Antisyphon Training Anticasts

Podcast audio-only versions of weekly webcasts from Antisyphon Training

Antisyphon Training Anticasts is a education podcast hosted by Antisyphon Training, with 14 episodes on record and a Required Pod Score of 80. PitchCentric scores this show on Booking Probability, Listen Score, and live audience signals refreshed every 24 hours.

Antisyphon Training hosts Antisyphon Training Anticasts, a education show with 14 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Episode #14

  Investigating Nix Endpoints for Incident Response - Patterson Cake

  May 30, 20261h 12m

  How many endpoint Operating Systems are there? SPOILER alert – the answer is two! 🛝 Webcast Slides - https://www.antisyphontraining.com/wp-content/uploads/2026/04/REI-Nix-042026.pdf Join Patterson Cake, Director of Incident Response at Black Hills Infosec, as he guides through his “rapid endpoint investigations” workflow for the “other” (not Windows) Operating System…*Nix (Linux/Mac). We’ll learn how to select, acquire, and analyze Linux and Mac investigative artifacts, using Velociraptor offline collector, CatScale, and UAC scripts. Windows gets a lot of attention and rightfully so! However, Linux and Mac are part of every enterprise ecosystem and represent a critical attack surface. You need a simple, effective, repeatable plan for investigating these endpoints. Chapters (00:00) - Intro - Investigating Nix Endpoints for Incident Response - Patterson Cake (00:31) - April is the cruelest month (02:24) - AGENDA (04:21) - ENDPOINT & IDENTITY (04:59) - ENDPOINT = ? (07:11) - OS = Windows vs Linux vs Mac? (08:48) - Linux “Use Cases” (10:29) - Endpoint Investigations: Linux (12:45) - Rapid Endpoint Investigations: Linux (13:37) - THREAT-ACTOR SOP* (17:15) - ENDPOINT ATTACK SURFACE (18:58) - RAPID TRIAGE WORKFLOW (20:07) - Linux Artifacts (22:14) - COLLECT...PARSE...REDUCE/REFINE (23:22) - COLLECT ARTIFACTS (27:02) - ANALYSIS WORKFLOW (27:49) - OUTPUT REVIEW (32:40) - Other = Mac (Business Desktops 10%) (34:35) - Mac “Threat-Actor SoP” (36:37) - Mac Artifacts (40:07) - Mac UAC Execution (41:55) - Mac Artificats (again) (50:30) - ENDPOINT & IDENTITY - Mac (52:32) - Resources (53:52) - Q&A Credits Creators & Guests Patterson Cake - Guest Zach Hill - Host Ryan Poirier - Producer Chat with your fellow attendees in the BHIS Discord server: https://discord.gg/bhis in the #🔴live-chat channel 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com Click here to watch a video of this episode. Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com Click here to view the episode transcript.

  ListenShow Notes
• 

  Episode #14

  Investigating Nix Endpoints for Incident Response - Patterson Cake

  May 30, 20261h 12m

  How many endpoint Operating Systems are there? SPOILER alert – the answer is two! Webcast Slides - https://www.antisyphontraining.com/wp-content/uploads/2026/04/REI-Nix-042026.pdf Join Patterson Cake, Director of Incident Response at Black Hills Infosec, as he guides through his “rapid endpoint investigations” workflow for the “other” (not Windows) Operating System…*Nix (Linux/Mac). We’ll learn how to select, acquire, and analyze Linux and Mac investigative artifacts, using Velociraptor offline collector, CatScale, and UAC scripts. Windows gets a lot of attention and rightfully so! However, Linux and Mac are part of every enterprise ecosystem and represent a critical attack surface. You need a simple, effective, repeatable plan for investigating these endpoints. Chapters (00:00) - Intro - Investigating Nix Endpoints for Incident Response - Patterson Cake (00:31) - April is the cruelest month (02:24) - AGENDA (04:21) - ENDPOINT & IDENTITY (04:59) - ENDPOINT = ? (07:11) - OS = Windows vs Linux vs Mac? (08:48) - Linux “Use Cases” (10:29) - Endpoint Investigations: Linux (12:45) - Rapid Endpoint Investigations: Linux (13:37) - THREAT-ACTOR SOP* (17:15) - ENDPOINT ATTACK SURFACE (18:58) - RAPID TRIAGE WORKFLOW (20:07) - Linux Artifacts (22:14) - COLLECT...PARSE...REDUCE/REFINE (23:22) - COLLECT ARTIFACTS (27:02) - ANALYSIS WORKFLOW (27:49) - OUTPUT REVIEW (32:40) - Other = Mac (Business Desktops 10%) (34:35) - Mac “Threat-Actor SoP” (36:37) - Mac Artifacts (40:07) - Mac UAC Execution (41:55) - Mac Artificats (again) (50:30) - ENDPOINT & IDENTITY - Mac (52:32) - Resources (53:52) - Q&A Credits Creators & Guests Patterson Cake - Guest Zach Hill - Host Ryan Poirier - Producer Chat with your fellow attendees in the BHIS Discord server: https://discord.gg/bhis in the #live-chat channel Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com Click here to watch a video of this episode. Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com Click here to view the episode transcript.

  ListenShow Notes
• 

  Episode #13

  Turn Ideas into Code with GitHub Copilot with Carrie Roberts

  May 8, 20261h 9m

  What if you could build tools, automate tasks, and write real code without ever having called yourself a developer? Join us for a free one-hour training session with instructor Carrie Roberts, Developer and InfoSec Engineer, as she teaches you how GitHub Copilot is changing what it means to "know how to code" and show you how to put it to work in your browser right now, with no setup required. You'll learn how to use Copilot to generate, debug, and refactor code through hands-on demos, including how to assign tasks directly from GitHub without ever opening an editor, so you can start building things that actually work faster than you ever thought possible. 📚 Train with Carrie Roberts https://www.antisyphontraining.com/product/powershell-for-infosec-what-you-need-to-know-with-carrie-roberts/ Chapters (00:00) - Introduction & What is GitHub Copilot (05:06) - How Copilot Works (Concept + Setup) (11:16) - Prompting Strategies for Better Results (15:38) - Turning Ideas into Code (Workflow) (23:42) - Debugging, Limitations & Security (36:00) - Q&A Credits Creators & Guests Ryan Poirier - Producer Carrie Roberts - Guest Chat with your fellow attendees in the BHIS Discord server: https://discord.gg/bhis in the #🔴live-chat channel 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com Click here to watch a video of this episode. Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com Click here to view the episode transcript.

  ListenShow Notes
• 

  Episode #12

  The Absolute Truths of Cybersecurity with Doc Blackburn

  May 1, 20261h 6m

  🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com DANGER AHEAD. In this bold, no-nonsense talk, instructor Doc Blackburn will reveal the Absolute Truths of Cybersecurity, hard realities that challenge everything you think you know about “being secure.” 🛝 Webcast Slides - https://www.antisyphontraining.com/wp-content/uploads/2026/04/Absolute-Truths.pdf Join us for a free one-hour training session to learn why security isn’t a product, why prevention is a fantasy, why encryption fixes almost nothing, and why your biggest risk might be you. You'll learn to see your role differently — not as a gatekeeper, but as a mission-enabler, risk translator, and resilience builder. This Anti-Cast isn’t about firewalls or frameworks. It’s a total reset on how we view cybersecurity. Chapters (00:00) - Intro - The Absolute Truths of Cybersecurity with Doc Blackburn (03:28) - Vera's Origin Story (08:08) - Learning Security? (09:57) - Security isn’t what you do! (11:06) - 14 Truths of Cybersecurity (12:48) - Truth #1: There is no such thing as security, only varying degrees of insecurity. (15:15) - Truth #2: The network doesn't exist to be secured. (21:18) - Truth #3: When security gets in the way of the mission – Security is wrong, not the mission (22:43) - Truth #4: Prevention is ideal – Detection is a must. Detection without response is useless (28:32) - Truth #5: Security must always be driven by business need (30:53) - Truth #6: Security is a cost center, not a profit center (33:52) - Truth #7: Security is a process… not a product (35:47) - Truth #8: You cannot process encrypted data… EVER (38:31) - Truth #9: All good security is custom-fit Compliance does not equal security (44:17) - Truth #10: In security, the most dangerous thing in the world is what you think you know. (47:02) - Truth #11: You cannot secure what you do not control (49:37) - Truth #12: You cannot prevent what you allow (50:50) - Truth #13: Security is, first and foremost, a people issue (53:13) - Truth #14: Some things cannot be fixed They are simply reality (59:00) - WORKSHOP: How to think like a Cybersecurity Defender Credits Creators & Guests Ryan Poirier - Producer Doc Blackburn - Guest Bronwen Aker - Guest Mark Williams - Guest Chat with your fellow attendees in the BHIS Discord server: https://discord.gg/bhis in the #🔴live-chat channel 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com Click here to watch a video of this episode. Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com Click here to view the episode transcript.

  ListenShow Notes
• 

  Episode #11

  How to Write SOC Tickets That Build Trust and Drive Action w/ Dan Rearden

  Apr 2, 20261h 1m

  What does the ideal SOC ticket look like? 🛝 Webcast Slides - https://www.antisyphontraining.com/wp-content/uploads/2026/03/How-to-Write-SOC-Tickets-That-Build-Trust-and-Drive-Action.pdf Technical skills matter, but clear communication is just as important. Join SOC Analyst Dan Rearden for a free one-hour Antisyphon Anti-cast on using soft skills to level up your tickets. Learn how to make alerts clear, findings impactful, and documentation useful now and later. Chapters (00:00) - Intro- How to Write SOC Tickets That Build Trust and Drive Action - Dan Rearden (01:42) - About Dan Rearden (03:16) - On Call at 2AM... (05:05) - Beyond the Terminal (06:11) - Talking to Humans (09:00) - Reboot Your Vocabulary (14:33) - Plain Text Protocol (19:43) - Peer To Peer (24:33) - The Client Session (25:55) - The Client Session (28:02) - Hotfix today (31:42) - Final System Check (34:21) - Q&A Credits Creators & Guests Meagan Bentley - Producer CJ Cox - Guest Ryan Poirier - Producer Dan Rearden (Haircutfish) - Guest Chat with your fellow attendees in the BHIS Discord server: https://discord.gg/bhis in the #🔴live-chat channel 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com Click here to watch a video of this episode. Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com Click here to view the episode transcript.

  ListenShow Notes

Recent guests on Antisyphon Training Anticasts. Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.