BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Active Countermeasures - ECPv6.17.1//NONSGML v1.0//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Active Countermeasures
X-ORIGINAL-URL:https://www.activecountermeasures.com
X-WR-CALDESC:Events for Active Countermeasures
REFRESH-INTERVAL;VALUE=DURATION:PT1H
X-Robots-Tag:noindex
X-PUBLISHED-TTL:PT1H
BEGIN:VTIMEZONE
TZID:America/New_York
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20240310T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20241103T060000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20250309T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20251102T060000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20260308T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20261101T060000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20270314T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20271107T060000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;TZID=America/New_York:20260109T130000
DTEND;TZID=America/New_York:20260109T140000
DTSTAMP:20260106T200646Z
CREATED:20251202T200929Z
LAST-MODIFIED:20260106T200646Z
UID:16263-1767963600-1767967200@www.activecountermeasures.com
SUMMARY:Command & Convo - The C2 Webcast - Episode 6: Velociraptor as C2
DESCRIPTION:We welcome you to join us for our monthly webcast series where we will have open discussions about command and control\, malwares\, and expand upon our Malware of the Day blog posts. \nThis is an interactive webcast to include comments and questions from attendees so you can be part of this too! NEW CHAT LOCATION: Join the Black Hills Infosec Discord to interact during the webcast in the #live-chat channel here: https://discord.com/invite/BHIS \nIn Episode 6 we examine how threat actors can misuse the legitimate remote DFIR tool\, Velociraptor\, to establish C2 capabilities. \n  \nRegister Here\n  \n  \nP.S. You are also welcome to join us up to 30 minutes early for pre-show banter! \nKeith ChewKeith’s appreciation for computing and processes originates from working with his first personal computer in 1982\, a TI-99/4A. Keith sees himself as fortunate for the opportunity to apply his passion towards a career that assists in the advance of technology and continuing education. \nShare this:
URL:https://www.activecountermeasures.com/event/command-convo-the-c2-webcast-episode-6-velociraptor-as-c2/
LOCATION:Zoom
CATEGORIES:Faan Rossouw,Keith Chew,Virtual Event,Webcasts
ATTACH;FMTTYPE=image/png:https://www.activecountermeasures.com/wp-content/uploads/2025/12/command-and-convo-the-c2-webcast-episode-06-velociraptor-as-C2-800.png
END:VEVENT
BEGIN:VEVENT
DTSTART;TZID=America/New_York:20251212T130000
DTEND;TZID=America/New_York:20251212T140000
DTSTAMP:20251202T200850Z
CREATED:20251202T200850Z
LAST-MODIFIED:20251202T200850Z
UID:16260-1765544400-1765548000@www.activecountermeasures.com
SUMMARY:Command & Convo - The C2 Webcast - Episode 5: Tunneled C2 Communication with Ligolo-ng
DESCRIPTION:We welcome you to join us for our monthly webcast series where we will have open and casual discussions about command and control\, malwares\, and expand upon our Malware of the Day blog posts. \nThis is an interactive webcast to include comments and questions from attendees so you can be part of this too! Join the Threat Hunter Community Discord to interact during the webcast in the #live-webcast-chat channel here: https://discord.gg/threathunter \nIn Episode 5 we focus on how threat actors use tunneling tools (Ligolo-ng) to pivot their C2 communication across an internal network. \n  \nRegister Here\n  \n  \nP.S. You are also welcome to join us up to 30 minutes early for pre-show banter! \nKeith ChewKeith’s appreciation for computing and processes originates from working with his first personal computer in 1982\, a TI-99/4A. Keith sees himself as fortunate for the opportunity to apply his passion towards a career that assists in the advance of technology and continuing education. \nShare this:
