Security BSides San Francisco Courses

Building Sustainable Security Programs

1 rating

Explore strategies for building sustainable security programs, addressing burnout, risk alignment, and organizational culture to create effective and resilient information security practices.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

How to Fake Friends and Find People - A Build-A-Buddy Case Study

1 rating

Explore operational security techniques for creating temporary online personas, isolating true identities, and conducting OSINT missions with insights from ex-Special Operations cyber operators.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

You Lost Data, Unfortunately - Who Will Knock on Your Door and Why

1 rating

Explore data breach consequences, stakeholders, and regulatory implications across industries. Learn about post-incident processes and interactions with external parties and government agencies.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Don't Boil the Ocean - Using MITRE ATT&CK to Guide Hunting Activity

1 rating

Learn to use MITRE ATT&CK framework for focused threat hunting, avoiding overwhelming approaches. Discover how to build hypotheses, plan hunts, and operationalize findings for more effective cybersecurity practices.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Log in Your Own Eye - Exploiting a Stealthy C2 Channel in Azure Logging Infrastructure

Explore Azure Log Analytics exploitation as a covert channel, uncovering potential security threats in cloud logging infrastructure and learning mitigation strategies.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Got Popcorn? What's on the Vuln Channel Tonight?

Explore a platform for automated code scanning and vulnerability data streaming, designed to provide developers with fast, timely information on potential security issues.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

So You Think You Can Secure Your Cloud - Red Team Engagements in GCP

Comprehensive guide to adversary simulations in GCP, covering initial access, persistence, privilege escalation, C2 using Google products, and data exfiltration techniques.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Don't Turn Your Back on Ransomware

Explore ransomware's evolution, attack methods, and defense strategies. Learn to sharpen your cybersecurity skills against this persistent threat through real-world examples and practical mitigation techniques.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Achieving HITRUST on a Budget

Learn how Ginger achieved HITRUST certification efficiently, saving time and money. Discover strategies for streamlined compliance, including self-assessment, program integration, and leveraging existing controls.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Avoiding Insidious Points of Compromise in Infrastructure Access Systems

Explore war stories and learn to build secure infrastructure access systems. Analyze classic incidents and discover why the industry's "zero-trust" definition may be flawed.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

XSS Mitigation - The State of the Art

Comprehensive overview of XSS attacks and modern defense strategies, covering browser-based, server-side, and framework-specific mitigations for web developers and security professionals.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Threat Hunting - Using MITRE ATT&CK Against Carbanak Malware

Explore threat hunting using MITRE ATT&CK framework against Carbanak malware, covering tactics, techniques, and procedures for effective cybersecurity defense and mitigation strategies.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Mistakes Made Integrating Security Scanning into CI/CD

Explore common pitfalls and solutions for integrating security scanning into CI/CD pipelines, learning from real-world experiences and best practices.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Fantastic AWS Attacks and Where to Find Them

Explore AWS attack techniques and build effective cloud defenses using the ATT&CK framework. Learn to create and operationalize detections for enhanced AWS infrastructure security.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Graph Based Detection and Response with Grapl

Explore graph-based security analytics with Grapl, leveraging Python for powerful attack detection, behavior analysis, and streamlined investigations in complex environments.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk