Light in the Labyrinth - Breach Path Analysis for Anyone

Learn to build your own treasure map of how threat actors might move laterally through your company's assets in this 38-minute conference talk from Security BSides San Francisco 2025. Discover a conceptual engineering framework for breach path analysis that makes this critical security practice accessible to anyone, regardless of technical background. Explore recommended no- or low-cost tools that can help you visualize potential attack paths through your organization's infrastructure. Examine real-world examples that demonstrate how to identify and map lateral movement opportunities that adversaries might exploit. Gain access to an open-source security graph ontology that provides a foundation for understanding and implementing breach path analysis in your own environment. Master the fundamentals of creating visual representations of your security posture that reveal hidden vulnerabilities and potential attack vectors before malicious actors can exploit them.