URL:https://www.activecountermeasures.com/event/command-convo-the-c2-webcast-episode-5-tunneled-c2-communication-with-ligolo-ng/
LOCATION:Zoom
CATEGORIES:Faan Rossouw,Keith Chew,Virtual Event,Webcasts
ATTACH;FMTTYPE=image/png:https://www.activecountermeasures.com/wp-content/uploads/2025/12/command-and-convo-the-c2-webcast-episode-05-tunneled-C2-communication-with-ligolo-ng-800.png
END:VEVENT
BEGIN:VEVENT
DTSTART;TZID=America/New_York:20251121T130000
DTEND;TZID=America/New_York:20251121T140000
DTSTAMP:20251111T180158Z
CREATED:20251111T180158Z
LAST-MODIFIED:20251111T180158Z
UID:16242-1763730000-1763733600@www.activecountermeasures.com
SUMMARY:Command & Convo - The C2 Webcast - Episode 4: Building Your Own Threat Hunting Home Lab
DESCRIPTION:We welcome you to join us for our monthly webcast series where we will have open and casual discussions about command and control\, malwares\, and expand upon our Malware of the Day blog posts. \nJoin us for this Episode 4 webcast\, where we’ll show you how to set up your own Threat Hunting lab at home. You’ll learn how to create a vulnerable host and run a simulated compromise using Sliver C2. We’ll then set up and configure Zeek and Sysmon for monitoring\, and use RITA for behavioral network analysis. This webcast will empower you to run your own network compromises and threat hunts at home\, allowing you to develop hands-on skills and gain practical experience. \nThis is an interactive webcast to include input\, comments and questions from attendees so you can be part of this too! You are welcome to join the Threat Hunter Discord to be part of the webcast in the #live-webcast-chat channel here: https://discord.gg/threathunter \n  \nRegister Here\n  \n  \nP.S. You are also welcome to join us up to 30 minutes early for pre-show banter! \nKeith ChewKeith’s appreciation for computing and processes originates from working with his first personal computer in 1982\, a TI-99/4A. Keith sees himself as fortunate for the opportunity to apply his passion towards a career that assists in the advance of technology and continuing education. \nShare this:
URL:https://www.activecountermeasures.com/event/command-convo-the-c2-webcast-episode-4-building-your-own-threat-hunting-home-lab/
LOCATION:Zoom
CATEGORIES:Faan Rossouw,Keith Chew,Virtual Event,Webcasts
ATTACH;FMTTYPE=image/png:https://www.activecountermeasures.com/wp-content/uploads/2025/11/command-and-convo-the-c2-webcast-episode-04-building-your-own-threat-hunting-home-lab-800.png
END:VEVENT
BEGIN:VEVENT
DTSTART;TZID=America/New_York:20251024T130000
DTEND;TZID=America/New_York:20251024T140000
DTSTAMP:20251017T192836Z
CREATED:20251017T192836Z
LAST-MODIFIED:20251017T192836Z
UID:16207-1761310800-1761314400@www.activecountermeasures.com
SUMMARY:Command & Convo – The C2 Webcast – Episode 3: DNS Tunneling (dnscat2)
DESCRIPTION:We welcome you to join us for our monthly webcast series where we will have open and casual discussions about command and control\, malwares\, and expand upon our Malware of the Day blog posts. \nThis is an interactive webcast to include input\, comments and questions from attendees so you can be part of this too! You are welcome to join the Threat Hunter Discord to be part of the webcast in the #live-webcast-chat channel here: https://discord.gg/threathunter \nIn this Episode 3\, we will explore DNS Tunneling and the dnscat2 DNS tunnel – we hope to see you there! \n  \nRegister Here\n  \n  \nP.S. You are also welcome to join us up to 30 minutes early for pre-show banter! \nKeith ChewKeith’s appreciation for computing and processes originates from working with his first personal computer in 1982\, a TI-99/4A. Keith sees himself as fortunate for the opportunity to apply his passion towards a career that assists in the advance of technology and continuing education. \nShare this:
