SHELLGym
ABSTRACT
SHELLGym is the regular cybersecurity workout you have been looking for! Whether you're just starting out and need some exercises, studying for a cert (hint: OSCP), looking at CTF challenges, or developing something cybersecurity-related (maybe your own automated tools?), SHELLGym aims to help you progress in picking up practical cybersecurity knowledge and skills. Come and go as you please, work on your own stuff with like-minded individuals, or just have fun during the workout!
AGENDA
🪟 Windows Forensics, Logs, system artefacts
The session will be about examining baseline Windows systems, investigating how user activities (and intrusions) are logged. We will also examine basic Windows OS functionality and some of the more common services, such as file sharing and remote desktop. Similarly, we will look at configuration files can alter the way some services behave, as configuration files are also targets for attackers to alter.
Crafted scenarios could include some basic triaging and log analysis (little to no RE), with some added complexity where an attacker manages to tamper with logs to mislead forensic teams and would-be investigators. Participants will have some hands-on activities to collate artefacts, parse them, and identify potentially suspicious actions within.
⚠️ NOTE
Bring your own laptops (and laptop chargers) with pre-installed Windows VM. Please also download sysinternals (Link to Guide) before the session.
VIRTUAL SHELLGyms (by request)
Hosted on Discord, do approach KK or the Div0 Crew for access
TRAINER
KK "Jim" Tan — Founder, counterShell
As a mid-careerist convert to cybersecurity, Jim picked up his practical skills through getting OSCP certified and by participating in a variety of CTFs. In his career at CSIT, he performed a variety of red-teaming and vulnerability research roles and established the Cyber Training School at CSIT as the Lead Instructor. Besides the OSCP certification, Jim is also OSCE and OSEE certified, and has a Bachelor's degree in Social Science (Psychology). He now sees psychology as a field of study where you fuzz humans until they produce unexpected behaviour.
CO-ORGANISERS & VENUE SPONSOR
IMPORTANT NOTICES
Code of Conduct: https://www.div0.sg/code-of-conduct
Terms of Use & Disclaimer Notice: https://www.div0.sg/terms-of-use-disclaimer-notice