp-content/uploads/2026/03/SLIDES_Mar-26-Learning-to-Trust-AI-Agents-with-Automation-w-Ethan-Robish.pdf (https://www.blackhillsinfosec.com/wp-content/uploads/2026/03/SLIDES_Mar-26-Learning-to-Trust-AI-Agents-with-Automation-w-Ethan-Robish.pdf) Chapters (00:00) - Intro - Learning to Trust AI Agents with Automation Ethan and Derek (01:37) - Background (05:26) - What is a coding agent? (11:41) - Pick one and start learning (12:31) - The Cost of AI (15:26) - Opencode - Getting Started (19:26) - Free Models - Never truely free (22:21) - What can I do here? (24:40) - Running models locally (27:33) - Why would I need a coding agent? (28:00) - Code Agent Examples (35:48) - Openwork Demo (38:49) - Ask the agent to help you use it better (Help me help you) (41:07) - But AI always makes things up (43:44) - Prompting an LLM (46:37) - Concepts & Terminology (49:25) - Context usage (51:02) - Model Tokein Limits (55:14) - Guiding an Agent : Best Practices (57:18) - 80% planning 20% execution (58:05) - Guardrails for command execution (01:00:37) - Q&A Creators & Guests Jason Blanchard (https://bhispodcasts-webcasts.transistor.fm/people/jason-blanchard) - Host Deb Wigley (https://bhispodcasts-webcasts.transistor.fm/people/deb-wigley) - Host Tom Smith (https://bhispodcasts-webcasts.transistor.fm/people/tom-smith) - Guest Ethan Robish (https://bhispodcasts-webcasts.transistor.fm/people/ethan-robish) - Guest William Corbin (https://bhispodcasts-webcasts.transistor.fm/people/william-corbin) - Guest Chat with your fellow attendees in the BHIS Discord server: https://discord.gg/bhis (https://discord.gg/bhis) in the #🔴live-chat channel 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com (https://poweredbybhis.com/) Click here to watch a video of this episode. (https://www.youtube.com/watch?v=KObmDor4OTA) Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com (https://www.blackhillsinfosec.com/) Antisyphon Training https://www.antisyphontraining.com/ (https://www.antisyphontraining.com/) Active Countermeasures https://www.activecountermeasures.com (https://www.activecountermeasures.com/) Wild West Hackin Fest https://wildwesthackinfest.com (https://wildwesthackinfest.com/) Click here to view the episode transcript. (https://share.transistor.fm/s/08d46b5c/transcript)
19 Mar 2026
Do it, do it NOW! - A Pre-Incident Checklist w/ Patterson
Post-incident “lessons learned” are extremely valuable and very, very expensive! But you don’t have to wait until “right of boom” to make meaningful improvements to your cybersecurity resilience! Join us for a free one-hour webcast with Patterson Cake from Black Hills Information Security: Do it, do it NOW!! A Pre-Incident Checklist. You’ll learn the top 10 low-effort, high-impact lessons every business should review and fix before a cybersecurity incident. 🛝 Webcast Slides https://www.blackhillsinfosec.com/wp-content/uploads/2026/03/SLIDES_IR-Preparedness-Checklist-03032026.pdf (https://www.blackhillsinfosec.com/wp-content/uploads/2026/03/SLIDES_IR-Preparedness-Checklist-03032026.pdf) Chapters (00:00) - Intro - Do it, do it NOW! - A Pre-Incident Checklist - Patterson (06:27) - Presuppositions (08:28) - In the event of an Emergency... (10:04) - YOUR INCIDENT RESPONSE PLAN IS USELESS (12:47) - YOUR CYBER INSURANCE PROVIDER SHOULD NOT BE YOUR ADVERSARY (15:44) - YOUR LOG DETAIL & RETENTION ARE INADEQUATE (18:51) - YOUR MOST IMPORTANT ASSET IS __________ (20:48) - IMPLEMENT OUT-OF-BAND COMMS BEFORE CRISIS & TEST REGULARLY (23:34) - YOUR STAFF ARE AWESOME BUT NOT SUPERHUMAN (25:45) - EFFECTIVE IR TAKES TRAINING & PRACTICE (28:04) - YOU MUST HAVE IMMUTABLE BACKUPS (31:45) - YOU HAVE 0 HOURS TO FIX INTERNET-FACING VULNERABILITIES (35:11) - THE TWO IR PLAYBOOKS YOU NEED MOST (43:48) - 10 Things (50:49) - Q&A (57:37) - The "Working with BHIS" part Creators & Guests Jason Blanchard (https://bhispodcasts-webcasts.transistor.fm/people/jason-blanchard) - Host Deb Wigley (https://bhispodcasts-webcasts.transistor.fm/people/deb-wigley) - Host Ryan Poirier (https://bhispodcasts-webcasts.transistor.fm/people/ryan-poirier) - Producer Bryan Strand (https://bhispodcasts-webcasts.transistor.fm/people/bryan-strand) - Guest Patterson Cake (https://bhispodcasts-webcasts.transistor.fm/people/patterson-cake) - Guest Chat with your fellow attendees in the BHIS Discord server: https://discord.gg/bhis (https://discord.gg/bhis) in the #🔴live-chat channel 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com (https://poweredbybhis.com/) Click here to watch a video of this episode. (https://www.youtube.com/watch?v=jYaMkv56xSk) Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com (https://www.blackhillsinfosec.com/) Antisyphon Training https://www.antisyphontraining.com/ (https://www.antisyphontraining.com/) Active Countermeasures https://www.activecountermeasures.com (https://www.activecountermeasures.com/) Wild West Hackin Fest https://wildwesthackinfest.com (https://wildwesthackinfest.com/) Click here to view the episode transcript. (https://share.transistor.fm/s/aa25dcc1/transcript)
12 Mar 2026
Breach Assessment - The Curious Case of the Comburglar w/ Troy Wojewoda
What if an attacker lived inside your network for seven months and your tools never noticed? During a real breach assessment, Black Hills Information Security uncovered a stealthy intrusion using a COM-based persistence technique hidden in native Windows scheduled tasks. There were no obvious indicators of compromise. No suspicious process names. No malicious file hashes. Just a quiet foothold designed to stay invisible. 🛝 Webcast Slides https://www.blackhillsinfosec.com/wp-content/uploads/2026/03/SLIDES_CuriousCaseOfTheComburglar_BreachAssessment-2026-03-12.pdf (https://www.blackhillsinfosec.com/wp-content/uploads/2026/03/SLIDES_CuriousCaseOfTheComburglar_BreachAssessment-2026-03-12.pdf) Chapters (00:00) - Intro - Breach Assessment - The Curious Case of the Comburglar - Troy Wojewoda (02:15) - Agenda (03:02) - What Is a Breach Assessment? (10:50) - 5 Pillars of Data Telemetry (16:23) - The Hunt Begins (29:15) - Attack Chain (38:39) - Timeline & Scope (45:21) - Threat Hunting Playbook (51:29) - Key Takeaways (53:52) - Q&A Creators & Guests Troy Wojewoda (https://bhispodcasts-webcasts.transistor.fm/people/troy-wojewoda) - Guest Jason Blanchard (https://bhispodcasts-webcasts.transistor.fm/people/jason-blanchard) - Host Deb Wigley (https://bhispodcasts-webcasts.transistor.fm/people/deb-wigley) - Host Logan Bender (https://bhispodcasts-webcasts.transistor.fm/people/logan-bender) - Guest Keith Chew (https://bhispodcasts-webcasts.transistor.fm/people/keith-chew) - Guest Chat with your fellow attendees in the BHIS Discord server: https://discord.gg/bhis (https://discord.gg/bhis) in the #🔴live-chat channel 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com (https://poweredbybhis.com/) Click here to watch a video of this episode. (https://www.youtube.com/watch?v=u8rRyTVopmI) Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com (https://www.blackhillsinfosec.com/) Antisyphon Training https://www.antisyphontraining.com/ (https://www.antisyphontraining.com/) Active Countermeasures https://www.activecountermeasures.com (https://www.activecountermeasures.com/) Wild West Hackin Fest https://wildwesthackinfest.com (https://wildwesthackinfest.com/) Click here to view the episode transcript. (https://share.transistor.fm/s/8be9ade7/transcript)
27 Feb 2026
Data Loss Prevention (DLP) Survival Guide - Ashley Knowles
