OK, welcome everyone to master class.
On this day.
December 8th.
2022 glad to have everybody here. Welcome. Welcome. I think
you should have a fun time hearing everybody and talk about
their skills and the things that they're really great at doing.
We love listening to it some of its time. You know, IT related
some of its business are related, but we love hearing it
because it helps us learn, adjust a little more. I think
we'll start with the April. She's got 30 minutes on the
clock for this meeting and then Eduardo and Devin will be after
that.
Are you ready, April?
I am ready.
Can you hear me OK?
Yes, we can.
Yep.
Let me share my screen.
Everyone see that, OK.
Yes.
Yep.
Yes.
Alright.
Tonight I'll be showing you how to build an analytics dashboard.
And data visualization and business intelligence tools are
software applications that allow businesses to gather, analyze
and visualize data to create interactive reports.
Simplify decision making and generate actionable business
insights.
Organizations have a lot to choose from as far as you know,
different business intelligence and data visualization tools.
Examples of popular ones include Tableau, Microsoft Power BI,
click and data box.
So I'll be demonstrating Microsoft Power BI for you all.
First, what is Microsoft Power BI and why would you want to use
it? Will Power BI is more than just the single application
instead? Is it a collection of software consisting of three
essential elements? You have the Windows application called Power
BI desktop. You've got an online service called Power BI service
and Power BI mobile app for phones and tablets. Two
additional features are power BI report builder for creating
paginated reports and Power BI report server.
For on premises reporting.
The power BI seamlessly integrates with Excel,
PowerPoint, SharePoint and teams, so it's really good for
organizations that are already using Windows applications.
In addition, Power BI includes over 500 prebuilt and custom
data connectors, allowing you to access data from multiple
unrelated sources, whether on premises are in the cloud.
And Power BI also has built in AI capabilities such as natural
language queries and AI powered insights, so Microsoft Power BI
is a powerful tool for creating data visualizations and business
intelligence.
This is an example of a standard workflow in Power BI that begins
by connecting to data sources and power BI desktop and ends by
sharing with end users so they can use the power BI service and
mobile apps to view and interact with your report.
This workflow shows how the three main power BI elements
work together.
I'll walk you through each step of this workflow and show you
how to access, clean, joint, explore and visualize the data
set and power BI desktop. Lastly, I'll show you how to
optimize reports for reviewing and the power BI mobile app and
share them using the power BI service.
Before diving into the demonstration, I wanted to
provide some background on the data I'll be using for the demo.
I tried to measure gender imbalance in the film industry
using the bestial test. The Vestal test originated from a
comic strip written in 1985 by cartoonist Alison Bechdel, and
has been used as a litmus test to measure Hollywood's gender
bias.
Next time you're watching a movie, you can perform your own
vegetable test by asking yourself three questions. First,
does the film have at least two named women? Second, do those
women talk to each other? And 3rd, do they speak to each other
about something other than a band?
I collected data from the Bechtel test movie list, the
number site and 5:38 to visualize during this
demonstration.
And here you can see a copy of the original comment strip
written by Bechtel.
So now I'll be switching over to Power BI for the demonstration
portion of my presentation.
Our first step is to open power BI desktop. Already had it
opened cause it usually takes a few seconds to load.
Once you open Power BI, you'll see the main the power BI
desktop window. There's usually this welcome screen, which you
can just close, so I'll go over the layout and available
sections on this screen at the top of the window you'll see the
ribbon. The Home tab contains the most copper operations that
are available to perform.
From the insert tab.
Allows you to insert various objects. You've got new pages.
New visual, more visual.
You can also do the AI visuals and integrate with power
platform or add additional elements like text box, buttons,
shapes or image.
The modeling tab enabled additional data modeling
capabilities like adding custom tables and columns and
calculating measures.
The View tab has options for formatting the page layout. You
can change the theme, adjust the page view.
And choose other page options.
And this is also where you'll adjust the mobile layout, which
we'll do later.
And the Help tab gives you self help options and links to online
community.
On the left side of the window, you'll see these three icons
you've got report data.
And model.
This right center space is the canvas while we're create the
visuals.
The visualizations pane on the right side of the window lets
you select different visualizations and values to the
visuals and add columns to the X.
X axis, Y axis, four filters.
The field's pain.
Is where you'll see the tables generated after importing data.
You'll see it's telling us we haven't loaded any data yet and
we can click click data here to start importing a data set. So
that's what we're gonna do next.
Instead of doing it here, though, I'm going to use the
home tab.
Click get data.
Once you click on click data, you'll see your comment data
sources. You can also click more since the first one I'm
importing is gonna be an Excel workbook of a click on the first
option.
We're going to select movies 2016.
Can I select sheet?
So you can even import Excel files that have multiple sheets
in one workbook. Since I only have one, it's only giving me
the option to click one.
Now if we click load the data from the Excel file is added and
we'd be directed right back to the canvas to start creative
reports. However, we don't want that because we'll add multiple
data sources and we need to clean the data. So I'm going to
click on transform data instead of load. Transform data will
allow us to perform data shaping operations. Will like merging
columns, adding additional columns, changing data types and
importing more data.
But this takes us to the power query editor window. Let's go
ahead and import the rest of our data.
To click on the new source.
And click on more.
And this time.
My pilot is a Jason document. When I click on that one.
