CyberCorps SFSCon 2018

CyberCorps SFSCon is an annual event that provides students in the CyberCorps Scholarship for Service program with networking opportunities, career advising, and lectures on various topics in cybersecurity. At the 2018 conference, talks included:

• Software Security & Malware Analysis
• Network & WiFi Security
• Cryptography and its Applications
• Security Operations Center and Incident Response
• Forensics
• Fundamentals of Penetration Testing

Carlos and Karanbir lectured on "Security Operations Center and Incident Response" for a six-hour session, covering SOC operations, blue team best practices, and guidelines like the MITRE ATT&CK Matrix and the Lockheed Martin Cyber Kill Chain. The latter part of the session was dedicated to a hands-on demo in which students:

• Performed initial installation and configuration of Splunk and IBM QRadar SIEM
• Learned basic investigation and search procedures for both platforms
• Searched for evidence of intrusion in a live demo environment.