Hacking Cloud Infrastructure

NotSoSecure, a Claranet Group Company, is a global penetration testing and hacking training company founded in the UK with presence in USA and India.NotSoSecure works with Fortune 500 companies and global start-ups alike, helping them improve their security by identifying security gaps and risks in their systems, raising security skill levels and improving application development methodologies. NotSoSecure is one of the largest training providers at Black Hat conferences and trains hundreds of individuals throughout the year.Our trainers are also pen testers and we use a research led approach to ensure our training and testing is always of the highest quality.WE HACK. WE TEACH

NotSoSecure Global Services Ltd

Bring your technical cybersecurity skills up to the industry standard by training with our experienced, practicing penetration testers.

<h3>Your course</h3><p>As cloud innovation gives birth to new technologies and new threats, now is the time to modernize your cloud security skills and bring them up to the industry standard. Join this hands-on, 2-day course to push your cloud hacking and vulnerability remediation skills to the next level and widen your career prospects. Get your hands dirty with our popular virtual labs and learn from experienced, practicing penetration testers with a legacy of training at Black Hat.</p><h3>Who it’s for</h3><ul><li>Cloud administrators and architects</li><li>Penetration testers and red teamers</li><li>CSIRT/SOC analysts and engineers/blue teams</li><li>Developers</li><li>Security/IT managers and team leads</li></ul><p>This course is suitable for anyone with a stake or interest in cloud security, from technical practitioners to decision makers. The syllabus has been designed to cover the latest vulnerabilities and advances in hacking, as well as the skills to penetration test cloud systems and environments and remediate vulnerabilities.</p><p>Delegates must have the following to make the most of the course:</p><ul><li>Basic to intermediate knowledge of cybersecurity (1.5+ years’ experience)</li><li>Experience with common command line syntax</li></ul><h3>Top 3 takeaways</h3><ul><li>Exploitation techniques to gain cloud entry via exposed services</li><li>Post-exploitation techniques to enumerate systems and achieve exfiltration</li><li>Methods for defending different cloud environments</li></ul><h3>What you’ll learn</h3><p>This course uses a Offense methodology based on real world offensive research (not theory). That means everything we teach has been tried and tested on live environments and in our labs and can be applied once the course is over. By the end, you’ll know how to:</p><ul><li>Think and behave like an advanced, real-world threat actor</li><li>Identify and exploit complex vulnerabilities and security misconfigurations in AWS, Microsoft Azure</li><li>Design your penetration tests around real-world attacker behaviors and tooling, making it relevant to the threats facing your organization</li><li>Identify the attack surface exposure created by cloud-based services such as virtual machines (VMs), buckets, container as a service (CaaS) platforms, and serverless functions </li></ul><h3>What you’ll be doing</h3><p>You’ll be learning hands on:</p><ul><li>Spending most of the session (~70%) on lab-based exercises</li><li>Using lab-based flows to explore and hack lifelike cloud environments.</li><li>Exploiting different cloud and container environments</li><li>Competing in a Capture the Flag (CTF) challenge to test your new skills.</li><li>Discussing case studies with your course leader to understand the real-world impact of the hacks covered.</li></ul><h3>Why it’s relevant</h3><p>The cybersecurity skills shortage is felt perhaps nowhere as deeply as in the cloud. With new rulebooks and standards, practitioners often find themselves playing catch up with the latest developments in technology and in the threat landscape. This course is designed to be a highly informative bootcamp to help you advance your skills in the most important and relevant areas of cloudsec. Across two days, you’ll learn about the high-impact vulnerabilities and flaws that could be open in your organization right now and how to fix them.</p><p>Our syllabuses are revised regularly to reflect the latest in-the-wild hacks, the newest system releases, and whatever proof of concepts we’ve been developing in our own research. Because they remain so up to date with the threat landscape and security industry standard, many delegates return every 1-2 years to update their skills and get a refresh.</p><h2><a href="https://notsosecure.com/security-training/hacking-cloud-infrastructure" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Find out more about this course</a></h2>

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}