Yet all movies.
And there is my second query.
Again, we're going to click on new source. This time we're
going to select text.
Watch the beep.
And I think it's moving a little slowly because I have multiple
power BI.
Options open.
Then click on this movie data.
Here you can select the different delimiter options, so
this one just a comma.
And it does try to read the delimiter for automatically
selected comma.
And then I'm going to click on new source one last time.
Select Excel workbook.
I already selected movies, so this time I'm going to select
the other file.
Right now, notice that the four files I connected now show with
queries in the left pane. The Center panel shows a preview of
the data on the right, you'll see the query settings pane. The
applied Steps Box records the steps performed while
transforming the data.
And and the View tab, we can turn this.
Off and on.
What the column quality column distribution and column profile
do is they give you additional information about your columns.
It's helpful. These options are helpful to determine if any
errors are no values exist quickly. Also shows the number
of distinct and unique values, the value distribution and
statistics for each column. So very useful. I always go in and
click those three automatically.
So now I'm ready to clean the data. The first thing I wanna do
is I wanna change these query names to something more
descriptive so that the tables have descriptive names that make
sense later. The sheet one is not very helpful.
So I'm going to change this to box office revenue.
2016.
Fix them to click on the second one.
When I change this name to movies.
19702022.
Movies 1970 to 2013.
And I'm not a hard time coming up with a name for this one, so
I just went with tests.
The next I'm going to correct the column data types. Power BI
already tries to guess the data types of each column when
importing the data, but sometimes it's wrong. Nobody's
perfect, so we must check each column and correct some of them.
So I like to just go down the list like I did when I changed
the names so we know movie ID while it is a number.
It's more of an identification. We're not going to do
calculations on this column, so we're going to change it to
text.
And we're going to select replace current.
Release date and date as correct movie titles, correct rating
genre.
These we're going to change to fix decimal numbers since these
are currency.
We're going to do the same thing here.
Thanks to text.
Replace current.
Again, we're going to change these to fixed decimal replace
current.
And you'll see ya when we change these two.
It created an error because they said NA. We're gonna fix that in
a moment.
And we're also going to do the same thing. So this last one.
But these I'm actually going to change to true and false.
Because the 0 essentially means they failed the test, A1 means
they passed.
We're going to change it to a true and false true for past,
false for fail.
And you get the idea.
I have another one open that has all of the data changes
completed, so I wanna go through every step all over again.
After we've changed corrected the data types, the next thing
we're gonna do is we're going to drop some of the columns that we
don't need.
If we know we're not going to use the columns in our analysis,
we might as well get rid of them.
A couple of those are going to be this one right here.
We can right click on it.
It removed.
Also want to thank I like about Excel and also power BI always
says there's always one way to skin a cat. So if you don't like
that one there's also home.
Remove columns.
And we just did the same thing.
If we can remove this one.
The columns.
But remove this row that has the error in it. We're gonna do
remove row.
We're going to select remove errors.
What's your booking? It did what it did it earlier.
We'll move on because it was removed out of the.
Other one that I'm going to move on to when we actually start the
visualizations.
Right. The next thing I wanna do so when I named this table I
said 1970 to 2022. But if you look at the years, this goes way
further than 1970.
All the way to 1874. This came from the vegetable movie list.
It's user generated so it.
Has a lot of movies I didn't want to go back that far. So
what I'm gonna do is it's refuse remove rows again.
And I'm going to use remove top so kind of Scroll down.
And there is a fine or replace I didn't think about that till
just now because I could find replace 1970.
Are not replaced but just fine so that I know what row it's on.
1970 starts.
With Rose 1359, so I'm going to go remove rows, remove top rows.
And now they actually started in 1970.
One other thing I want to go is.
This one just has a.
Extra row at the bottom, so we want to remove that one as well.
So we're going to do remove blank rows.
Right, so now I've completed all of the data transformation steps
I want to complete, so I'm going to click on close and apply to
load the data into power BI.
This however, usually takes a few minutes, especially if the
data is bigger and this is what I didn't wanna wait on.
So I'm just going to closeout.
And.
So it's out of here. Well, because this is the untitled 1.
And as you can see, I already have my report with my knife
clean data.
After we've cleaned.
The data we're going to kind of complete our connection creating
relationships.
So I already did this as well, but to do any relationship you
can do manage relationships.
Auto detect.
Which this one it did automatically detect the other
ones I had to add, so you'll click on new.
Select the table you want to connect.
Relate.
Like the other one.
And so those already relationship between these two
columns, because I already did it. But and this case it would
be many to many.
Single and then you would normally click OK.
And so that's what I did for each of these relationships.
So once you've created your relationships, this helps relate
the table so that when you go into the actually creating data
visualizations, you can pick different fields and columns
from different tables and filter them correctly so you get the
right results of the results you want to get.
Also from here it's a good idea to hide from columns that you're
not gonna use in your data visualizations, the biggest one
being your ID members. While the ID numbers are important for
relating the table, they're not important for visualization
visualization, so you can go through. You can hit hide.
For example.
When I click on movie ID.
He was toggle.
And that I can toggle it back to yes so that it is hidden.
Also wanted to show how to create the date table.
So I did this. It's a good idea to have a separate date table
and then the relate it to the other dates. That helps with
time series or other data visualizations that are you're
wanting to analyze time.
