References

Presentation and live hacking with focus on APT and social engineering

Full technical security audit of the entire IT infrastructure; In internal and external audits, security vulnerabilities and possible entry points from various attack scenarios were assessed. The customer's services were audited and attacks were simulated from their customers’ point of view. The awareness of the employees was increased through training

Security awareness training for all employees (incl. hacking demonstration) with a focus phishing and malware/ransomware

In a two 3-day workshop, a Swiss energy company were trained in IT forensics readiness. Starting with theoretical aspects at management level (threats with a high probability of occurrence), the creation of an incident response policy, the exact procedure for a forensic data backup and an applied exercise case, several topics were dealt by Oneconsult specialists with approx. 12 participants

Incident handling training & workshop

Conducting of the OSSTMM Professional Security Tester (OPST) Training

Training for developers and project managers on security risks in web applications (OWASP Top 10) with focus on PHP and XML

Training of the IT security manual for all IT employees with focus on operations and developers/devOps enriched with live hacking demos and practical examples

Workshop for developers on security risks in web applications with a brief introduction into the OWASP Top 10 and selected vulnerabilities to exploit themselves

Workshop for developers on security risks in web applications with a brief introduction to the OWASP Top 10 and training on selected vulnerabilities to exploit themselves

Realization of a two-part IT security workshop focusing on Cyber Security (aspects for Redteam and Blueteam based on the MITRE ATT&CK Framework) and Malware (evaluation of malware analyses for dangerous droppers, as well as methods for intelligent malware detection)

Incident response exercise (analysis of existing processes, definition of the roles to be part of the exercise, creation of the storybook, observation and evaluation of the all-day exercise with international participation, preparation of recommendations, various meetings)

Comprehensive security audit of a protected environment by means of physical social engineering, spear phishing, security scans & penetration tests and undercover hacking (ethical hacking) / Additional awareness training with live hacking for all employees and targeted training for technicians

Security awareness training for all employees (incl. hacking demonstration) with a focus on password security, malware and phishing

Training of developers in the field of web security

Security awareness training (incl. hacking demonstration) with a focus on malware and mobile devices

Security scan of multiple networks with presentation of the results and two workshops regarding an IT security awareness program and incident response / forensics readiness

Red teaming: Holistic attacker simulation with the goal of evaluating the implemented security measures of the customer

Security awareness training for all employees

Configuration review and workshop on the security of a Lotus Notes installation