An awesome list of resources for training, conferences, speaking, labs, reading, etc that are free all the time or during COVID-19 that cybersecurity professionals with downtime can take advantage of to improve their skills and marketability to come out on the other side ready to rock.

CATEGORIES

1. CONFERENCES
2. TRAINING
3. INSTRUCTOR LED WEBINAR/LABS/WORKSHOPS
4. BOOKS

Conferences

• GRIMMCON April 14 - 2 tracks - top tier infosec professionals talking https://www.grimm-co.com/grimmcon

• InfosecOasis - April 18, 2020 - (FROM CON Page) InfoSecOASIS is a free, online information security conference. We wanted to create a space to participate in the social aspects of conferences, all while respecting the guidelines for social distancing. While VR is highly recommended, it is not required to use AltspaceVR (our platform of choice). https://infosecoasis.com/

• IsolationCon - 19TH APRIL (14:00 UTC, 10AM EST) - We are not just another infosec con; our vision is to be the online conference for information security people from all teams and different backgrounds all over the world. We actively want to encourage collaboration and participation. We want our Attendees and Speakers to be immersed in this online event, with activities and debates around the challenges we all face in our working and personal lives, and how they are adapting to the current situation we all face. https://themanyhats.club/the-many-hats-club-presents-isolationcon/

• RedHat Summit - April 28-29 - "Our virtual event will feature the keynotes, breakout sessions, and collaboration opportunities that you’ve come to expect from Red Hat® Summit. This programming will be shared as a blend of live and recorded content designed to inspire and engage a global audience. You will have access to the experts behind the code as you learn about the latest in open hybrid cloud, automation, cloud-native development, and so, so much more. Red Hat Summit 2020 Virtual Experience is your platform to learn, network, and plot the next steps in your career as you find ways to unlock your potential." - https://www.redhat.com/en/summit

• FWD:CLOUDSEC June 29 - a new cloud security practitioners conference which will be held online - https://fwdcloudsec.org/

• RSAC 2020 APJ July 15 – 17 "Transforming RSA Conference 2020 Asia Pacific & Japan into a free virtual learning experience, taking place 15 – 17 July. We have many exciting and relevant sessions and keynotes planned, featuring some of the world’s leading cybersecurity experts." https://go.rsaconference.com/rsac-apj2020/

Training

1. Pluralsight Free for April 2020. Massive top tier library of content including lots of cyber training www.pluralsight.com

2. EC-Council Hacking "Per vendor: Use our Free Resource Pass to a wide range of online cybersecurity resources." https://www.eccouncil.org/free-cybersecurity-resources/

3. Metasploit Unleashed Most complete and in-depth Metasploit guide available, with contributions from the authors of the No Starch Press Metasploit Book. https://www.offensive-security.com/metasploit-unleashed/

4. AWS Cloud Certified Get skills in AWS to be more marketable. Training is quality and free. https://www.youtube.com/watch?v=3hLmDS179YE Have to create an AWS account, Exam is $100.

5. SANS Faculty Free Tools List of OSS developed by SANS staff. https://www.sans.org/media/free/free-faculty-tools.pdf?msc=sans-free-lp

6. "Using ATT&CK for Cyber Threat Intelligence Training" - 4 hour training The goal of this training is for students to understand the following: at: https://attack.mitre.org/resources/training/cti/

   • What ATT&CK is and why it’s useful for cyber threat intelligence (CTI)
   • How to map to ATT&CK from both finished reporting and raw data
   • Why it’s challenging to store ATT&CK-mapped data and what you should consider when doing that
   • How to perform CTI analysis using ATT&CK-mapped data
   • How to make defensive recommendations based on CTI analysis

7. Coursera -"Coursera Together: Free online learning during COVID-19" Lots of different types of free training. https://blog.coursera.org/coursera-together-free-online-learning-during-covid-19/