So you can create the date table by going to new table.
You're gonna type in what's called a Zacks expression. So in
this case we would say date.
Equals.
Calendar.
State.
And this takes 2 arguments, so the first one is the date is
going to be the start. So since the furthest I went back was
1970, we're going to put 1970 January 1st.
And then we're going to say date again.
And this is the second argument is the end. So we wanna do 2022.
December.
31st normally we would hit enter. I don't want to do that
because I already created the date table.
We're just going to go in and delete it.
Right now we can create the visual or we want an our report.
We're gonna go click on the report icon.
We have our canvas.
So the first chart I'm going to do is I'm gonna do domestic box
office revenue for the top 50 movies in 2016.
I want to do a clustered column chart which is this one. I'm
gonna select this. I'm going to create my chart.
I'm going to select the filled for for the X axis we wanna do
genre.
For the Y axis, we're gonna do some of domestic box office.
And for legend.
We're going to go down to the test table and we're gonna
select vegetables.
So what this does is it tells us the total domestic box office
revenue for movies in 2016 cause this table only contains the top
50 grossing movies for 2016.
And it breaks it down by genre.
The green table is means true means they passed the vegetal
test.
Soft means they failed the vegetal test week as we can see
adventure genre was the highest grossing and movies that passed
the vegetable test.
Earned more than movies that felt the vegetal test.
For the next one, we're going to do is.
You know, maybe we wanna see well have.
Representation gotten any better over time, like are.
Is do more movies past the Bechdel test now than they did
in 1970, has been improved over time? Has the vegetal rating
improved, so we wanna.
Insert a new visual.
We're going to select line chart.
And it's going to be released here.
On the X axis.
And test freighting on the Y.
And instead of count we want to change this to average.
Now this data set came from the movie Special Test.
Now what they did is they give each each movie.
A rating of either A012 or three. Either they passed zero
of those 3 criteria, they passed one they passed two, or they
passed all three.
So I decided to do an average of that. So essentially in 2022,
the average special test rating on that site was 2.5.
In 1970, the average was 1.98, so over time.
We see a positive trend.
However, we see that it has gone back down and the previous two
years.
Now for the third chart, I wanna do a donut chart.
We're going to go select donut.
We're going to select legend.
Forget count.
So like the box office revenue of 2016, this table contains the
top 50 grossing movies of 2016.
So we know out of those 50.
64% passed the vegetal test, 36% failed the vegetal test.
Now I also brought in some other tests. That's what these are.
While the vegetal test has become a prevalent litmus test
to measure gender imbalance in film, it doesn't address the
core inequalities in Hollywood films.
So there was an article in 538 that proposed 12 other tests.
To address other issues in the movie industry, like female
representation behind the camera, problems faced by women
of color, and how women are commonly represented on screen,
let's say we wanna compare the breakdown of the vegetable test
and the breakdown of two of these other tests. So we're
going to do another.
Donut chart.
And this time we're going to select the code.
And again value count.
I'm going to make that a little smaller.
As you can see the code test.
Which the three requirements for that one is is there a non white
female identifying person in the film? Does she speak in five or
more scenes and does she speak English?
So this one had 58% passed, 42% failed.
And then we're going to compare one more. So we're gonna do a
pie chart.
Just to change it up a little bit, instead of the doughnut
chart.
1st I need to select new.
Aye.
And this time we're going to select.
The great test.
And again count.
And I had that backwards. I'm sorry.
I switched the colors in my file because I wanted green for two,
so I just read these wrong. I'm sorry guys so 36%.
Failed 64%. No, I did say that.
If it's pushed up the color, sorry.
So in this one, if we're that the colors on this one, so 10%
passed.
90% failed, so right test so that one was. Is there a black
woman in the movie? Is she in a position of power? And is she in
a healthy relationship so?
Weather where you know a good member passed the vegetable
test. A good member passed the code test. Very few passed this
one.
And then we're going to deal one Marmot show you how to do one
more.
Which is a scatter chart.
We're going to fly scatter.
And for this one, we want to compare.
The international average.
International and average domestic between movies that
pass the vegetal test and failed the vegetal test.
So on the X axis, we're going to do domestic.
We're going to change back to average.
Ohh.
The Internet messed up. It's OK, I'll screenshotting.
So somebody's got a live mic.
And the Y axis we're going to put on average.
And for legend, we're gonna put vegetal so that it separates.
Between the two.
So now we can see there's a positive correlation between
domestic box office box office revenue and International box
office revenue.
But there's and then both. You know, between those failed and
pass the Bechdel test, they both have a positive correlation.
So.
And these are all 8.
Why first create on? I just kind of put them all on the screen
and then I actually kind of line them up and make them look
nicer.
So these are all eight of the charts I created. However, these
are not formatted, so I'm going to go over that now just how to
make some formatting changes.
1st for this one we want to change.
The title.
When we click on here.
General title. This is where we can change the title.
That can be domestic box office.
Seven, you.
For top.
50 movies.
And 2016.
We want to center that.
We're also going to take the.
Idles off the X and the Y axis.
Going to change the color.
That's that I color. So I want to make sure that if I wanted
them all to match when I did it, so I want true to be the bluish
green color false to be the gold color.
X.
I put this all together. I want there to be a border, so I'm
gonna click. No, I guess on, sorry.
