References

Workshop on IT security topics (network segmentation, firewall, WAF, PKI, Office365, Azure)

Secure web development training and draft of a coding guideline for internal developers

Workshop & Coaching on IT security topics

Training and workshop regarding CA-infrastructure and certificates as well as IPsec

Awareness trainings for IT managers and simulation of a phishing campaign over 30 companies

Presentation and live hacking with focus on APT and social engineering

Full technical security audit of the entire IT infrastructure; In internal and external audits, security vulnerabilities and possible entry points from various attack scenarios were assessed. The customer's services were audited and attacks were simulated from their customers’ point of view. The awareness of the employees was increased through training

Security awareness training for all employees (incl. hacking demonstration) with a focus phishing and malware/ransomware

In a two 3-day workshop, a Swiss energy company were trained in IT forensics readiness. Starting with theoretical aspects at management level (threats with a high probability of occurrence), the creation of an incident response policy, the exact procedure for a forensic data backup and an applied exercise case, several topics were dealt by Oneconsult specialists with approx. 12 participants

Incident handling training & workshop

Conducting of the OSSTMM Professional Security Tester (OPST) Training

Training for developers and project managers on security risks in web applications (OWASP Top 10) with focus on PHP and XML

Training of the IT security manual for all IT employees with focus on operations and developers/devOps enriched with live hacking demos and practical examples

Workshop for developers on security risks in web applications with a brief introduction into the OWASP Top 10 and selected vulnerabilities to exploit themselves

Workshop for developers on security risks in web applications with a brief introduction to the OWASP Top 10 and training on selected vulnerabilities to exploit themselves

Realization of a two-part IT security workshop focusing on Cyber Security (aspects for Redteam and Blueteam based on the MITRE ATT&CK Framework) and Malware (evaluation of malware analyses for dangerous droppers, as well as methods for intelligent malware detection)

Incident response exercise (analysis of existing processes, definition of the roles to be part of the exercise, creation of the storybook, observation and evaluation of the all-day exercise with international participation, preparation of recommendations, various meetings)

Comprehensive security audit of a protected environment by means of physical social engineering, spear phishing, security scans & penetration tests and undercover hacking (ethical hacking) / Additional awareness training with live hacking for all employees and targeted training for technicians

Security awareness training for all employees (incl. hacking demonstration) with a focus on password security, malware and phishing

Training of developers in the field of web security