Automating Exploitation with Agentic Systems presented by Jason Kearns. NAC-ISSA's March chapter lunch
2026-03-17 11:30 - 12:30 (America/Chicago) | Auburn University Research and Innovation Campus, 345 Voyager Way, Huntsville, AL, 345 Voyager Way, Huntsville, United States
Abstract: This session explores the emerging role of agentic AI in modern offensive cybersecurity operations. Through a guided presentation and discussion, we will examine how AI-driven agents can be used to automate elements of reconnaissance, web enumeration, and vulnerability discovery within red team workflows.

Agentic AI for reconnaissance and vulnerability discovery: How autonomous agents can assist in identifying attack surface, enumerating web assets, and surfacing potential vulnerabilities.

Collaborative agent architectures: Designing systems where multiple specialized agents coordinate tasks to augment traditional security testing approaches.

Operational implications for red teams and defenders: How AI-enabled automation is changing the pace, scale, and accessibility of offensive security capabilities.

Attendees will leave with a practical understanding of how agentic AI systems can be structured, the opportunities and risks they introduce, and how these technologies may reshape both offensive and defensive cyber operations.

Tech Thursday presents Shell Sorcery: The Magic of the Linux Command Line
2026-03-19 18:00 - 20:00 | Gigaparts, Address 6123 University Drive, Huntsville, 35806, United States
NAC-ISSA and DC256 continue the Tech Thursday series with Shell Sorcery: The Magic of the Linux Command Line.

Linux isn’t as scary as it seems! This crash course uses gamification to introduce you to the command line. Instead of rote memorization, you will solve logic puzzles to master the three pillars of daily Linux work: secure access, file navigation, and data extraction.

There is no pre-requisite knowledge for attendees, but an open and curious mind is encouraged!

Participants will need to have an SSH client installed before class begins. We recommend PuTTY: https://www.chiark.greenend.org.uk/~sgtatham/putty/

Beers for Engineers with NAC-ISSA
2026-03-26 17:30 - 19:30 | InnerSpace Brewing, 2414 Clinton Ave W, Huntsville, 35805-3014, United States
As of Sunday, March 8, Daylight Saving Time returns and the days get longer. Come celebrate the longer, warmer days with NAC-ISSA and the North Alabama cybersecurity community at InnerSpace Brewing. Beers and Pizza on NAC-ISSA; networking on YOU!

Southeast Cybersecurity Summit
2026-04-15 08:00 - 2026-04-16 17:00 | Birmingham Jefferson Convention Center, 2100 Richard Arrington Jr Blvd N, Birmingham, 35203, United States
The Central Alabama Information Systems Security Association (CA-ISSA), InfraGard Birmingham Member Alliance (IBMA) and TechBirmingham are jointly hosting a cybersecurity conference in April and invite anyone interested to attend. BSides Huntsville will return in 2027 so NAC-ISSA. Chapter members and guests are encouraged to fill their 2026 need for content this spring with the Southeast Cybersecurity Summit.

About the Summit

The purpose of the Summit is to strengthen and promote the internet security profession in the southeastern United States region. That goal is achieved through event activities which result in relationship building, information sharing, and ongoing education and training focused on current technology challenges and solutions.The Summit will highlight the strength, diversity and economic impact of the technology companies and talent working and living in the southeast.

NOTE: This is not a NAC-ISSA event. Registration is handled via the event website.

Tech Thursday presents The Network Cartographer: The Art of Digital Door-Knocking with NMap
2026-04-16 18:00 - 20:00 | GigaParts, 6123 University Dr NW, Huntsville, 35806, United States
Taken straight out of a hacker’s toolkit, learn how to figure out what’s really running on your network!

Learn to look through the eyes of a hacker as we investigate open services and ports, so you can understand what steps to take to lower your footprint. This workshop will tell you how to quickly and definitively understand your network exposure once and for all.

Attendees should download and install Nmap on their machine prior to the beginning of class. Nmap can be found at: https://nmap.org/download

Chapter lunch with Jason Cuneo and Digital Forensics
2026-04-21 11:30 - 12:30 | Auburn University Research and Innovation Campus, 345 Voyager Way, Huntsville, AL, 345 Voyager Way, Huntsville, United States
Join NAC-ISSA for our April chapter lunch with Jason Cuneo presenting on Digital Forensics.

In this lunch-and-learn session, Jason will draw on years of hands-on experience leading digital forensics projects, as well as teaching courses at both the undergraduate and graduate levels, to provide a practical introduction to modern digital forensics. The session will explore the techniques and tools used to conduct deep-level analysis of information systems across both Windows and Linux environments.

Attendees will gain a broad survey of investigative approaches, including operating system analysis, file system examination, process and memory analysis, protocol inspection, and the identification and interpretation of operating system–specific digital artifacts. Throughout the session, Jason will demonstrate several classes of digital forensics tools, connecting foundational theory with real-world use cases. The goal is to equip participants with actionable insights and methodologies that can be directly applied within everyday work environments.