Five points.
Used to death and then I'm going to make it transparent.
And you'll see why in a minute as well.
So these are just a few of the ways to change.
The.
You know, formatting, we can also.
I want to remove the legend on here and I just wanna you know.
I just want this to say true and false.
So in that case.
We're going to turn off on the legend.
But on the detailed laborers labels.
Wanna say category and then percent of table and that's
going to change it. So the legend's not taking up that
extra room and it's right on to the data point itself.
I've shown you kind of how to change the legend, change
colors, change the title.
Once we've done that to all eight charts.
This is what it's going to look like. I also kind of rearranged
them where?
You know, the bigger ones needed to be bigger so that we got all
of the information, the smaller ones, we could make smaller.
So we're going to do for here is we just want to add a little bit
to give it a little pizzazz.
We're going to add an image as the background.
Sorry.
We're going to click on the canvas, we're going to click on
the format.
Canvas background image.
And I have a movie curtain.
I'm picking up the whole way now.
I'll show you.
And then we want to add an image to the top.
Trying to insert image.
I want to add a little coupon, the top we're going to place
that at the top.
And the next is our final completed report with the
background. As you can see, that's why I changed the
transparency a little bit so that you really see through.
You don't have to do that. Like I said, it's really just what
you think makes look good. So some common.
We are like suggestions is to keep a common theme common
color. So I kept to like three colors throughout the page. Red,
Gold and the bluish green.
I kept all of the background. If each chart the same color, you
know, and I tried to keep so that it looks cohesive.
So after we're done with this, this is where we're going to
publish it.
We're going to save.
And now?
We're going to publish to Power BI service, and if we're going
to click on master class, I already created that workspace
ahead of time.
I don't want to replace it since I already did this because I can
take a few minutes too. So now basically what I did with my
published it to my power BI service account. You want to
make sure that you are logged into the same account from
desktop and service.
And then I want to click on my report right here.
We're going to click on our final report. I'm going to click
on share.
The click on PowerPoint.
Copy that.
And then I want to go back into my PowerPoint.
Where to click on insert power BI?
Then it asks you to sign in.
And then we just want to paste that URL.
And you can.
Check it out to match the slide.
And now we have a nice interactive.
Report page in our PowerPoint presentation. So it's actually
interactive. You can click on it. It'll highlight other
measures and interact with other charts.
But it is interactive once it's shared into power BI.
And then the last thing I wanted to show is.
The mobile layout, so from view you can select mobile layout.
And this is where you can optimize the layout so that it's
mobile friendly when somebody wants to pull it up into the
power BI app.
So in this case.
We're going to make our.
Yeah, but that would at the top.
We're going to stretch it out all the way.
They're going to add.
You.
Three of the the Donald chart and the pie chart.
And I must do this one last. So again, we're gonna do that one
to the bot.
The edger.
And now we've made a.
And you can actually keep scrolling down.
So that you can fill out the rest.
There you go. That's an example of how you can kind of make it
more mobile friendly and optimize it for the app.
And that is my presentation. I hope I did not go over time. I'm
sorry if I did.
All right. Thank you. April, that was awesome.
Lots of lots of comments and kudos to you. So great job.
And we will save questions until the end. So Eduardo, if you are
ready.
Hello yes I am already.
All right. Thanks.
I'm gonna share my screen. I did prerecord my presentation just
to keep everything on track on my end and make sure I shared
all the information correctly. So just let me know if you guys
can hear it.
Hi everyone. My name is Eduardomartinez and today I'll
be talking about pentesters, the hardware and software. The
reason I mean I chose this subject of the pen testers is
always been very interested and fascinated by just the the
knowledge base that these.
People have on whatever they want to exploit. It is crazy
that the how much they have to know to know the their
weaknesses, almost like knowing the more you know about your the
enemy, the more you're able to exploit it. And that's what
they're that's how I see it. That's how they see their their
jobs or their focus on the finding mode and these for a
organization and they.
Will study it. They would find an opportunity. They'll fan out
and action plan and then execute it to find.
Ohh any source that can expect that can be exploited in the
good part about being a pentester is that you were able
to share this knowledge to whoever you're working with so
they can build up their defenses, or at least be
prepared once something happens.
Not the first software I'll be speaking about is and map. It is
a powerful that we're scanning as security audience tool that
can be used to discover hosts, services and operating systems
running on a computer network enables users to scan networks
for open ports and detect services running on those ports
as well as assist the security of the network by using various
techniques such as port state detection, operating system
fingerprinting.
The packet sniffing and more.
I just need at a map can be used to plant network changes to Tech
Rd devices, add malicious hosts and map is an invaluable tool
for ethical hackers and security professionals. It can be used to
perform a wide range of network tasks, from simple port scanning
to complex probability assessments. We'll try hack me.
I was able to gain hands on experience with Ant map by
completing challenges that tested my understanding of the
tools and it's various features.
Through these challenges, I liable to explore different scan
techniques such as ping scans, server scans, operations teams,
detection scans and more. By using IMAP in this way, I gave
you better understanding of how to use it effectively in the
real world scenario. Overall, gaining experience with and map
through try hack Me was an invaluable experience and I
would highly recommend it to anyone who's looking to expand
their knowledge of the ethical hacking and network security.
