BC Security – Cybersecurity Services

info@BC-Security.org

BC SECURITY

Founded in 2018, BC Security seeks to provide customers with unparalleled value. We provide cybersecurity assessments and training across a broad range of disciplines with technical expertise and a strong understanding of compliance regulations and risk mitigations that are essential to conducting business in today’s world.

Background

Our Services

Enterprise Network Testing

Wireless Protocol Testing

Endpoint Security

Mobile Application Security

Education and Training

Internet of Things (IoT)

Architecture Review

Red Teaming

Tool Developement

Vulnerability Scanning

Hardware Reverse-Engineering

Incident Response Planning

Offensive Security Tools Hubbl3

Operator’s Field Guide to Offensive IronPython

Note: This blog is quite technical and I wanted it to be a quick, concise reference for TTPs. If you find the text explanations to be a bit dense, I also went over these TTPs in our stream last week [...]

Read All
Offensive Security Tools Cx01N

Not Your Grandfather’s Empire

Not Your Grandfather’s Empire I’ve wanted to put this blog together since returning home from DEFCON. Anytime we ran into someone who recognized our swag, they mentioned how much they loved Empire back in the day and didn’t realize it [...]

Read All
Offensive Security Tools Hubbl3

ScriptBlock Smuggling: Spoofing PowerShell Security Logs and Bypassing AMSI Without Reflection or Patching

Note: All code samples shown in the post can be found in our repo here In recent years, PowerShell tradecraft has seen a drop in popularity among pentesters, red teams, and to some extent APTs. There are several reasons for [...]

Read All
Cyber Security Hubbl3

Bridging the Gap: Applying Systems Engineering to Organizational Cyber Risk Management

Recently, while discussing cyber risk management with a customer, they made the observation that there is a lot of training for top-level risk management in the shape of things like CISSP that focuses on building policy. There is also a [...]

Read All
Cyber Security Hubbl3

Survivorship Bias and How Red Teams Can Handle It

Reporting is, by nature, only the threat actors that have been caught. What about all the ones that didn’t get caught? There is no way to examine that and It comes down to the fact that we don’t know what [...]

Read All

Events

On-DemandVirtual

Empire Operations – I (On-Demand)

10 Apr 2025

In-Person & VirtualTREX Coworking Space, 911 Washington Ave #500, St. Louis, MO 6310108:00

Advanced Threat Emulation: Active Directory

14 May 2025

HackMiami18683 Collins Avenue Sunny Isles Beach, FL 3316009:00

APT Tactics: Lazarus, Ransomware, and Advanced Exploitation

16 May 2025

HackMiami18683 Collins Avenue Sunny Isles Beach, FL 3316009:00

Windows Payload Development: EDR Evasion and Initial Access Tradecraft