Foundry 19

Oct 25 - Oct 29, 2021 : Online


Registration closes on 15 October, 2021

Interested international participants need to check their respective sponsored USG agency or DOE for participation

Network Archaeology

Using Mathematics and Information Theory, write decoding software for malware network protocols.

Class Information

3-day course + Collaborative Exercise
25 October, 2021 - 29 October, 2021

Host Forensics

Examine memory and disk forensic artifacts to find forensic artifacts.

Class Information

3-day course + Collaborative Exercise
25 October, 2021 - 29 October, 2021

Malware Analysis

Examine malicious software to discover capabilities, methods, and more.

Class Information

3-day course + Collaborative Exercise
25 October, 2021 - 29 October, 2021

Operational Technology

Learn the peculiarities of computers that interact with the physical environment.

Class Information

3-day course + Collaborative Exercise
25 October, 2021 - 29 October, 2021

Entry Point

An overview of everything. Start here if you're just getting into incident investigation!

Class Information

3-day course + Collaborative Exercise
25 October, 2021 - 29 October, 2021

Incident Coordination

How to manage incident response teams and communicate clearly and effectively to vested parties.

Class Information

3-day course + Collaborative Exercise
25 October, 2021 - 29 October, 2021

Schedule

Before Friday, October 22 2021

  • Pepare for Foundry with our checklist
  • You can find information about getting set up on our Mattermost chat server and how to configure your laptop here: online information.

Friday, October 22 2021

Time (US/Mountain) (UTC-06:00) Event
09:00 - 17:50 Laptop Configuration Help Text Chat
15:00 - 17:50 Laptop Configuration Help Video Chat

Monday, October 25 2021

Thursday, October 28 2021

Time (US/Mountain) (UTC-06:00) Event
08:30 Collaborative Exercise begins
12:00 Break / Networking (recommended)
13:30 Collaborative Exercise continues
17:00 Staff support ends

Friday, October 29 2021

Time (US/Mountain) (UTC-06:00) Event
08:30 Collaborative Exercise continues
08:30 Staff support resumes
11:30 Collaborative Exercise ends
11:30 Closing remarks
11:45 Questions and Answers
12:00 Event ends

Online Only

DOE will be hosting Cyber Fire Foundry virtually as an online-only event.

As the event approaches, this page will contain links to complete activities.

Connect to Cyber Fire Chat

The majority of Foundry communications, including class coordination and some instruction, will happen in the Cyber Fire Chat server. You will need a valid email address to create an account and sign in. Once you have created your account, you will be able to visit channels sent to you by your class instructor.

Create an account

The link to create a chat account was sent to the email address you used to register.

After creating an account

After you’ve set up your account, you can join the Help room to ask for help with getting to the right class channel, or any other issues you’re struggling with.

Connect to Town Square

Classes

Classes will start on Cyber Fire Chat. Your instructor should email you a link to your class channel, and staff will be standing by in the main chat area to help those with problems or questions.

Lectures and tutorials will take place using video teleconferencing. Your instructor will email a link to your class’s teleconference, and will also post the URL in your class channel.

Laptop Configuration

Collaborative Exercise

Each Collaborative Exercise category will have a chat channel dedicated to it. These channels will allow you to ask questions of Cyber Fire staff and interact with others working on the same Collaborative Exercise category.

If you would like to check if a question has already been answered, you can use the search function in the top right corner to look up keywords and jump to conversation segments related to your problem.

You can navigate between channels by clicking on different challenge names in the “Public Channels” section in the left side blue navigation panel.

For more detailed information, you can consult the Mattermost User Guide or Demo Video.

After Foundry, you will lose access to these channels, make sure to write down or otherwise save any information you would not like to be deleted.

Become a tool builder.

Cyber Fire Foundry guides you through creating custom solutions for investigating cybersecurity incidents.

Rather than teach recipes for yesterday’s problems, our veteran staff teaches you to create new custom solutions, so you can handle whatever arrives after you leave our event.

More about Foundry