Next is Metasploit. It is an open source project developed by
Rapid 7 to help security professionals and penetration
testers. Fine exploit and validate variabilities and
enables users to assess the security of their systems by
exploiting known modalities in software applications.
Let's blocking things. A comprehensive collection of
exploits for various platforms and databases. These exploits
are written in different programming languages such as
Ruby, Python, and C++. Additionally, Metasploit
includes tools for exploration that allows users to identify
potential targets and launch tech against them.
Using those voiding try hack me, I had been incredible
experiences allowed me to really understand the power and
exploration and it gives me an insight into just how powerful
tool mesh point is. There's open my eyes to importing of network
security and keeping up with patching vulnerabilities so they
cannot be exploited. They also gain a much better understanding
of how attackers are able to bypass search and security
measures and launch assessable to attacks.
Nessus is a powerful and easy to use on ability scanner. Has
become a stable of network security for many organizations,
providing visibility into the security posture of their IT
networks. It scans systems for thousands of known inabilities,
provides a clear and actionable information to system admin so
they can quickly identify and remedy any variability, areas.
The best bestie of.
This is makes it well suited for large scale scanning projects or
automated monitoring purposes. With its extensive plugin
library, users can customize scans to fit their particular
environment or requirement, including external facing acid
groups or specific internal applications.
One of the most popular tools used for wireless network
security auditing is aircraft engine. It is a suite of tools
that focuses on capturing and analyzing data packets, cracking
encryption.
Teased and testing for probabilities and network.
Aircrack Ng works by capturing packets from a target wireless
network and attempting to decipher them based on their
encrypted headers and provide eggs. Detailed information about
each packet, including the source address and encryption
type used once the encrypted, it can be used to crack the WEP or
the WPA key that can be protecting the network using
aircraft engine and dry hacking. It was a great learning
experience for me. I've heard of the tool.
Before, but I've never used it to its full potential. After
doing some research, I related to it can be used to crack
encryption keys from captured handshake packets. With this new
knowledge, I decided to give it a try on one of the challenges
offered by try hack me overall using Aircrack Ng in Tracme was
in learning experience for me. It taught me how to use this
powerful tool in order to gain access to variable networks.
Additionally, since it's an open source, I can keep practicing
and.
Only in my skills with this tool as often as I wish. All in all,
Eric cracking G is a great way for anyone interested in the
cybersecurity to learn more about network security and
password cracking.
Next is birth sweep. It is an integrated platform for
performing security testing of web applications. I guess it's
the variety of tools such as integrating proxy, a spider,
automated scanner and so on. With Burp suite you can identify
reliabilities and web applications quickly and
effectively.
The integrating proxy feature allows you to intercept request
and responses between the browser and the server. The
spider tool is used to automatically crawl websites and
discover new contact and functionality. Them help you
uncover hitting areas that can be.
Can be vulnerable to attack. The automatic scanner can be
detected. Common security flaw such as cross site scripting,
SQL injection and the remote code exclusion. It can be.
Also used to scan entire web applications from deliveries
using birth suite and try hack me has been an essential part of
my learning experience and allows me to understand the
underlying request and responses that are set between the website
and its clients which helps me under identify any weaknesses
within the system with the website that can intercept
traffic, modify requests, scan for potential own realities and
audit web applications. This tool is an incredible useful.
Incredibly useful when it comes to understanding how to
different web technologies work together so that I can better
secure them against malicious attacks. Additionally, the Burp
suite I can see exactly where exploitable pieces information
may resign or where authentication process may be
bypassed. All these features make Burp Suite a powerful asset
in any cybersecurity arsenal.
Alright, so the next is the hardware side of the pen
testers. So I went through quite a few websites I tried.
Googling, what do pen testers usually carry with them? What do
they have in the arsenal? I went to actual Reddit article.
They actually ask these questions to people that
actually really do in this job and and to them recommended
these hardwares to to to use on the daily basis or they only use
them for very specific jobs. So the first one I would like to
talk about is the Wi-Fi pineapple mark five. It is a
very powerful tool you use by security professionals and
hobbyists alike to audit wireless.
That works. It is in. In. It has an intuitive web interface with
easy access to the latest features, including to ability
to set up as rogue access point and perform client trafficking
and management, spoof DNS requests, and even alter HTTP
traffic, all from the single device.
Well, the next hardware I would like to talk about is the
Lantern on. So you can see what the picture here. You can easily
be.
Mistaken as an actual necessity for your computer, so it's just
connects to your.
You SBIT and to Ethernet. So in most jobs I am I've been at or
work on. They usually have like a tower and that you never be,
never gets moved and imagine someone that does not supposed
to be there gets access to it and they all they have to do is
disconnect your Internet, plug in to USB and plug it to this
device and the land turtle is a powerful pentesting tool from
Hack 5, providing users with an easy to use and portable device
that can be used to perform security assessment.
It runs on the open source and the next operating system,
allowing users to easily customize it for their own
needs.
The Lantern offers five different payload modules.
The first payload is the SSH tunneling payload which allows.
We don't know into the remote network using SSH encryption
enabled and safe and fast data transfer while by passing
firewalls and other conflict filters. The second payload
remote desktop control provides a user with remote access to
control assistant from another location. Darling, there's the
packet capture payload which captures.
Package sent across the local network, allowing for the
analysis of the network traffic.
