Security BSides San Francisco Courses

Building Sustainable Security Programs

1 rating

Learn how security leaders can build sustainable programs through empathetic team cultures, pragmatic risk perspectives, strategic focus, and stakeholder alignment.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

You Lost Data, Unfortunately - Who Will Knock on Your Door and Why

1 rating

A guide to who gets involved after data loss, from industry stakeholders to government agencies across jurisdictional boundaries.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

How to Fake Friends and Find People - A Build-A-Buddy Case Study

1 rating

A case study in operational security for separating real identities from temporary online personas during crowdsourced OSINT and humanitarian missions.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Don't Boil the Ocean - Using MITRE ATT&CK to Guide Hunting Activity

1 rating

Use MITRE ATT&CK to formulate threat-hunting hypotheses, identify artifacts and indicators, and plan focused hunts.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Understanding IRSF Fraud - Protecting Against SMS Exploitation

Discover how attackers exploit SMS 2FA through International Revenue Share Fraud and learn detection/mitigation strategies using Cloudflare, OpenAI, and Datadog.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Log In Through the Front Door - Automating Defense Against Credential Leaks

Discover how Automated Credential Threat Monitoring (ACT) protects against the 80% of cyberattacks using stolen credentials from dark web marketplaces.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

The Power of Persuasion - Better Security Through Manipulation

Discover psychology principles to drive positive security outcomes using social proof, reciprocity, and persuasion techniques to address human vulnerabilities in cybersecurity.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Follow the Trace - How Traditional AppSec Tools Have Failed Us

Explore how traditional AppSec tools fall short and discover how runtime application security traces provide real-time threat detection and vulnerability insights in action.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Slaying the Dragons - A Security Professional's Guide to Malicious Packages

Discover how attackers exploit typosquatting and author impersonation to infiltrate software supply chains. Learn practical threat hunting methodologies to detect, analyze, and defend against malicious packages.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Trust Engineering - Building Security Leadership at Early-Stage Startups

Discover Trust Engineering strategies for first-time security leaders at startups. Navigate chaos, earn executive trust, and build security foundations with limited resources.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

The Four Tribes of Security Champions

Discover a framework categorizing security champions into four tribes: Apprentices, Fan Club, Learners, and Sentinels, with benchmarking tools to choose your approach.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Navigating the Unknowns - Fraud Mitigation for Netflix Live Events

Discover insider strategies for fraud prevention during Netflix live streaming events, focusing on unpredictable challenges and robust defense mechanisms in real-time scenarios.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Shadow IT Battlefield - The CyberHaven Breach and Defenses That Worked

Discover how proactive allowlist strategies minimized business disruption during the Cyberhaven breach, protecting 40M+ users from Shadow IT risks with actionable insights and monitoring blueprints.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

How to Train Your Detection Dragon

Master detection and response strategies from scratch with practical insights from professional cybersecurity experience in this engaging BSidesSF talk.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Enhancing Secret Detection in Cybersecurity with Small Language Models

Discover how to fine-tune small language models for efficient secret detection in code, exploring new cybersecurity methods that run on any laptop with low inference times.

• YouTube
• 31 minutes
• Self-Paced
• Free Video