SecDSM

SecDSM, a monthly meetup providing the opportunity to network with other InfoSec pros and listen to short tech talks presented by your fellow members (or give a presentation yourself!) while enjoying some beer/drinks/food. No sales pitches. The idea is to provide you actionable knowledge for you to take back to your $dayjob while building a top tier InfoSec community in the Des Moines area. If you have the desire to learn about real world InfoSec scenarios - get out of your comfort zone - and join us in a relaxed vendor neutral environment. No registration is required.

Schedule

We meet monthly, on the 2nd Wednesday starting at 6pm at The Basement Bar at the Des Moines Social Club in Downtown Des Moines.

Submit a Talk!

Permission to record

Permission to stream

Permission to publish recording

SecDSM 101 6:00 PM

A brief introduction to the group along with any announcements and general communication.

James Beal - SecDSM News 6:05 PM

Quick Review of the Month's InfoSec news.

Nicholas Starke How to use Ghidra to reverse Raw Binary files6:30 PM

This talk will not be recorded

Ghidra, the powerful reverse engineering tool created by NSA and released in March of this year, can easily disassemble and even decompile ELF, Mach-O, and PE binaries. But what if the binary you have is not one of those formats? This talk will detail how I was able to load a Cisco IOS firmware image into Ghidra and have it resolve strings within the Ghidra representation. From there we can start to discern what certain function calls are, and begin renaming functions. This in turn allows us to begin to understand how IOS works. We'll even look at where a few known CVEs come from in code!

Nicholas Starke is a Security Researcher based in Des Moines Iowa.

Brandon Murphy Network Security Monitoring with Suricata7:00 PM

This talk will not be recorded

Getting started with Network Security Monitoring (NSM) can be a diffcult task. This talk will present many of the basics of NSM, how to get started, and how to use Suricata to achieve many of the objectives of NSM. This talk will cover everything from installing network taps to searching network metadata logs with ElasticStack. After this talk, you'll be ready to deploy network sensors in almost any enviroment and start catching intruders and finding compromised machines.