Security BSides San Francisco Courses

You Lost Data, Unfortunately - Who Will Knock on Your Door and Why

1 review

Explore data breach consequences, stakeholders, and regulatory implications across industries. Learn about post-incident processes and interactions with external parties and government agencies.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

How to Fake Friends and Find People - A Build-A-Buddy Case Study

1 review

Explore operational security techniques for creating temporary online personas, isolating true identities, and conducting OSINT missions with insights from ex-Special Operations cyber operators.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Building Sustainable Security Programs

1 review

Explore strategies for building sustainable security programs, addressing burnout, risk alignment, and organizational culture to create effective and resilient information security practices.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Don't Boil the Ocean - Using MITRE ATT&CK to Guide Hunting Activity

1 review

Learn to use MITRE ATT&CK framework for focused threat hunting, avoiding overwhelming approaches. Discover how to build hypotheses, plan hunts, and operationalize findings for more effective cybersecurity practices.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Detection as Code - The Engineering-Focused Future of Detection and Response

Explore engineering-focused principles for building scalable threat detection programs, moving beyond traditional SOC models to create more effective and efficient security responses.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Tracking Meaningful Security Product Metrics

Learn strategies for quantifying and communicating security team value through effective metrics, demonstrating risk mitigation and revenue growth contributions.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

What Does it Mean to Build a Proactive Security Culture in an Organization

Discover strategies for fostering a proactive security culture within organizations, exploring successful approaches and learning from past failures.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Making of the BSides SF Astronaut Badge

Explore the creation of BSidesSF's Astronaut Badge, from technical aspects to logistics, and learn about innovative PCB printing with colorful artwork.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

When is a Vulnerability Not a Vulnerability? Overcoming the Inundation of Noisy Supply Chain Security Alerts

Explore a counterintuitive approach to strengthening security by ignoring over 90% of vulnerability alerts, enabling improved workflows and behavior in supply chain security management.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

What I Learned About Security Working Minimum Wage at Hollywood Video

Insights on security management drawn from teenage work experience at Hollywood Video, relating retail theft prevention to modern cybersecurity practices and principles.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Space and Cyberspace at the White House

Explore the White House's approach to space systems cybersecurity and national strategy, led by the Office of the National Cyber Director, aligning with Biden-Harris Administration's initiatives.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Windows 11 At Your Service

Explore Windows 11's automation feature and its potential security implications. Learn how users can create custom processes that are distributed and executed across machines.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Hacking the Hiring Process - Insider Tips for Your InfoSec Job Search

Insider tips from a security recruiter to enhance your InfoSec job search, covering resume optimization, networking strategies, LinkedIn profile improvements, and effective interview techniques.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Scalable Security - How to Win Friends and Not Burn Out Everyone

Insights on scaling security processes at Google, balancing effectiveness with minimal disruption, and maintaining team morale while achieving security goals.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Container Vuln Management with - Hopefully Minimal Burnout

Explore a graph-based approach for efficient vulnerability management in microservices, focusing on identifying and fixing inherited vulnerabilities across large-scale architectures.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk