DEF CON 864 / DC864

July 11, 2024 at 6PM our monthly meeting presentation will be, Build Carolina: empowering tech professionals in South Carolina through training. Lauren McGlamery will share the mission of Build Carolina as a tech talent hub, fostering a vibrant community for tech professionals. We'll explore the various ways we achieve this, including: - Comprehensive training programs: We offer a range of training programs to address the industry's ever-evolving needs. - Dedicated support: We offer career guidance, mentorship opportunities, and other resources to empower aspiring tech professionals. - Supportive community for the tech ecosystem in SC: Our organization provides a platform for collaboration, knowledge sharing, and professional development. - Learning opportunities and giving back initiatives: We'll showcase ways experienced professionals can continue to expand their skills and contribute their knowledge and expertise to the community. We'll also delve into our unique apprenticeship program, designed to bridge the gap between theory and practice for early-career professionals in any tech-based role. Learn how your organization can benefit from partnering with Build Carolina to build a robust tech workforce. Agenda - Welcome & Announcements - Presentation (above) - Member Projects & Hobbies - Networking (in-person only) Location OpenWorks Greenville, SC and streamed on Discord All meetings are free and open to the public. We hope you'll join us for the monthly DEF CON 864 group meeting online and in-person. Online details are posted in our Discord. Discord invite is on our website at dc864.org.  

Meeting details for this Thursday.

The value of a personal learning lab, or How to Survive a War Zone with a VPN and a Raspberry Pi Join DC864 on April 4th for a presentation on the value of a personal learning lab, or How to Survive a War Zone with a VPN and a Raspberry Pi. Every day learning is important. In my opinion, the best way to learn is to have a project and a playground. In this talk, I’ll present the technology stack in my personal lab, the evolution of how I’ve used it for professional development, and most importantly, the motivation behind the development and evolution. If I get the slides done in time… Speaker Bio Mike Fletcher is a security leader with over 15 years in the security industry. He is an advocate of people leadership in the tech field, where most find only poor management.  He also leads our Blue Team village. Event Details Thursday, April 4, 2024 at 6:00 – 8:00 PM EST Greenville County Library System (Hughes Main Library) 25 Heritage Green Pl · Greenville, SC If you have a tools project to share with the group we have an open mic time for projects. These can be status updates of a work in-progress.

Crafting Your Own Tools: For Learning and Fun Join DC864 on March 7th for a presentation on creating your own tools from scratch to better understand the underlying technical details in your methodology. We will use Guile Scheme to make a simple directory brute forcing tool and begin to explore ways to extend it to be a more niche tool for your web app testing methodologies. Speaker Bio Russell Brinson is a free and open source software advocate and security enthusiast. He also leads our Red Team Village. Event Details Thursday, February 7, 2024 at 6:00 – 8:00 PM EST Greenville County Library System (Hughes Main Library) 25 Heritage Green Pl · Greenville, SC If you have a tools project to share with the group we have an open mic time for projects. These can be status updates of a work in-progress.

Join us on Feb. 1st 6PM for Beyond Locked Doors: Digital Defenses for Water Treatment Plants by Joel Irvine, PE Do you remember hearing about the Oldsmar, Florida water treatment facility back in February 2021? That event caught the nation's attention and made everyone realize just how important cybersecurity is for water treatment facilities. Nowadays, when discussing security at water treatment plants, it's not just about locking doors; we must also secure our digital systems. Since 2018 there has been a law called America’s Water Infrastructure Act (AWIA). If you're working with a water system serving more than 3300 people, this law asks you to make sure you're prepared for cybersecurity risks. If you want a deeper dive, join us and we will cover current recommendations from the EPA website and this law. In addition to the EPA recommendations, we will explore the National Institute of Standards and Technology (NIST) Cybersecurity Framework in greater depth. NIST's Cybersecurity Framework is a comprehensive and widely recognized resource that serves as a roadmap for organizations seeking to enhance their cybersecurity posture. It offers a structured approach to identifying, protecting, detecting, responding to, and recovering from cybersecurity threats and incidents. Lastly, if you're looking for a tool to help secure your water facility, the AWWA has your back. They've developed a tool, the AWWA Cybersecurity Guidance and Assessment Tool, which aligns with the guidelines from NIST and AWIA 2018. We will briefly go over this tool and show how to use it. So, while the world of water treatment is evolving, with the right tools and knowledge, we can ensure our water is clean and our facilities are safe. Topics discussed: • Key components of AWIA 2018. • Key Components of NIST Cybersecurity Framework • Brief overview of EPA rule directing state officials to assess cyber security resilience. • Using the AWWA assessment tool. • Recommendations to improve the cybersecurity of water treatment facilities. Speaker Bio Joel has almost ten years of total experience in Controls Systems in the Water/Wastewater industry. Location In-person at the Hughes Main Library and online at our Discord server.

