Security BSides San Francisco Courses

Threat Hunting - Using MITRE ATT&CK Against Carbanak Malware

Explore threat hunting using MITRE ATT&CK framework against Carbanak malware, covering tactics, techniques, and procedures for effective cybersecurity defense and mitigation strategies.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Mistakes Made Integrating Security Scanning into CI/CD

Explore common pitfalls and solutions for integrating security scanning into CI/CD pipelines, learning from real-world experiences and best practices.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Fantastic AWS Attacks and Where to Find Them

Explore AWS attack techniques and build effective cloud defenses using the ATT&CK framework. Learn to create and operationalize detections for enhanced AWS infrastructure security.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Graph Based Detection and Response with Grapl

Explore graph-based security analytics with Grapl, leveraging Python for powerful attack detection, behavior analysis, and streamlined investigations in complex environments.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Checking Your --privileged Container

Explore container security, focusing on privileged containers, capabilities, and security contracts. Learn practical demos and admission controller techniques for enhanced protection.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

How to Kill an AWS Access Key

Learn to eliminate static AWS Access Keys using Security Token Service, SAML, and Identity Providers for enhanced cloud security and short-lived credentials.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Visualizing Security

Explore data analysis and visualization techniques for security through real-world examples, covering various chart types and data transformation methods to enhance security insights.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Mental Health for Hackers - Contents Under Pressure

Experts discuss mental health challenges in infosec, addressing burnout, anxiety, and depression. Offers insights on building supportive cultures and improving workplace well-being.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Phishy Little Liars - Pretexts That Kill

Discover advanced techniques for creating specialized, custom pretexts in penetration testing, using target-specific data to enhance effectiveness and avoid detection.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Security Learns to Sprint - DevSecOps

Explore strategies for integrating security into DevOps, focusing on the "Three Ways" and providing actionable steps for immediate implementation in your organization.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Securing Coinbase's Edge Payments Infrastructure

Explore secure payment networks, KYC/AML practices, and fraud prevention in cryptocurrency exchanges. Learn about Coinbase's strategies for protecting transactions and ensuring regulatory compliance.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

When GDPR and CCPA Strike - Silver Lining for Security Teams in Data Protection Clouds

Explore how data protection laws like GDPR and CCPA can benefit security teams, informing risk modeling, securing buy-in, and reducing liability exposure for organizations.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

East vs West - How The Coasts Approach Information Security Differently

Explore the contrasting approaches to information security between Wall Street and Silicon Valley, uncovering valuable insights for professionals across various security roles.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Bootstrapping Security

Practical strategies for implementing effective cybersecurity on limited budgets, covering tools, techniques, and cost-saving approaches for organizations with financial constraints.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

The Voight-Kampff Test for Discovering Web Application Vulnerabilities

Explore techniques to differentiate between human-discovered and machine-detected web app vulnerabilities, with insights on manual setup, chain exploits, and real-world case studies.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk