Galactic Advisors

A lot has changed since we needed to navigate to updates.microsoft.com, including how Microsoft has lumped patches together and how they sunset versions of currently supported OSes. How do you keep machines up-to-date and validate those updates?

Mission: Configure and review one client’s vulnerability assessment and create an update ring.

We’ve identified thousands of vulnerabilities and boiled it down to the top 10 insurance and top 10 hacker findings every organization needs to be aware of and fix.

Mission: Run an external scan

As an engineer, is it your job to articulate concerns about security issues?

Mission: Discuss your moral responsibilities with your team when it comes to security - do you agree?

Hackers are constantly looking for ways to go undetected. What if you could enumerate an environment, execute unsigned binaries, and even cover your tracks with tools that are already built into the Windows operating system? Well, you can. LOL.

Mission: Attempt to proxy a binary like calc.exe and get it to run using one of the LOL methods we discussed.

Gain greater visibility within your M365 tenant. In this session, we will cover what to consider, how to configure and what to do with M365 alerts. #scripts

Link: https://portal.galacticscan.com/doc/31/GalacticM365Alerting.pdf

Mission: Setup M365 Alerting

Your user received a phishing email, what next? Is it just a normal drive-by? Do you have an APT to deal with? Using Threat Intelligence and Open Source Information to identify and respond to Phishing e-mails. #scripts

https://portal.galacticscan.com/doc/10/OSINT.pdf

https://mha.azurewebsites.net

https://gchq.github.io/CyberChef

Mission: Analyze a suspected phish

Planning, Executing and Review a Tabletop Exercise can seem like a daunting task. This is your Step-by-Step guide to conducting a Tabletop Exercise, how to document it, and what to avoid. #scripts

Link: https://portal.galacticscan.com/doc/29/GalacticTableTop.pdf

Mission: Run a Ransomware tabletop Exercise with one client.

You did everything right, but one of your vendors got nailed. Now what? Walk through some of the most common techniques hackers use to compromise supply chain hardware and software, and the things you need to do to protect yourself. #scripts

Mission: Develop a supply chain breach response matrix.

Link: https://portal.galacticscan.com/doc/25/SupplyChainResponseMatrix.xlsx

Properly managing and scoping projects, service, and security to give yourself the ability to get to everything. Communication and Scope are the key to success here.

Mission: Make sure you have a statement of work for projects

#scripts

https://portal.galacticscan.com/go/45/ExampleSOW.doc