8. Fortinet Security Appliance Training Free access to the FortiGate Essentials Training Course and Network Security Expert courses 1 and 2 https://www.fortinet.com/training/cybersecurity-professionals.html

9. Chief Information Security Officer (CISO) Workshop Training - The Chief Information Security Office (CISO) workshop contains a collection of security learnings, principles, and recommendations for modernizing security in your organization. This training workshop is a combination of experiences from Microsoft security teams and learnings from customers. - https://docs.microsoft.com/en-us/security/ciso-workshop/ciso-workshop

10. CLARK Center Plan C - Free cybersecurity curriculum that is primarily video-based or provide online assignments that can be easily integrated into a virtual learning environments https://clark.center/home

11. Hack.me is a FREE, community based project powered by eLearnSecurity. The community can build, host and share vulnerable web application code for educational and research purposes. It aims to be the largest collection of "runnable" vulnerable web applications, code samples and CMS's online. The platform is available without any restriction to any party interested in Web Application Security. https://hack.me/

12. Hacker101 - Free classes for web security - https://www.hacker101.com/

13. ElasticStack - Free on-demand Elastic Stack, observability, and security courses. https://training.elastic.co/learn-from-home

14. Hoppers Roppers - Community built around a series of free courses that provide training to beginners in the security field. https://www.hoppersroppers.org/training.html

15. IBM Security Learning Academy Free technical training for IBM Security products. https://www.securitylearningacademy.com/

16. M.E. Kabay Free industry courses and course materials for students, teachers and others are welcome to use for free courses and lectures. http://www.mekabay.com/courses/index.htm

17. Open P-TECH Free digital learning on the tech skills of tomorrow. https://www.ptech.org/open-p-tech/

18. Autopsy Digital Forensics - FREE ($495 value) Autopsy is a Windows-based desktop digital forensics tool that is free, open source, and has all of the features that you’d normally find in commercial digital forensics tools. It is extensible and comes with features that include keyword search, hash matching, registry analysis, web analytics, and more. https://www.autopsy.com/support/training/covid-19-free-autopsy-training/

19. Udemy - Online learning course platform "collection from the free courses in our learning marketplace" https://www.udemy.com/courses/free/

20. Security+ Training CompTIA Security+ (SY0-501) Complete Video Course is an engaging self-paced video training solution that provides learners with more than 19 hours of personal training from security expert Sari Greene. https://pearsonadvance.com/courses/comptia-security-sy0-501/

21. Linux Fundamentals Linux Fundamentals LiveLessons has more than 10 hours of comprehensive video training for you to have everything you need to build a strong understanding of working with Linux. https://pearsonadvance.com/courses/linux-fundamentals/

22. AWS Certified Cloud Practitioner Seven hours of video instruction covering the fundamentals of cloud computing; AWS core services such as Amazon EC2, Amazon RDS, and Amazon S3; security; architecture design principles; best practices; and cost management.AWS Certified Cloud Practitioner Complete Video Course is a video product designed to help viewers understand Amazon Web Services at a high level, introduce cloud computing concepts, and key AWS services, and prepare them for the exam according to the certification exam guide published by Amazon Web Services. https://pearsonadvance.com/courses/aws-certified-cloud-practitioner/

23. Enroll Now Free: PCAP Programming Essentials in Python https://www.netacad.com/virtual/pcap-programming-essentials-pythonPython is the very versatile, object-oriented programming language used by startups and tech giants, Google, Facebook, Dropbox and IBM. Python is also recommended for aspiring young developers who are interested in pursuing careers in Security, Networking and Internet-of-Things. Once you complete this course, you are ready to take the PCAP – Certified Associate in Python programming. No prior knowledge of programming is required.

