At this month's PLUG Security meeting:
Donald McCarthy: passiveDNS For fun and Profit (part1)

For more information:
http://phxlinux.org/index.php/meetings/20-plug-security.html

Description:
If you DNS infrastructure has a bad day, your network has a bad day. If your DNS infrastructure has a good day, something else is bound to go wrong. PassiveDNS generally wont help you fix either.

PassiveDNS is a historical look at observed DNS queries over time. It is akin to The Internet Archive's Way Back Machine, but for DNS zones. Its utility as an operations and security tool is valuable and not easily replaced by another type of data.

In this presentation we will cover exactly what passiveDNS is and isn't, passiveDNS architecture, some security use cases, and if time allows some live demonstration.

In part 2 of the presentation (another month) I will demonstrate some passiveDNS tooling and more in depth practical knowledge to turn theoretical use cases into automated assistance for a SOC or NOC.

About Donald:
Donald "Mac" McCarthy is a 15 year veteran of the IT industry with the last 8 years focused on InfoSec. He has worked on a variety of different systems ranging from cash registers to super computers. It was while serving as a systems administrator for a scientific computing cluster that he discovered his passion for using linux for highly distributed complex tasks. His current focus is using linux with open source technologies like kafka and elastic search to build tooling for security analysts and network operations. He is a proud Veteran of the United States Army and recently relocated from Atlanta to the East Valley.
September 2019
S M T W T F S
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30 1 2 3 4 5

Upcoming Events

Free Software Stammtisch
Tue Sep 17 @ 7:00PM
Installfest
Sat Sep 21 @10:00AM
Installfest
Sat Oct 05 @10:00AM
PLUG East Meeting
Thu Oct 10 @ 7:00PM
Free Software Stammtisch
Tue Oct 15 @ 7:00PM

AzLoCo Events

Linux Installfest/Workshop
Sat Sep 21 @10:00AM
Why You Should Switch to a Linux OS
Thu Sep 26 @ 5:30PM
Tempe Ubuntu Hour
Thu Sep 26 @ 7:00PM
Ubuntu Hour Tempe Az
Thu Oct 03 @ 7:00PM
Linux Installfest/Workshop
Sat Oct 05 @10:00AM

Copyright for each contribution is retained by the contributor unless otherwise noted.
Hosting generously provided by Duncan Multimedia

Login