Cyber security technology consulting, incident response and applied - PowerPoint PPT Presentation

Cyber security technology consulting, incident response and applied research company with a focus on services for specialized public service providers, finance industry and corporations with high data sensitivity. NRDCS.L T

TIMETABLE FOR 2019 November October tbc 17-20 th May 7-10 th May Evaluation and plans for 7-8 th February 2020 3 rd training OSINT: targeted information search for information analysis 2 nd training and incident response Incident response Practice 1 st training Governing cyber security at the national level Approval of training courses 2 I n r d c s . l t

GOVERNING CYBER SECURITY AT THE NATIONAL LEVEL Best practices and lessons learned Lectures English 800 USD Case studies Vilnius Exercises Face to Face Roundtable 7-10 May Visits Target group: ▪ Decision makers Management ▪ Influencers in national cyber security initiatives ▪ 3 I n r d c s . l t

GOVERNING CYBER SECURITY AT THE NATIONAL LEVEL Trainers team AKVIL Ė GINIOTIENĖ RIMTAUTAS ČERNIAUSKAS Security governance expert Technical cyber security consultant and investigator Prof. VILIUS BENETIS SIGITAS ROKAS Corporate governance of CEO, researcher and information security computer incident handling expert expert 4 I n r d c s . l t

COURSE AGENDA Day 4 Day 1 Day 2 Day 3 Governing National Governing National Practical Considerations Site visits Cyber Security Incident Handling Related to National Strategy Capabilities Cyber Security Stream 1: site visit of ▪ Essential elements for ▪ ▪ International CS ▪ Important vectors national incident Digital Government regulations and handling capabilities facility (Lithuania) initiatives National cyber security- ▪ related legislations Stream 2: site visit of ▪ Centralized and ▪ CS strategy development building ▪ state of the art Tier4 data decentralized models and maturity evaluation center (Lithuania) ▪ Budgeting national cyber Handling cyber crisis at ▪ National CS from security initiatives ▪ the national level different views Test ▪ ▪ Communication channels between ▪ Training evaluation government and national CSIRT Certificates ▪ 5 I n r d c s . l t

INCIDENTS RESPONSE PRACTICE Hands-on scenario based training English Lectures 800 USD Vilnius Case studies Face to Face Exercises 17-20 September Roundtable Target group: ▪ CSIRT members 6 I n r d c s . l t

INCIDENTS RESPONSE PRACTICE Trainers team MARIUS URKIS RIMTAUTAS ČERNIAUSKAS NRD CIRT lead, Technical cyber security cyber security incident consultant and investigator handling and forensics expert 7 I n r d c s . l t

COURSE AGENDA Day 4 Day 1 Day 2 Day 3 Information analysis Log analysis Network forensics Email investigation ▪ Overview of log analysis, ▪ Information sources ▪ Incidents related to email ▪ Incident investigation on root cause analysis available online (zone-h, network traffic data usage shodan) (network capture, Hands-on exercise Hands-on exercise ▪ netflows) ▪ relevant to the day topic: ▪ Incident triage: initial relevant to the day topic: collection of information, evaluation of the collection of information, ▪ Hands-on exercise analysis, incident incident information, relevant to the day topic: analysis, incident handling according to the classification handling according to the collection of information, procedures procedures analysis, incident handling ▪ Hands-on exercise according to the ▪ Review of results relevant to day topic. ▪ Review of results procedures Review of results Training evaluation ▪ ▪ ▪ Certificates 8 I n r d c s . l t

OSINT: TARGETTED INFORMATION SEARCH FOR INFORMATION ANALYSIS AND INCIDENT RESPONSE Hands-on training English Lectures 650 USD Vilnius Case studies Exercises Face to Face October Roundtable 3 days Target group: all who need or want to be able quickly find targeted and accurate information ▪ ▪ learn more about data collection from open sources 9 I n r d c s . l t

OSINT: TARGETTED INFORMATION SEARCH FOR INFORMATION ANALYSIS AND INCIDENT RESPONSE Trainer KAZIMIERAS SADAUSKAS OSINT expert 1 0 I n r d c s . l t

COURSE AGENDA Day 1 Day 2 Day 3 Introduction to OSINT Social networks Advanced Search and public data investigations gathering ▪ Search engines ▪ Social networks: ▪ IP and domain research Search operators Monitoring Test ▪ ▪ ▪ Image search Analysis tools Training evaluation ▪ ▪ ▪ ▪ Custom search engines ▪ Keywords ▪ Certificates Accounts ▪ ▪ Automated search 1 1 I n r d c s . l t

CONTA CT US NRD CS, UAB Phone: +370 5 219 1919 E-mail: info@nrdcs.lt Address: Gyn ė j ų str. 14, Vilnius, Lithuania CEO: Dr. Vilius Benetis vb@nrd.no 1 2 I n r d c s . l t