24. Packt Web Development Course Web Development Get to grips with the fundamentals of the modern web Unlock one year of free online access. https://courses.packtpub.com/pages/free?fbclid=IwAR1FtKQcYK8ycCmBMXaBGvW_7SgPVDMKMaRVwXYcSbiwvMfp75gazxRZlzY

25. Learn Empire Powershell This Tutorial contains installation of Kali Linux and Windows VM, Installation of Empire PowerShell 3.1,Exploiting Windows 10 machines by various attacks including Empire,Running Mimikatz, Privelege Escalation & Using Hashcat to crack the various password hashes https://pentestskills.teachable.com/p/empire-powershell

Instructor Led Webinar/ Labs / Workshops

April

• Active Defense & Cyber Deception Training - Blackhills Information Security - Thursday, April 9th, 12pm – 4pm EST || This free class will be about 4-hours long with hands-on labs. It’s the first half of the first day of the training class normally taught at Wild West Hackin’ Fest. https://www.blackhillsinfosec.com/training/active-defense-cyber-deception-training/

• SANS SEC573! More Python3! More Pywars! with Mark Baggett | April 13 @ 3:30pm EDT (19:30:00 UTC) https://www.sans.org/webcasts/atmic-talk-check-sec573-python3-pywars-114075

• SANS Successful Infosec Consulting, Getting Clients Deep Dive with Ted Demopoulos | April 13 @ 8:30pm EDT (00:30:00 UTC) https://www.sans.org/webcasts/cybercast-sansatmic-successful-infosec-consulting-clients-deep-dive-113920

• SANS Take Back the Advantage – Cyber Deception for the Win! with Kevin Fiscus | April 15 @ 3:30pm EDT (19:30:00 UTC) https://www.sans.org/webcasts/atmic-talk-advantage-cyber-deception-win-114300

• SANS C2 Matrix with Jorge Orchilles | April 15 @ 8:30pm EDT (00:30:00 UTC) https://www.sans.org/webcasts/cybercast-sansatmic-c2-matrix-114070

• Breaching the Cloud Perimeter Training w/ Labs (4-Hours) - Blackhills Information Security - Saturday, April 25th, 11am – 4pm EST- You will leave this workshop with new skills for assessing cloud-based infrastructure! https://register.gotowebinar.com/register/1264630092013493773

• Active Defense & Cyber Deception Training (w/John Strand) - Blackhills Information Security - Tuesday, April 28th, 12pm – 4pm EST | Wednesday, April 29th, 12pm – 4pm EST | Thursday, April 30th, 12pm – 4pm EST -- In this class, you will learn how to force an attacker to take more moves to attack your network. These moves may increase your ability to detect them. You will learn how to gain better attribution as to who is attacking you and why. You will also find out how to get access to a bad guy’s system. And most importantly, you will find out how to do the above legally. [URL PENDING]

• How to Build a Home Lab - Apr 16, 2020 1:00 PM EDT "joint webcast between Black Hills Information Security & Active Countermeasures. We'll show you why and how to build a home lab so you can build and practice new skills before deploying elsewhere." Register: https://lnkd.in/dV5KbGj

May

• Cyber Threat Hunting Training – May Session (4-Hours) - Blackhills Information Security - Tuesday, May 12th, 12pm – 4pm EST -- In this free, one-day course, we will cover how to leverage network data to perform a cyber threat hunt. The course includes hands-on labs using packet captures of various command and control channels. The labs will enable you to apply what you’ve learned using various open-source tools. https://register.gotowebinar.com/register/5841228496128209677

Books

• Building Secure & Reliable Systems Best Practices for Designing, Implementing and Maintaining Systems (O'Reilly) By Heather Adkins, Betsy Beyer, Paul Blankinship, Ana Oprea, Piotr Lewandowski, Adam Stubblefield https://static.googleusercontent.com/media/landing.google.com/en//sre/static/pdf/SRS.pdf

• Security Engineering By Ross Anderson - A guide to building dependable distributed systems. (and Ross Anderson is brilliant //OP editorial) https://www.cl.cam.ac.uk/~rja14/book.html