Person
person:john_strand
Also: JOHN, Sheriff Leonard
Penetration tester, SANS instructor, and founder of Black Hills Information Security.
Penetration tester, SANS instructor, and founder of Black Hills Information Security.
“This is John Strand.”
“It’s time to start a pen testing company.”
“John called his pen testing company Black Hills Information Security.”
Cybersecurity professional who organised Awareness Con in Adel, Iowa after the arrests.
“John Strand came up with a plan.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | MEMBER_OF | Black Hills Information Security | Derived | 67 |
| outgoing | MEMBER_OF | SANS | Explicit | 67 |
| outgoing | USES | penetration testing | Explicit | 67 |
| outgoing | USES | passive reconnaissance | Explicit | 67 |
| outgoing | USES | Google Street View | Explicit | 67 |
| outgoing | USES | Kon-Boot | Uncertain | 67 |
| outgoing | USES | beaconing | Explicit | 67 |
| outgoing | USES | social engineering | Explicit | 67 |
| outgoing | USES | phishing | Explicit | 67 |
| outgoing | USES | shell | Explicit | 67 |
| outgoing | USES | implant | Derived | 67 |
| outgoing | USES | command and control server | Explicit | 67 |
| outgoing | ASSOCIATED_WITH | Awareness Con | Explicit | 179 |
| incoming | DEVELOPED_BY | Black Hills Information Security | Explicit | 67 |
Black Hills Information Security DEVELOPED_BY John Strand
John says he started Black Hills Information Security as a penetration-testing company.
Explicit Confidence 99% · John Strand EP 67 Details
“It’s time to start a pen testing company.”
“John called his pen testing company Black Hills Information Security.”
John Strand MEMBER_OF Black Hills Information Security
John is the founder and operator of Black Hills Information Security, describing it as his company.
Derived Confidence 90% · Jack Rhysider EP 67 Details
“John called his pen testing company Black Hills Information Security.”
John Strand MEMBER_OF SANS
John became a SANS instructor and taught penetration testing and hacking techniques.
Explicit Confidence 90% · Jack Rhysider EP 67 Details
“he became a SANS instructor and actually taught hacking techniques”
John Strand USES penetration testing
John performs physical and network penetration testing as part of his work.
Explicit Confidence 99% · Jack Rhysider EP 67 Details
“John’s penetration testing consisted of either going onsite to see if he can sneak into a building, or testing the network”
John Strand USES passive reconnaissance
John uses passive reconnaissance before attempting to enter a building.
Explicit Confidence 99% · Jack Rhysider EP 67 Details
“First thing’s first, he does some passive reconnaissance.”
John Strand USES Google Street View
John uses Google Street View to inspect a target building and identify an open window.
Explicit Confidence 99% · John Strand EP 67 Details
“I used Google Street View to go around the building.”
John Strand USES Kon-Boot
John uses or demonstrates Kon-Boot during a physical penetration test to take over computer systems.
Uncertain Confidence 84% · John Strand EP 67 Details
“I’m using, I don’t know, it was like, I think it was Kon-Boot.”
John Strand USES beaconing
John uses beaconing in documents to identify when a recipient opens them and to obtain a callback.
Explicit Confidence 99% · John Strand EP 67 Details
“you can send a document to someone and you can have that document beacon back”
John Strand USES social engineering
John describes using social-engineering tactics to help law enforcement locate a kidnapping suspect.
Explicit Confidence 98% · Jack Rhysider EP 67 Details
“what a gnarly way to use social engineering and phishing methods for good”
John Strand USES phishing
John uses a document-based phishing method to induce a suspect to open a document that beacons back.
Explicit Confidence 96% · Jack Rhysider EP 67 Details
“use social engineering and phishing methods for good”
John Strand USES shell
John's prison penetration test sought to establish a shell from the prison network for remote access.
Explicit Confidence 99% · John Strand EP 67 Details
“The objective of the prison was to establish callback documents and get a shell out of the prison.”
John Strand USES implant
John provides a USB executable designed to drop an implant on a target system during a penetration test.
Derived Confidence 94% · John Strand EP 67 Details
“The USB drive had a .exe which just simply dropped an implant on the system.”
John Strand USES command and control server
John and Ben monitor their command-and-control server for connections from the executable used in the prison test.
Explicit Confidence 99% · Jack Rhysider EP 67 Details
“John and Ben are in this coffee shop. They open up their computers and connect to their command and control server.”
John Strand ASSOCIATED_WITH Awareness Con
John Strand organized Awareness Con in Adel to explain physical penetration testing and the security profession to the local community.
Explicit Confidence 99% · John Strand EP 179 Details
“we immediately went to the town of Adel, Iowa, and we did Awareness Con.”