URL:https://www.activecountermeasures.com/event/command-convo-the-c2-webcast-episode-3-dns-tunneling-dnscat2/
LOCATION:Zoom
CATEGORIES:Faan Rossouw,Keith Chew,Virtual Event,Webcasts
ATTACH;FMTTYPE=image/png:https://www.activecountermeasures.com/wp-content/uploads/2025/10/command-and-convo-the-c2-webcast-episode-03-dns-tunneling-dnscat2-800.png
END:VEVENT
BEGIN:VEVENT
DTSTART;TZID=America/New_York:20250926T130000
DTEND;TZID=America/New_York:20250926T140000
DTSTAMP:20251017T192028Z
CREATED:20250922T182420Z
LAST-MODIFIED:20251017T192028Z
UID:16163-1758891600-1758895200@www.activecountermeasures.com
SUMMARY:Command & Convo - The C2 Webcast - Episode 2: Merlin and Data Jitter
DESCRIPTION:We welcome you to join us for our monthly webcast series where we will have open and casual discussions about command and control\, malwares\, and expand upon our Malware of the Day blog posts. \nThis is an interactive webcast to include input\, comments and questions from attendees so you can be part of this too! You are welcome to join the Threat Hunter Discord to be part of the webcast in the #live-webcast-chat channel here: https://discord.gg/threathunter \nIn this Episode 2\, we will discuss the Merlin command and control framework and data jitter\, and we hope to see you there! \n  \nRegister Here\n  \n  \nP.S. You are also welcome to join us up to 30 minutes early for pre-show banter! \nKeith ChewKeith’s appreciation for computing and processes originates from working with his first personal computer in 1982\, a TI-99/4A. Keith sees himself as fortunate for the opportunity to apply his passion towards a career that assists in the advance of technology and continuing education. \nShare this:
URL:https://www.activecountermeasures.com/event/command-convo-the-c2-webcast-episode-2-merlin-and-data-jitter/
LOCATION:Zoom
CATEGORIES:Faan Rossouw,Keith Chew,Virtual Event,Webcasts
ATTACH;FMTTYPE=image/png:https://www.activecountermeasures.com/wp-content/uploads/2025/09/command-and-convo-the-c2-webcast-episode-02-merlin-and-data-jitter-800.png
END:VEVENT
BEGIN:VEVENT
DTSTART;TZID=America/New_York:20250815T130000
DTEND;TZID=America/New_York:20250815T140000
DTSTAMP:20251017T191936Z
CREATED:20250811T201117Z
LAST-MODIFIED:20251017T191936Z
UID:15932-1755262800-1755266400@www.activecountermeasures.com
SUMMARY:Command & Convo - The C2 Webcast - Episode 1: Fiesta
DESCRIPTION:We welcome you to join us for our new monthly webcast series where we will have open and casual discussions about command and control\, malwares\, and expand upon our Malware of the Day blog posts. \nThis is an interactive webcast to include input\, comments and questions from attendees so you can be part of this too! You are welcome to join the Threat Hunter Discord to be part of the webcast in the #live-webcast-chat channel here: https://discord.gg/threathunter \nIn this Episode 1\, we will discuss the Fiesta malware command and control and we hope to see you there! \n  \nRegister Here\n  \n  \nP.S. You are also welcome to join us up to 30 minutes early for pre-show banter! \nKeith ChewKeith’s appreciation for computing and processes originates from working with his first personal computer in 1982\, a TI-99/4A. Keith sees himself as fortunate for the opportunity to apply his passion towards a career that assists in the advance of technology and continuing education. \nShare this:
URL:https://www.activecountermeasures.com/event/command-convo-the-c2-webcast-episode-1-fiesta/
LOCATION:Zoom
CATEGORIES:Faan Rossouw,Keith Chew,Virtual Event,Webcasts
ATTACH;FMTTYPE=image/png:https://www.activecountermeasures.com/wp-content/uploads/2025/08/command-and-convo-the-c2-webcast-episode-01-fiesta-800.png
END:VEVENT
END:VCALENDAR