Trace to Triage - How to Connect Product Vulnerabilities to Security Paths

Learn how to bridge the gap between product vulnerabilities and security paths using eBPF tracing technology in this conference talk from BSidesSF 2025. Discover how traditional AppSec approaches create fragmented workflows where developers patch vulnerabilities without context, detection teams build incomplete security rules, and threat hunters pursue outdated compromises. Explore how eBPF-based tracing provides the missing context needed to transform disjointed security efforts into actionable insights that effectively balance application usability with robust security measures. Understand practical methods for connecting vulnerability discovery to meaningful security response paths, enabling more coordinated and effective security operations across development, detection, and threat hunting teams.