The 4th payload is the Metasploit payload which allows
for the execution of Metasploit Nalgenes from the remote
location. This can be used to exploit security or abilities or
access hitting contact on their website. Last but not least
least that there are the custom shell payload would provide
users with an interactive shell in order to execute custom
commands and scripts. It's small of form factor, makes it a deal
for its cover.
Operations or for deployment to restricted environments.
Of the next hardware piece is the use be rubber ducky. It is a
powerful tool for Pentagon penetration testers and security
experts. It can be used to quickly and easy and frustrate
accessible by exploiting existing weaknesses or gaining
access to the system by using malicious code. It works by
emulating a USB keyboard, allowing it to reject keystrokes
as superhuman speed into any device with an available USB
port.
This allows the user to bypass authentication measures such as
passwords, pins and biometrics in order to gain access to a
target system. Additionally the USB.
You would be rubber ducky. Tiny size makes it perfect for covert
operations. Can sense it could be disguised as it is innocent
looking flash their drive. So this is the reason when you find
a flash drive on the floor it's best to eat together to the
security upfront. It's not really a good idea to plug it
into your own system just because of this only or it can
be.
It it's something else that may not as malicious, but you just
never know and don't wanna take the risk of being the one that
finds it and put it into your jobs laptop. And that can be not
only a security hazard, but it can also put your job at the
Lionel because your curiosity.
Ohh, the next hardware is the land tap. It is a network
troubleshooting tool used to detect and diagnose problems on
local area of network that can be used to monitor traffic of
devices on Aon, determining the cause of any issues and identify
potential bottlenecks. None type allows IT professional to
quickly assess performance metrics and make necessary
adjustment for optimal performance. Additionally
provides real time monitoring.
Capabilities and that allows administrators to stay informed
about how they're network is functioning in a given time with
this extensive.
Reporting features Lantac can be provided detailed information
about exactly where and when and issues occurring allowing
effective problem solving with minimal disruption and short
land tap is in it.
Acid and maintaining their work health and ensuring maximum
uptime.
Last but not least is a Raspberry pie for pentesting. It
has become an increasingly popular option, especially among
those with limited hardware resources. There's small,
affordable devices capable of running in a range of security
tools and providing a great platform. Conduct penetration
tests on networks and systems. It's low cost, different
Raspberry pie, significantly cheaper than traditional
hardware platform using pen testing.
I can't afford affordable choice for budget conscious testers.
It's utility. Raspberry pies, are programmable, can be used to
run various operating systems, providing flexibility in terms
of which those can be used during test. It's probability,
the size of the Raspberry pie means you can easily be carried
around with you and using multiple locations and easy
setup. Setting up a Raspberry pie for pen testing is virtually
straight forward.
I'm making it a great option for those are or just getting
started with pen testing.
And here are some of the resources I went I have on
finding the information for this presentation and also I didn't
include him, but I also use some articles I found in the and just
a bunch of credit.
Call me articles asking Pentesters questions about
hardware software, what they you should use.
Thank you.
Alright, thanks Eduardo. I learned a lot of things, lots of
goodies in there. I'll definitely have to go back and
Thank you.
rewatch this.
Thank you.
Umm, still looks like Devin.
Last but not least, Are you ready?
I am.
Uh.
Take care away. Just hit the share button.
Cool.
And then choose the screen. Ohh you know you've done it before
Yeah.
and you can chat meetings I mean.
I don't want you to include my audio this time.
Uh, OK.
Alright, I can see it.
Is it cool? OK, cool. Umm, my name is Devin Brewington and
this is my slides. I'm I'm doing what is helpful in unity and you
know some tips and tricks like that. I have been working in UNI
for long, but I have learned a few things from it. I know some
people don't know exactly what unity is or like the many things
that it can do. So I figured I would go a bit more in depth
about, you know what it provides and what you can do.
So.
Let's see. Let's see. Let's see. So the big question usually is
what is unity? And it is a 2D and 3D game engine. As most
people know it. And this is something that's been around for
quite a few years. I wanna say back into 2005, this is
something that was created with the intention of reducing the
stress on the developer pretty much.
I'm sore, as everybody knows, if you've been in tech for a while
or you've been playing video games for a while, you know that
certain development tools for game devs weren't as plentiful
as they were. Now you have things not just with unity, but
also with Unreal Engine, things like that.
Ohm.
So this is sort of like a breath of fresh air. When it finally
came out.
For unity nowadays the main focus has been.
To be as streamlined as possible. So they've been trying
to make things certain. Apps that will, you know, make the
process easier for people, as you can see on the things on my
screen here.
There's things I've been working on as well, certain things like
the main camera and the game manager and just certain
scripts. They've really done a good job with.
Something that's always helped with unity as well as the asset
store, something that has.
Actually done a great deal for me.
UM going through and doing multiple projects I've been
doing and, uh, unity from the brick breaker I did.
The last week or a week or two to this one that I'm working on
now that I'm doing for a project as well.
Uh.
But yeah, but Unity has been really big and a couple of
different fields and not just the 2D field and the 3D field.
They also work in the augmented reality and the virtual reality
field as well. And I think the three development is the one
that they are certainly pushing for right now.
That being said, Unity isn't essentially limited. Just two
games. They're also doing many other things in the field
itself. That being said, it's not as in-depth as what they're
doing in the 3D field as well.
Ohm.
With that being said.
I've been working on some stuff that I wanted to kind of show
off.
Umm here as far as like the character inputs, something I
was going through and I was learning and something that I'm
trying to actually go and learn more about because I don't know
a whole lot. But I do know that I have created a little
controller here and it's something that I thought was
really cool.
Especially with all the games that I've been playing and
things that I'm trying to do and so it's nice to learn something
new essentially. So this is what I found out about it and you can
create a simple controller for a computer game just through this.
So things like pressing the plus button, you can name it whatever
you want. This can be named it just new and then you have here
you can name this say move.
After naming this, go through the buttons for something like a
game you play on the computer. You would use the value and you
would go through and find the vector 2.
After that the plus button again would show you a couple
different options, but since it's something like a computer
game, we would just go and click here.
Delete this binder here and then bam. So these are the different
bindings that you can have course up, down, left, right
like usual.
And then after this you would go through and find where you'd
want to connect it to now with unity.
Now it's a lot easier to do things. They have a lot more
options as you can see touch screen, you have keyboard, you
have the mouse, the joystick, the game pad, and even though
the game pad itself, there's a lot more in depth than just the
simple left, right? WASD. It's still a lot simpler than it
would have been, but for this, I'm just gonna go through and.
Push, listen and this is the up key so W.
And it's just as simple as.
With this.
The mega player input.
I pressed the wrong key.
There we go. Alright left.
Ben.
And then there you go.
And so this is how you would make just a simple character
input, and once you do that, you have the option to save asset.
But I already have something similar in here so I don't want
to save it.
Would you can see in here as well that I've made other
things. Just another thing. This would be something like an
attack. Just the left mouse button.
And then bam, this is the one that I made initially the other
day for this game.
But yeah, that is something that I learned recently and it
actually is pretty helpful. I had a little tutorial here too
just to show off how you would go through and do the character
input if you wanted to for the keyboard and mouse. I didn't
think it would be that simple, but it actually was.
Another thing that I was learning trying to go through
was different commands and attributes.
Isn't it? It was doing different. Uh, attributes didn't
really know.
What certain ones were so I had to actually go through and
research some of this stuff after I watched the tutorials
and things like that and things like the serialized field is
something that actually really helps me out, especially trying
to get certain things to show up on screen. So for instance.
If I was to go to my player here and I was to go through the
display name, the current health, the Max HP.
Yeah. These these four like trying to get that to pop up. I
didn't really know how to do it. I was throwing things in as a
public void and things like that and I didn't need to. The only
thing I really needed to do was to make this, if I can show up
my code here.
I've like 100 things on my computer right now, so it might
be a little slow.
Come on.
Don't do it to me now Visual Studio code.
Scripts.
See player script.
Umm OK.
That's good.
Uh, come on.
Trying to get this pop up in my screen.
I see.
It is not.
But nonetheless, this is something that I had to do.
And.
I have it saved here as well, so this is another one of the
things that I had to do for.
The scripts as well for the equip controller, so I was using
a serialized field and I was able to actually sit there and
put this stuff on the screen rather than make it a public. I
can make it a private instead and then I was able to actually
put the data in, be able to adjust it inside the inspector
instead of going through and actually adjusting it.
Umm.
Here so it made it made a great deal of difference that actually
really helped out a lot. And it's just like little simple
things here and there that I had to change and that I can now
change in here instead of having to going back into my code.
Oops, sorry about that.
But that cooking something downstairs.
But yeah.
But there is like various other things that uh, I was going
through, especially trying to figure out because I didn't know
if I wanted to use unity. I wanted to use Unreal Engine, so
it was nice to kind of go through this as well and to see
the plus and minuses on why I should go with unity. Then of
course they're both free and there's a bunch of assets and
things that I can use for them, but unity is just it's a lot
more beginner friendly and it's there's a lot of things that.
We're a lot easier for me to do and to understand going through
unity then going through this.
But yeah, a lot of the things are just point and click and
creating. I had to follow a few different tutorials for a good
amount of the things, especially going through some of the
scripts since I am rather new.
But yeah.
And that is have two do for mine.
Presentation.
Alright, thanks Devin. That was awesome. I really enjoyed
watching you play the game. I see that you have attacked now,
which is gonna be more awesomer.
Yeah, it actually actually hits now. So I'm not getting attacked
around the forest.
There you go. You're not gonna get beat up by the by the goblin
Yeah.
anymore.
No, not at all.
Looks like Michael has Michael Husken has the his hand raised?
Go ahead, Michael.
That was accidental. Sorry.
Ohh, OK who else has their hand raised George?
Yeah, I have a question on the master class. So does it have to
be totally PowerPoint slides or can you do video as well like
include video and stuff like that. So I get meaning like
let's say I wanted to show putting together a virtual
machine and using Metasploit and stuff like that and the virtual
machine, am I able to do that or does it have to?
Yeah, you can do a live demo if you want.
OK, so it doesn't have to be all PowerPoint, right?
No, huh.
That was my main. Alright, thank you.
You're welcome, April.
I was going to offer to share if anybody you want to use the data
I collected to kind of play around with Power BI and learn
some more. I'm more than happy to share that with you. So just
let me know.
Alright, thanks.
Does anybody have questions for April, Eduardo, Eduardo or
Devin?
As if not I do.
Hi I wish I was paying more attention. I'm sorry. I'm trying
to get everybody straight on the internship side. I did. See, I'm
gonna look back over Devin's video cause there I was. Just
all the way whilst the whole interface is confusing to me.
But that's not to say he did not do a good job. So I wanna
vocally say you did an amazing job, Devin. I it's just way over
my head. So I don't want you being discouraged by me fussing
in the comments. It wasn't about your presentation at all.
Said a lot of stuff.
I have another question, two questions, one that the one that
Devin just showed, is that fight you can do gaming from
beginning, like from scratch and build your game?
Yes.
When are you OK and for April?
Ohh I show you posted the other day. The all day class for the
power BI and that's from 99 to 10:00 o'clock for that class or
something like that.
You can adjust it. They had time.
Umm.
Like when I looked at it when I signed up, there were all over
the place. Like I end up doing one that was from like 9:00 AM
to 5:00 PM because they're usually like 8 hours long.
Umm.
But you can go in there and you can adjust the start times and
then there's ones that are.
Like, if you're looking for an odd time, you can choose one
that's being done. I'm like Europe or something.
And then that way it's kind of like if you need to do it at
night or something, it'd probably be that. But normally
it's like during business hours. I think like the one I did was
from I said from 9 to 5.
OK, let's see, some said like you are. Why Canada? I'm like,
uh, is it gonna be English? We're able to attend this or so
that's just for the time frame, right. Those other, like places
of countries.
Yeah, from my understanding you can attend any of them. You
don't have to be in that country. It's just to give you
an idea. So you can go in there and you can select language
because.
Umm, so that it's you're gonna join one that's in English.
Unless you are. Do you know another language? So I went in
there because I wanted to make sure it was gonna be in English
because I was the only language I know. If I went and selected
English and then I went in and was like, OK, I want to do one
that's in the morning. So you can, like, there's a slider for
the time. And then you can even change the country that it's
originated. And I just put United States. So I know that's
the time wouldn't be like.
Well, I'm trying to sleep.
OK. Gotcha. Thank you.
I'm Eduardo. When you were talking about Burp suite that
really caught my attention.
Like people.
If soft dev fields an app, can you use burp sweet to look for
Thank you.
No.
like?
Cross site in cross site. Whatever XSS.
And SQL injections and stuff.
In the class side, uh injections, well, the cross
Yeah, scripting, yeah.
side. Yeah, I I haven't played with it too much. I actually
just started this week on the junior penetration testing and I
saw it there. So that's where I played with it. I'll just a bit,
but that was one of the main one, one of the top players that
they brought up in the Reddit forms when they're asking the
pen pen testers. So I'm not like I read about it a little bit and
I did play with it a little bit, but no, might knowledge is
limited.
But it was really it was really interesting learning how a sweet
All right, well.
You did.
like that. I never even heard of it before I started doing this
master class, actually.
Oh really? I've heard of it, but I've never used it.
Umm it?
Angela and to answer that, yes, you can do injections. Sweet.
OK.
Out there.
OK.
The only.
Thanks, Nate.
I was. I was gonna add a try. Hack me has a a whole section on
Burp suite. I just got done doing that and I was gonna add.
It definitely does have that ability, but Nate answered it
already. I didn't see he was here.
Yeah, because we wanna do more quantum teaming and we wanna get
all departments involved in things and.
For the cybersecurity side, we we do need you guys to do run
tests and stuff.
So that was just a thought.
Nate, did you have a comment question?
I got a question.
For unity.
Did you know that unity is a language that you can use in Web
3?
I did not.
Yes, look into that, my man.
What you can do is you can build games and and build tokens
around.
Actually, yes. Please. OK, I need to write that down actually
Which can.
to look into.
Yep, Yep, I believe unity. I'm not sure Blizzard and
Activision, but I do believe they are too. And there's one
more company out there on the blockchain.
Yep. So if you're doing 2D, you could Moore in deathly sell it
at the in the central land.
So keep that in mind too.
Thank you for that actually.
Not a problem.
Any other questions, comments.
April, I did want to ask you about power automate. Have you
touched that at all?
In your power BI stuff.
I am just starting power automate.
So.
Very, very little. I I said. I just started after I did the
power BI. I just started like the learning on Microsoft learn
for power automated and the other like power platform apps.
I don't know that much about it right now.
OK. Because I I know Marjorie is trying to learn it and others
throughout other departments are trying to learn it so that we
can just automate a lot of these messages and stuff that seems
has.
So I was going to pick your brain but.
You're in the same boat as us.
Yes, I'm sorry.
That's all right. No problem. That's just wondering.
All right. Does anybody have any questions or comments?
If not, I'll just say thank you to our presenters, April,
Eduardo and Devin, and thank you all for joining and interacting
with.
I'm all of us. We do have master class again next Thursday.
If you haven't signed up yet and you are wondering how to if you
go to teams under files, you will see the.
Master class training sign up sheet.
And then you just go ahead and whenever you see an open slot,
you just put in your name and how long you wanna present for.
It looks like next week on.
The 15th we have Shaun Phillips, Jordan Mendes and Coco so.
Be sure to join us for the next week's master class as well.
Alright, have a good night everyone.
Night all.