Jan 4th meeting – Resilience on the Witness Stand Ever wonder how the world of cybersecurity intersects with the drama of a courtroom? It’s more painstaking than TV and movies portray: navigating the twists and turns of legal battles, facing a persistent SLAPP threat actor, and standing resilient on the witness stand. I’ll unravel a tale of attempted manipulation and how the skills honed in cybersecurity were an unexpected preparation for the legal arena. Speaker Bio Overcast is one of the co-founders of DEF CON 864. He loves exploring hacking and spending quality conversational time with family, friends, and the voices in his head. General Information Join us for the monthly DEF CON 864 group meeting online and in-person. In-person at Pelham Road Library | F.W. Symmes Branch. Streaming online via Discord. Online details are posted in our Discord. Discord invite is on our website at dc864.org. All meetings are free and open to the public. After Party Double Dogs 110 Milestone Way, Greenville, SC 29615

Dec. 7th Meeting Info In "MUDdy Lessons," Kal takes the audience on a journey through his 20-year experience with Multi-User Dungeons (MUDs), highlighting their role in developing his IT skills. He delves into the intricacies of learning C programming since 2020, a skill cultivated through his work on MUDs, particularly on the project "BlackMUD: Age of Discovery." Kal discusses how MUDs fostered not only his programming abilities but also skills in game design, solution engineering, and community management. The presentation includes a case study on the challenges and innovations in updating "BlackMUD," emphasizing practical problem-solving. The talk concludes with a Q&A session, offering insights into how hobbies and passions can enhance professional growth in the IT field. SPEAKER BIO Kal is a co-founder of DEF CON 864 and one of its current leads. He loves finding ways to hack old tech in with the new and spending quality conversational time with family and friends. Occasionally those folks enjoy talking to him too. General Information Join us Dec. 7th at 6PM for the monthly DEF CON 864 group meeting online and in-person. In-person at Pelham Road Library | F.W. Symmes Branch. Streaming online via Discord. Discord invite is on our website at dc864.org. All meetings are free and open to the public.

Security Automation with Gitlab is the speaker topic for the November 2nd meeting. Continuous Security that's built into your development pipeline is a best practice for any software project, but there are so many options. Static code scanners, Dynamic scanners, Fuzzing, Container and Infrastructure scans, Dependency scans and more! What should we do and what CAN we do? How do you manage them in a single project? What about multiple projects? What about compliance reporting for Soc Type II and similar certifications? We'll explore all of these challenges and how to manage them in a Gitlab environment. Speaker Bio Barry Jones (aka brightball) is a Fractional CTO Consultant as well as an advocate and professional instructor for DMARC, Anti-Phishing, PostgreSQL, Ruby on Rails, Elixir, SAFe and Gitlab with over 20 years industry experience. He's also the organizer of Carolina Code Conference as of 2023. Location - Hughes Main Library in downtown Greenville, SC. Look for the room sign near the giant globe. - Also virtually streaming on Discord (invite is on our website About page) Agenda - Welcome and announcements at 6 PM - Presentation (15 – 20 minutes) - Projects open mic (15 – 20 minutes) - Villages and networking (remaining time)