Eric Conrad
FellowPresident at Backshore Communications
Specialities
Cyber Defense, Cybersecurity Leadership
SEC504: Hacker Tools, Techniques, and Incident Handling
SEC504Offensive Operations
SEC511: Cybersecurity Engineering: Advanced Threat Detection and Monitoring
SEC511Cyber Defense
- GIAC Continuous Monitoring Certification (GMON)
- 6 Days (Instructor-Led)
- 46 CPEs / 46 Hours (Self-Paced)
- Labs: 18 Hours of hands-on instruction
SEC542: Web App Penetration Testing and Ethical Hacking
SEC542Offensive Operations
- GIAC Web Application Penetration Tester (GWAPT)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 30 Hours of hands-on instruction
LDR414: SANS Training Program for CISSP® Certification
LDR414Cybersecurity Leadership
- GIAC Information Security Professional (GISP)
- 6 Days (Instructor-Led)
- 51 CPEs / 51 Hours (Self-Paced)
SEC530: Defensible Security Architecture and Engineering: Implementing Zero Trust for the Hybrid Enterprise
SEC530Cyber Defense
- GIAC Defensible Security Architecture (GDSA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 24 Hours of hands-on instruction
Virtual Events
Explore content featuring this instructor’s insights and expertise.
- Slide 1 of 3
Blind Data Exfiltration Using DNS and Burp Collaborator
DNS provides one of the best methods for command and control, covert tunneling, and blind data exfiltration. Burp Collaborator provides a great way to both confirm blind injection, and also exfiltrate data. Penetration testers may prepend names to each DNS request, allowing data exfiltration subject to DNS's length limitations (63 characters per label, 255 characters total name) and character limitations. This webcast will describe methods for blind data exfiltration using Burp Collaborator (using both public and private servers), as well as using DNS without Burp. Content directly from SEC542: Web App Penetration Testing and Ethical Hacking.
WebinarCyber Defense
- 12 Jan 2023
- 15:00 UTC
- Eric Conrad
- Slide 2 of 3
Threat Hunting via DeepBlueCLI v3
Every incident ends with a lessons learned meeting, and most executive summaries include this bullet point: "Leverage the tools you already paid for"Are you leveraging the tools you already paid for? Are you using the host-based firewall to block/alert when applications like PowerShell, PSExec, and WMIC attempt to make outbound connections from non-IT clients? Have you enabled AppLocker?
WebinarCyber Defense
- 29 Jun 2023
- 13:00 UTC
- Eric Conrad
- Slide 3 of 3
SANS Secure Your Fortress: Cutting-Edge Defense Techniques for 2024
Step into a world where cutting-edge defense meets practicality in cybersecurity! "SANS Secure Your Fortress" will teach you how to master the latest and most effective defense techniques. Whether you're a seasoned expert or just beginning your cyber journey, this event is for you.
WebinarCyber Defense- 1 Apr 2024
- 08:00 UTC
- John Hubbard, David Hoelzer, Matt Edmondson + 12 more