Catering is by Ted’s with a potato bar, pulled pork and pulled chicken. This month’s door prize is a SwissGear laptop bag.

Jason’s Presentation is available for download.

2026-04-19 North Alabama ISSA Chapter Meeting – Digital ForensicsDownload

Beers for Engineers with Women in Defense
2026-04-23 16:30 - 19:30 | InnerSpace Brewing, 2414 Clinton Ave W, Huntsville, 35805-3014, United States
Join the North Alabama Chapter of ISSA and the Tennessee Valley Chapter of Women in Defense as we co-host Beers for Engineers in April. Both organizations seek to grow the cyber community throughout North Alabama. We’ll run this event from 4:30 to 7:30 at InnerSpace Brewing. Come join us to meet new friends and help make our cybersecurity community even stronger!

Beers for Engineers with Wallarm
2026-05-18 17:30 - 19:30 | InnerSpace Brewing, 2414 Clinton Ave W, Huntsville, 35805-3014, United States
Join the North Alabama Chapter of ISSA and our May chapter lunch sponsor, Wallarm, as we begin the week with Beers for Engineers. We’ll run this event from 5:30 to 7:30 at InnerSpace Brewing. Come join us to meet new friends and follow up with the chapter lunch on Tuesday, May 19.

WallArm sponsors May 2026 NAC-ISSA lunch
2026-05-19 11:30 - 12:30 | Auburn University Research and Innovation Campus, 345 Voyager Way, Huntsville, AL, 345 Voyager Way, Huntsville, United States
TOPIC: Business Logic Abuse: Technology Agnostic Mapping of Attack Types

OWASP’s technology specific top 10 lists have provided a ton of value, but it’s time for a different approach to business logic abuse. The rise of APIs and complex business logic attacks requires a new taxonomy that isn’t tied to a specific technology.

Our Speaker is Johanns Quiroz. Johanns Quiroz is a seasoned cybersecurity and technology professional with over two decades of experience helping organizations design, secure, and scale modern digital environments. Currently serving as a Sr. Sales Engineer at Wallarm, Johanns supports customers across the Southeast, LATAM, and Caribbean, where he focuses on application and API security, pre-sales strategy, and partner enablement. Prior to Wallarm, he held senior technical sales and engineering roles at Horizon3.ai, where he specialized in offensive security and helping organizations proactively identify and mitigate risk. Johanns also brings deep expertise in enterprise infrastructure, having spent over 20 years as a solutions architect designing complex environments across storage, virtualization, and cloud technologies. Known for his consultative approach and ability to bridge business and technical stakeholders, Johanns is passionate about helping organizations stay ahead of evolving cyber threats while enabling innovation and growth.

Catering for the May chapter lunch is by Rosies and we have 2 door prizes! First is a Faraday laptop backpack and second is a set of Faraday bags.

OWASP BLA Top 10Download

Tech Thursday: Bypassing MFA with evilginx2
2026-05-21 18:00 - 20:00 | Gigaparts, Address 6123 University Drive, Huntsville, 35806, United States
NAC-ISSA and DC256 will be hosting the next Tech Thursday on May 21 with Tativ presenting ” Cookie Monster Ops: Bypassing MFA with evilginx2″.

This event is free to anyone wishing to attend. Pizza and softdrinks served. This is a hands on event so please bring your own laptop.

Before the workshop, attendees should be comfortable with Linux command line (SSH, package install, basic shell), basic DNS and domain management (A records, nameservers) and VPS management. (We will still cover this.), and be familiar with HTTP(S) concepts, TLS/Let’s Encrypt, and browser extensions.

Before the workshop, attendees will need to: Create a Digital Ocean account if you don’t already have one. Obtain a domain from Namecheap.com (It does not matter what the domain is.) Download Firefox, and download the Cookie-Editor extension for Firefox: https://addons.mozilla.org/en-US/firefox/addon/cookie-editor/

Information for tonight’s session:

Attendees will need Docker installed on their machine.

Windows:

Install WSL by opening command prompts as administrator and using the command “wsl –install”

Follow this guide to install Docker Desktop. There are also walkthroughs on YouTube.

https://docs.docker.com/desktop/setup/install/windows-install

Mac:

Similarly to Windows, follow this guide to install Docker Desktop. It’s a pretty straight forward install:

https://docs.docker.com/desktop/setup/install/mac-install

Linux: For Linux, you have 2 options and either will work.

Download Docker Desktop:

https://docs.docker.com/desktop/setup/install/linux

Or Download Docker Engine via Command line:

https://docs.docker.com/engine/install

Next, download my custom Evilginx application from Github: https://github.com/DillonGriffin/dc256-evilginx-student If you would like to give it a test run, unzip the folder, Build, then Deploy.
