Talks for January 21st

We'll be meeting at the Livonia Campus Room 432



Here are the talks we have lined up:

Host Based detection - Doug Clendening

Receiving intelligence about malicious activity is one thing. Finding it in your own environment is another. I'll walk you through how we analyze threats and create IDS rules that are actionable in a worldwide corporation with hundreds of thousands of end points. Host based Mcafee HIPs will be the tool of discussion.

Reflective DLL injection with powershell and mimikatz -  @WilliamLPauley 


Reflective DLL injection technique loads a dll into the memory of a process. By using the password dumper mimikatz combined with Joe Bialek's powershell scripts, an attacker can remotely dump credentials without ever writing their tools disk.  This attack will by demonstrated and we will analyze the difference in SMB vs PS-remoting network traffic and host analysis, time permitting.

December now January

Going to move the meeting to January 21st.  We came up one short for presentations in December.  If you have any interested in presenting in January please let me know.

Call for Presentations - December 17 meeting

We'll be having our meeting on Wednesday December 17th and are currently looking for speakers.  Please let me know if you are interested.

September 17th agenda

Forensic on Forensics - @sallyvdv

For a student just getting started in digital forensics, concepts regarding forensic images can be confusing.  Terminology like images, clones, bit-stream copies and forensic images are often used inconsistently, further complicating the issue.  This talk will attempt to clear up the confusion by presenting an instructive clarification of what a forensic image is as well as what it is not.   In addition, it will provide a comprehensive look at several different free tools to create forensic images along with methods to access the embedded data.  

Hunting open source for internal evil - @bl4ck_0ut

1) Blog hunting

2) Feed hunting

3) Hash tag hunting

It'll be at 7 PM at EMU Livonia campus, room number to follow.  Food will be provided.

Mi4n6 Reboot

We are going to spin the group up again but decided to make it quarterly instead of monthly.  Because of the large student base we'd like to have one student presentation and one industry professional presentation as the format.  First meeting is on September 17th at 7:00 PM.  Please let us know if you'd like to present.

Call for presentations - Meeting January 22nd

Welcome to the New Year!  We'll be having or first meeting January 22nd and are currently looking for speakers. 

No meeting November 20th

No @mi4n6 meeting tomorrow couldn't dig up a speaker. We'll be Claddagh Irish Pub instead.  Have a safe and happy holidays see you in January.