How quickly could you detect sensitive data being exfiltrated? Join us for a free one-hour BHIS webcast with Ashley Knowles on best practices for data loss prevention and keeping your most sensitive information safe. You’ll learn about common vulnerabilities, real-world scenarios, and practical, actionable strategies to protect the data you’ve been hired to safeguard. 🛝 Webcast Slides https://www.blackhillsinfosec.com/wp-content/uploads/2026/02/SLIDES_Data-Loss-Protection-Survival-Guide.pdf (https://www.blackhillsinfosec.com/wp-content/uploads/2026/02/SLIDES_Data-Loss-Protection-Survival-Guide.pdf) Chapters (00:00) - Intro (02:57) - About Ashley Knowles (03:26) - Why DLP Shouldn't Terrify You (Too Much) (08:10) - Understanding Your Data Landscape (10:23) - Data Classification Framework (11:49) - Where Does Your Data Live? (14:24) - Understanding Data Exfiltration (18:34) - Advanced Exfiltration Methods (22:20) - The Insider Threat Reality (24:19) - How to Stop Data Loss: The Basics (25:51) - Technical Controls That Work (27:44) - Recommended Layered Approach (30:56) - Cloud & Modern Workplace Protection (32:01) - The Purple Team Process (34:18) - Purple Team Testing: Scenario 1 (36:38) - Purple Team Testing: Scenario 2 (39:13) - Purple Team Testing: Scenario 3 (40:12) - Purple Team Testing: Scenario 4 (40:40) - Purple Team Testing: Scenario 5 (42:03) - Starting Your DLP Journey (43:50) - Key Takeaways & Action Items (44:16) - Questions & Resources (55:59) - The "What it's like to work with Black Hills Information Security" segment Creators & Guests Jason Blanchard (https://bhispodcasts-webcasts.transistor.fm/people/jason-blanchard) - Host Ryan Poirier (https://bhispodcasts-webcasts.transistor.fm/people/ryan-poirier) - Producer Deb Wigley (https://bhispodcasts-webcasts.transistor.fm/people/deb-wigley) - Host Bryan Strand (https://bhispodcasts-webcasts.transistor.fm/people/bryan-strand) - Guest Ashley Knowles (https://bhispodcasts-webcasts.transistor.fm/people/ashley-knowles) - Guest Chat with your fellow attendees in the BHIS Discord server: https://discord.gg/bhis (https://discord.gg/bhis) in the #🔴live-chat channel 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com (https://poweredbybhis.com/) Click here to watch a video of this episode. (https://www.youtube.com/watch?v=5vj9e6B3I0Y) Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com (https://www.blackhillsinfosec.com/) Antisyphon Training https://www.antisyphontraining.com/ (https://www.antisyphontraining.com/) Active Countermeasures https://www.activecountermeasures.com (https://www.activecountermeasures.com/) Wild West Hackin Fest https://wildwesthackinfest.com (https://wildwesthackinfest.com/) Click here to view the episode transcript. (https://share.transistor.fm/s/d0fa6726/transcript)
1 Feb 2026
Simplify Pentest Workflows Using Cerno - Chris Traynor
Are you reviewing findings or managing chaos? 🛝 Webcast Slides https://www.blackhillsinfosec.com/wp-content/uploads/2026/01/SLIDES_Simplify-Pentest-Workflows-Using-Cerno.pdf (https://www.blackhillsinfosec.com/wp-content/uploads/2026/01/SLIDES_Simplify-Pentest-Workflows-Using-Cerno.pdf) ✏️ Learn from Chris Traynor with Offensive Tooling for Operators https://www.antisyphontraining.com/product/offensive-tooling-for-operators-with-chris-traynor/ (https://www.antisyphontraining.com/product/offensive-tooling-for-operators-with-chris-traynor/) 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com (https://poweredbybhis.com) If you are a pentester, you have been there. Hundreds of findings. Critical vulns buried in noise. Too many terminal windows, lost context, and manual tracking slowing you down. On offensive work, time is everything, and disorganization wastes it fast. Join us for a free one-hour webcast with Chris Traynor, Security Consultant at Black Hills Infosec, as he introduces Cerno, a new free and open-source tool designed to bring order to pentest findings. Cerno is a Terminal User Interface tool that imports vulnerability data for structured review and validation. Navigate findings with keyboard shortcuts, launch tools with a single keystroke, track progress automatically, extract CVEs, look up related exploits, compare findings across hosts, and follow built-in or custom verification workflows. You'll learn how to use Cerno to organize, review, and validate pentest findings faster, reduce chaos during engagements, and stay efficient under real-world time pressure. Get familiar with Cerno: https://github.com/ridgebackinfosec/cerno Chapters (00:00) - Intro – Simplify Pentest Workflows Using Cerno w/ Chris Traynor (06:03) - The Problem (10:55) - The Solution (13:14) - Feature Overview (16:37) - Database-First Design (17:17) - Module Architecture (18:11) - Data Flow (19:02) - Interactive TUI (21:16) - Severity Filtering (22:57) - Finding Review (25:09) - Tool Orchestration - nmap (27:35) - NetExec & Custom Tools (28:45) - NetExec DB [Beta] (30:22) - Host Comparison (32:40) - Session Persistence (34:23) - Configuration (36:22) - Demo Time (57:38) - Getting Started (57:49) - Resources (58:13) - Thank You / Free Labs (59:58) - CTF challenge (01:00:23) - Free Survival Guide - Spearphish General Store (01:00:42) - QA Start (01:10:16) - Taking Care of Business Related Plugs Chat with your fellow attendees in the BHIS Discord server: https://discord.gg/bhis (https://discord.gg/bhis) in the #🔴live-chat channel
24 Jan 2026
Zero to Zeek: Build a Network Sensor Fast and Easy w/ Troy Wojewoda
What if world-class network monitoring didn’t require being a Linux expert? 🛝 Webcast Slides (URL) https://www.blackhillsinfosec.com/wp-content/uploads/2026/01/SLIDES_Zero-to-Zeek_TroyWojewoda_2026-01-22.pdf (https://www.blackhillsinfosec.com/wp-content/uploads/2026/01/SLIDES_Zero-to-Zeek_TroyWojewoda_2026-01-22.pdf) Join Antisyphon instructor Troy Wojewoda (Black Hills Infosec – Incident Response) for a free one-hour training session on how to standup a Zeek sensor in as little as three commands...maybe four. Troy will teach you how to quickly deploy and customize a powerful network visibility sensor without needing Linux expertise. You'll learn to adjust log formats, reduce noisy traffic, and tune the sensor for richer, higher-quality event data. Don't let Linux be the barrier to outstanding insight into your network. Register now and gain the power of Zeek today! Chat with your fellow attendees in the BHIS Discord server: https://discord.gg/bhis in the #🔴live-chat channel 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com (https://poweredbybhis.com)
19 Jan 2026
Active Directory Attack Path in Action
Are small Active Directory misconfigurations putting you at risk? 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com (https://poweredbybhis.com) 🛝 Webcast Slides https://www.blackhillsinfosec.com/wp-content/uploads/2026/01/SLIDES_Active-Directory-Attack-Path-in-Action.pdf (https://www.blackhillsinfosec.com/wp-content/uploads/2026/01/SLIDES_Active-Directory-Attack-Path-in-Action.pdf) Antisyphon Training events featuring Alyssa & Kaitlyn https://www.antisyphontraining.com/search/Alyssa%20Kaitlyn (https://www.antisyphontraining.com/search/Alyssa%20Kaitlyn) Chapters (00:00) - Intro - Active Directory Attack Path in Action (02:06) - Alyssa and Kaitlyn Fun Facts (02:43) - Webcast Overview (03:34) - Web Services (06:20) - Jenkins Env Hunter - Tool by Kent Ickler! (07:53) - Test Credentials (08:57) - Username Enumeration (12:12) - Domain Enumeration (14:11) - NetExec (15:12) - BloodHound.py (16:29) - SharpHound (17:28) - ADExplorer (19:30) - Convert Snapshot (20:07) - BOFHound (22:46) - Identify Attack Path (23:55) - Abusing RBCD for Local Priviledge Escalation (26:43) - Machine Account Quota (27:40) - Resource-Based Constrained Delegation Expolitation Flow (30:36) - Create Computer Object (31:58) - Set Delegation (33:22) - Delegation Attribute (33:53) - Select a Target Account (34:34) - Avoid Protected Users (35:24) - Get Privileged TGS (37:07) - Delegation Failure Example (37:39) - Escalation Success (39:18) - Dump local Secrets (40:53) - Domain Admin Compromised (41:39) - Attack Path Summary (44:24) - Defensive Considerations (45:42) - Related Antisyphon Courses (46:08) - More Resources (47:27) - Q&A Start (50:03) - Alternative Path for Attackers (51:30) - Whats the Assumed Compromize Course like? (56:27) - Are Extended Test Timelines an advantage? (57:51) - BHIS "Side Quest" capabilities (58:55) - BHIS CPT On-Boarding Process (01:02:29) - Getting the Ball Rolling on Test Assessments (01:04:22) - The Price of Continous Pen Testing (01:05:30) - Favorite Things About Customer CPTs Join Kaitlyn Wimberley and Alyssa Snow (Black Hills Infosec – Continuous Penetration Testers) for a free one-hour webcast where they’ll walk through an example Active Directory attack path, from un-credentialed network access to Domain Administrator. You’ll learn how attackers can escalate from un-credentialed access to Domain Admin, identify common misconfigurations, and understand how small weaknesses can combine to compromise your network. Chat with your fellow attendees in the Black Hills Infosec Discord server: https://discord.gg/BHIS in the #🔴live-chat channel. Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com (https://www.blackhillsinfosec.com) Antisyphon Training https://www.antisyphontraining.com/ (https://www.antisyphontraining.com/) Active Countermeasures https://www.activecountermeasures.com (https://www.activecountermeasures.com) Wild West Hackin Fest https://wildwesthackinfest.com (https://wildwesthackinfest.com)
19 Dec 2025
Inside SOC: Triage Smarter, Not Harder w/ Tom DeJong
Inside SOC: Triage Smarter, Not Harder w/ Tom Dejong 🛝 Webcast Slides https://www.blackhillsinfosec.com/wp-content/uploads/2025/12/SLIDES_Inside-SOC-Triage-Smarter-Not-Harder-1.pdf (https://www.blackhillsinfosec.com/wp-content/uploads/2025/12/SLIDES_Inside-SOC-Triage-Smarter-Not-Harder-1.pdf) Could you triage an alert on the spot? Learn why alert triage is a crucial skill for every SOC analyst. Tom will teach you the basics of triage, including alert anatomy, how to separate real threats from noise, and when to escalate or close an alert. You’ll also learn documentation best practices, common mistakes to avoid, and tips for strengthening your soft skills. This webcast is ideal for anyone starting out in a SOC or looking to sharpen their foundational skills. Chat with your fellow attendees in the Antisyphon Discord server: https://discord.gg/bhis (https://discord.gg/bhis) in the #🔴live-chat channel (00:00) - Inside SOC: Triage Smarter, Not Harder (01:31) - About Tom DeJong (02:41) - Agenda: What We’ll Cover Today (03:21) - What Is Triage? (06:37) - Why Triage Matters (08:01) - The Triage Mindset (12:47) - Anatomy of an Alert (17:51) - The Triage Process (23:21) - Real Threat or Just Noise (27:21) - Escalate or Close (32:49) - Common Mistakes to Avoid (34:49) - Tips for Making the Right Call (35:37) - Smart Documentation Tips (39:01) - Basic Documentation Template (39:47) - Soft Skills That Make a Difference (44:48) - Managing Alert Fatigue (50:05) - Live Demo (56:14) - Rule Logic and Detection Examples (58:56) - Resources and References (59:21) - Wrap-Up and Thanks (01:00:16) - Post Show Banter Q&A 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com (https://poweredbybhis.com) Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com (https://www.blackhillsinfosec.com) Antisyphon Training https://www.antisyphontraining.com/ (https://www.antisyphontraining.com/) Active Countermeasures https://www.activecountermeasures.com (https://www.activecountermeasures.com) Wild West Hackin Fest https://wildwesthackinfest.com (https://wildwesthackinfest.com)
Contact BHIS Webcasts
- Guest appearances
- Books guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Host of BHIS Webcasts?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show
Podcast research with Pod Engine