Security BSides San Francisco Courses

Developing a Rugged DevOps Approach to Cloud Security

Strategies for integrating continuous security into DevOps processes, emphasizing automation, monitoring, and agile security practices for cloud environments.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Digital Intel Gathering - OSINT for Blue - Red Teams

Explore OSINT techniques for cybersecurity, leveraging social media and public records to enhance threat intelligence and defensive strategies.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

The Art of the Jedi Mind Trick

Explore effective communication techniques for security professionals to convey messages to management, overcome obstacles, and drive real change in organizations.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Using Behavior to Protect Cloud Servers

Explore behavior-based analytics for cloud server security, focusing on dynamic privilege management to identify and prevent insider threats and privilege escalation attacks in real-time.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

What Should and Shouldn't Scare You - Kubernetes and Containers

Explore Kubernetes and container security: debunking myths, identifying real threats, and discovering opportunities for improved security practices in modern app deployment.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Creating Data-Driven Threat Intelligence Signals in a Zero Trust Environment

Explore dynamic, data-driven threat intelligence signals for "Zero Trust" environments, reshaping security approaches for modern network architectures.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

The Red Square - Mapping the Connections Inside Russia’s APT Ecosystem

Explore Russian APT ecosystem analysis, learn about open-source tools for investigating cyber attacks, and gain insights into the connections within this complex landscape.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Secure by Design - Usable Security Tooling

Explore strategies for creating effective security products by prioritizing usability, leading to better and more secure experiences for users.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

So You’re the First Security Hire - Creating a Security Program and Integrating Security into Your Company’s Culture

Guidance for pioneering security professionals on establishing a robust security program, integrating it into company culture, and balancing protection with business needs.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Operation PZCHAO - Dissecting a Cyber-Attack

Explore a sophisticated cyber-attack targeting Asian institutions, dissecting its modules, capabilities, and impact on victims' data in this in-depth analysis of Operation PZCHAO.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Owning the Smart Home with Logitech Harmony Hub

Explore reverse engineering of Logitech's Harmony smart home hub, uncovering vulnerabilities and discussing their implications for device security and potential exploitation.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

Fighting Email Phishing with a Custom Cloud IDS

Learn to build a custom cloud-based email IDS to combat phishing, enhancing security while improving operational efficiency. Explore real-time threat adaptation and AWS implementation.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

DNS Attacks - Past, Present, and Future

Explore DNS vulnerabilities, their historical impact, and potential future threats in this comprehensive overview of attack techniques and pentesting applications.

• YouTube
• 16 minutes
• Self-Paced
• Conference Talk

Tired of Playing Exploit Kit Whack-A-Mole? Let's Automate

Explore automated detection of Exploit Kits using headless browsers, JavaScript, and DOM inspectors for efficient web crawling and analysis of malware delivery techniques.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Rise of the Vermilion - Cross-Platform Cobalt Strike Beacon Targeting Linux and Windows

Explore the first cross-platform Cobalt Strike re-implementation, Vermilion Strike, targeting both Linux and Windows in real-world attacks. Learn about this significant malware discovery.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk