Security BSides San Francisco Courses

So You Think You Can Secure Your Cloud - Red Team Engagements in GCP

Comprehensive guide to adversary simulations in GCP, covering initial access, persistence, privilege escalation, C2 using Google products, and data exfiltration techniques.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Don't Turn Your Back on Ransomware

Explore ransomware's evolution, attack methods, and defense strategies. Learn to sharpen your cybersecurity skills against this persistent threat through real-world examples and practical mitigation techniques.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Achieving HITRUST on a Budget

Learn how Ginger achieved HITRUST certification efficiently, saving time and money. Discover strategies for streamlined compliance, including self-assessment, program integration, and leveraging existing controls.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Avoiding Insidious Points of Compromise in Infrastructure Access Systems

Explore war stories and learn to build secure infrastructure access systems. Analyze classic incidents and discover why the industry's "zero-trust" definition may be flawed.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

XSS Mitigation - The State of the Art

Comprehensive overview of XSS attacks and modern defense strategies, covering browser-based, server-side, and framework-specific mitigations for web developers and security professionals.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Threat Hunting - Using MITRE ATT&CK Against Carbanak Malware

Explore threat hunting using MITRE ATT&CK framework against Carbanak malware, covering tactics, techniques, and procedures for effective cybersecurity defense and mitigation strategies.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Mistakes Made Integrating Security Scanning into CI/CD

Explore common pitfalls and solutions for integrating security scanning into CI/CD pipelines, learning from real-world experiences and best practices.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Fantastic AWS Attacks and Where to Find Them

Explore AWS attack techniques and build effective cloud defenses using the ATT&CK framework. Learn to create and operationalize detections for enhanced AWS infrastructure security.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Graph Based Detection and Response with Grapl

Explore graph-based security analytics with Grapl, leveraging Python for powerful attack detection, behavior analysis, and streamlined investigations in complex environments.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Checking Your --privileged Container

Explore container security, focusing on privileged containers, capabilities, and security contracts. Learn practical demos and admission controller techniques for enhanced protection.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

How to Kill an AWS Access Key

Learn to eliminate static AWS Access Keys using Security Token Service, SAML, and Identity Providers for enhanced cloud security and short-lived credentials.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Visualizing Security

Explore data analysis and visualization techniques for security through real-world examples, covering various chart types and data transformation methods to enhance security insights.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Mental Health for Hackers - Contents Under Pressure

Experts discuss mental health challenges in infosec, addressing burnout, anxiety, and depression. Offers insights on building supportive cultures and improving workplace well-being.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Phishy Little Liars - Pretexts That Kill

Discover advanced techniques for creating specialized, custom pretexts in penetration testing, using target-specific data to enhance effectiveness and avoid detection.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Security Learns to Sprint - DevSecOps

Explore strategies for integrating security into DevOps, focusing on the "Three Ways" and providing actionable steps for immediate implementation in your organization.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk