Security BSides San Francisco Courses

Netrepser - A JavaScript Targeted Attack

Explore Netrepser, a unique JavaScript-based espionage tool using freeware utilities for targeted attacks. Learn its techniques, impact, and how it blends into environments for data exfiltration.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Supply Chain Attack Through CCleaner - Evidence Aurora Operation Still Active

Análisis detallado del ataque de cadena de suministro a CCleaner, explorando su sofisticación, objetivos y conexiones con el grupo APT17/Axiom, destacando la persistente amenaza de ataques estatales avanzados.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Starting a Security Program - Thrills and Spills

Insights on building a security program, emphasizing emotional intelligence, cross-team collaboration, and shared responsibility to achieve compliance and meet customer demands.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

A Case Study of MacOS Supply Chain Compromise

Explore MacOS supply chain vulnerabilities and learn proactive defense strategies using open-source tools for threat detection and malware identification in network environments.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Building a Predictive Pipeline to Rapidly Detect Phishing Domains

Learn to build a predictive pipeline using Python and machine learning to detect phishing domains in real-time, leveraging Certificate Transparency logs and supervised learning techniques.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Security through Visibility - Organizational Communication Strategies for InfoSec Teams

Strategies for InfoSec teams to improve organizational visibility and communication, enhancing collaboration and security posture through practical, implementable techniques.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Building an Effective Intrusion Detection Program

Learn to build an effective intrusion detection program using affordable tools. Covers cloud apps, endpoints, network security monitoring, and crowdsourced incident response to catch breaches quickly.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Make Alerts Great Again

Strategies for creating effective, actionable security alerts: improving signal-to-noise ratio, standardizing definitions, and implementing self-service tools to enhance team efficiency and incident response.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

The Cyber Insurance Emperor Has No Clothes

Explore the flaws in cyber insurance and its impact on security incentives, with insights on better alternatives for improving cybersecurity practices.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

The Underground Economy of Apple ID

Explore the underground economy of Apple IDs, including real-world attacks, profit methods, and protective measures. Learn about vulnerabilities and Apple's mitigation efforts.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

BeyondCorp - Beyond "Fortress" Security

BeyondCorp: A new security model that grants access based on device and user credentials, eliminating the need for traditional VPNs and enabling secure work from any network.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Advanced Internet Dataset Combinations for Threat Hunting and Attack Prediction

Explore advanced techniques for threat hunting and attack prediction using innovative Internet dataset combinations, moving beyond traditional methods for enhanced cybersecurity.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Weathering the Storm - The Art of Crisis Communications

Mastering crisis communications in security: strategies for effective internal and external stakeholder management during high-pressure situations.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Reducing Mixtape to Master Key Scenarios - How to Block the Dark Army from Mayhem Using API-Driven Access Control

Discover API-driven access control strategies to enhance security by eliminating "master keys" and implementing temporary, context-based privileged access in your infrastructure.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Hijacking .NET to Defend PowerShell

Explore stealthy .NET hijacking techniques for defending against PowerShell attacks, covering assembly modification, injection, profiling, and function hooking from a blue team perspective.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk