Security BSides San Francisco Courses

Crimeware Chaos - Empirical Analysis of HTTP-Based Botnet C&C Panels

Empirical analysis of HTTP-based botnet C&C panels, exploring design, technologies, and characteristics of crimeware control systems used by cybercriminals for managing botnets and other malicious operations.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Pensieve - Finding Malicious Artifacts in Container Environments

Explore techniques for forensic investigation in container environments, focusing on evidence retention and artifact gathering to understand adversarial activities.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Fighting Secrets in Source Code with TruffleHog

Discover TruffleHog: a tool for identifying secrets in source code, its applications in DevOps, and new approaches to detecting secrets in package managers like npm and pypi.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Data Driven Bug Bounty

Explore data-driven bug bounty programs: collecting metrics, analyzing vulnerabilities, and leveraging insights to enhance security processes and address weak spots effectively.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Netrepser - A JavaScript Targeted Attack

Explore Netrepser, a unique JavaScript-based espionage tool using freeware utilities for targeted attacks. Learn its techniques, impact, and how it blends into environments for data exfiltration.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Supply Chain Attack Through CCleaner - Evidence Aurora Operation Still Active

Análisis detallado del ataque de cadena de suministro a CCleaner, explorando su sofisticación, objetivos y conexiones con el grupo APT17/Axiom, destacando la persistente amenaza de ataques estatales avanzados.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Starting a Security Program - Thrills and Spills

Insights on building a security program, emphasizing emotional intelligence, cross-team collaboration, and shared responsibility to achieve compliance and meet customer demands.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

A Case Study of MacOS Supply Chain Compromise

Explore MacOS supply chain vulnerabilities and learn proactive defense strategies using open-source tools for threat detection and malware identification in network environments.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Building a Predictive Pipeline to Rapidly Detect Phishing Domains

Learn to build a predictive pipeline using Python and machine learning to detect phishing domains in real-time, leveraging Certificate Transparency logs and supervised learning techniques.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Security through Visibility - Organizational Communication Strategies for InfoSec Teams

Strategies for InfoSec teams to improve organizational visibility and communication, enhancing collaboration and security posture through practical, implementable techniques.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Building an Effective Intrusion Detection Program

Learn to build an effective intrusion detection program using affordable tools. Covers cloud apps, endpoints, network security monitoring, and crowdsourced incident response to catch breaches quickly.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Make Alerts Great Again

Strategies for creating effective, actionable security alerts: improving signal-to-noise ratio, standardizing definitions, and implementing self-service tools to enhance team efficiency and incident response.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

The Cyber Insurance Emperor Has No Clothes

Explore the flaws in cyber insurance and its impact on security incentives, with insights on better alternatives for improving cybersecurity practices.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

The Underground Economy of Apple ID

Explore the underground economy of Apple IDs, including real-world attacks, profit methods, and protective measures. Learn about vulnerabilities and Apple's mitigation efforts.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

BeyondCorp - Beyond "Fortress" Security

BeyondCorp: A new security model that grants access based on device and user credentials, eliminating the need for traditional VPNs and enabling secure work from any network.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk