References

Security awareness training for all employees (incl. hacking demonstration) with a focus phishing and malware/ransomware

In a two 3-day workshop, a Swiss energy company were trained in IT forensics readiness. Starting with theoretical aspects at management level (threats with a high probability of occurrence), the creation of an incident response policy, the exact procedure for a forensic data backup and an applied exercise case, several topics were dealt by Oneconsult specialists with approx. 12 participants

Incident handling training & workshop

Conducting of the OSSTMM Professional Security Tester (OPST) Training

Training for developers and project managers on security risks in web applications (OWASP Top 10) with focus on PHP and XML

Training of the IT security manual for all IT employees with focus on operations and developers/devOps enriched with live hacking demos and practical examples

Workshop for developers on security risks in web applications with a brief introduction into the OWASP Top 10 and selected vulnerabilities to exploit themselves

Workshop for developers on security risks in web applications with a brief introduction to the OWASP Top 10 and training on selected vulnerabilities to exploit themselves

Realization of a two-part IT security workshop focusing on Cyber Security (aspects for Redteam and Blueteam based on the MITRE ATT&CK Framework) and Malware (evaluation of malware analyses for dangerous droppers, as well as methods for intelligent malware detection)

Incident response exercise (analysis of existing processes, definition of the roles to be part of the exercise, creation of the storybook, observation and evaluation of the all-day exercise with international participation, preparation of recommendations, various meetings)

Comprehensive security audit of a protected environment by means of physical social engineering, spear phishing, security scans & penetration tests and undercover hacking (ethical hacking) / Additional awareness training with live hacking for all employees and targeted training for technicians

Security awareness training for all employees (incl. hacking demonstration) with a focus on password security, malware and phishing

Training of developers in the field of web security

Security awareness training (incl. hacking demonstration) with a focus on malware and mobile devices

Security scan of multiple networks with presentation of the results and two workshops regarding an IT security awareness program and incident response / forensics readiness

Red teaming: Holistic attacker simulation with the goal of evaluating the implemented security measures of the customer

Security awareness training for all employees

Configuration review and workshop on the security of a Lotus Notes installation

Workshop for the IT managers with main focus on cloud outsourcing, vulnerable areas in the IT system landscape and physical attacks on mobile devices

Presentations on vulnerabilites in web applications as well as court-proof forensic investigations