Every transaction on the Internet – good or bad – leaves a trail in the Domain Name system (DNS). In this fast-paced, hands-on workshop, Farsight Security CTO Ben April will teach the fundamental investigative techniques and methodology on how to use DNS to combat cyberattacks, from phishing to e-crime to nation-state attacks. This is a rare opportunity to take a “masterclass” from the top experts in their field and learn the proven techniques used by threat hunting teams, from banks to government agencies.
In this masterclass, you'll:
LEARN: How to identify and map malicious infrastructures for different types of attacks, from nation-state to fraud, using DNS
DISCOVER: Popular investigative “pivot” techniques using DNS
UNLOCK: Additional information from common Indicators to advance your investigation
TROUBLESHOOT: Possible roadblocks when using DNS in investigations
National Press Club
529 14th Street, NW 13th Floor
Washington, DC 20045
October 3, 2019 beginning at 12 p.m.
12:00-1:00 Lunch Provided
1:00-2:20 DNS Overview and Basic Pivots
2:40-4:00 Complex Pivots and Other DNS Capabilities
4:00-5:00 Networking / Mixer
Attendees are required to bring their own laptop to use for the workshop. Prior to the workshop, attendees will need to get their free DNSDB API key. To use the Key, attendees should come to class with DNSDB ScoutTM for Google Chrome Extension or Mozilla Firefox downloaded on their computer.
Seating is limited – first-come, first-serve. Registration must be completed and verified by Thursday, September 26th, 2019.
About the Presenter
Ben April is the Chief Technology Officer at Farsight Security, Inc. Prior to joining Farsight, Mr. April spent eight years at Trend Micro, where he became the Americas regional manager of the forward-looking threat research team. He has presented to security conferences on five continents, covering topics like Bitcoin, NFC, operational security and infrastructure security. Mr. April has built research systems for collecting and aggregating data, from Whois and the Bitcoin block-chain to the global routing table. His current crusade is to eliminate the technical and policy barriers that impede data-sharing among white-hat security researchers. Mr. April is also a volunteer sysadmin and coder for some trusted-community security projects.