Security BSides San Francisco Courses

Exposed Secrets - How Public Git Repositories and Docker Images Expose Millions of Secrets Like API Keys and Security Certificates Every Year

Uncover the alarming spread of exposed API keys and secrets in public repositories. Learn about research findings, causes, and implications for cybersecurity.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Ooga Booga - Avoiding Reinvention of the Wheel - Useful Security Tools and Lessons to Know

Discover Marie Kondo-inspired techniques for managing security challenges efficiently. Learn about useful tools and lessons to avoid reinventing the wheel in under-resourced security teams.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Practical Threat Hunting With Machine Learning

Explore practical applications of machine learning in threat hunting and detection, featuring case studies of high-value detections from two years of research and implementation.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

An Unlikely Friendship - Why Security Engineers and Product Managers Should Be Working Together

Discover strategies for security engineers to collaborate with product managers, enhancing security features, accelerating team growth, and unlocking revenue from security-conscious customers.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Read the Fantastic Manual - Writing Security Docs People Will Actually Read

Strategies for creating effective security documentation that people will read and use. Covers identifying needs, iterative creation, and measuring success in technical writing.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Go With The -Work-flow

Unveiling security risks in cloud workflow platforms: misconfigurations, credential exposure, data leakage, insecure coding, and containerized malware. Eye-opening research for IT professionals.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Embracing Risk Responsibly - Moving Beyond Inflexible SLAs and Exception Hell by Treating Security Vulnerabilities and Risk Like Actual Debt

Discover how to treat security vulnerabilities as debt, moving beyond rigid SLAs and exception overload. Learn strategies for responsible risk management in cybersecurity.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Biohacker - The Invisible Threat

Exploring the emerging threat of biohacking: how human implants can compromise contactless technology and pose risks to physical and digital security systems.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Redefining Threat Modeling - Security Team Goes on Vacation

Discover innovative approaches to scale threat modeling programs without compromising quality. Learn strategies for efficient security practices that empower teams and enhance overall effectiveness.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

CTF Writeup - Log 'em All

Detailed walkthrough of a challenging Hacking/Reverse Engineering CTF challenge inspired by a Pokemon Red bug, with step-by-step instructions for setup and execution.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Offensive Javascript Techniques for Red Teamers

Explore advanced JavaScript techniques for network reconnaissance and exploitation, focusing on rapid execution and targeting internal vulnerabilities from external sources.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

How Software Transparency Can Help Save the World

Explore software transparency through SBOMs, enhancing vulnerability management and supply chain visibility. Learn how this approach can revolutionize cybersecurity and software development practices.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

A Look at Jython-Enhanced Reverse Engineering with Ghidra

Explore Jython scripting in Ghidra for efficient malware analysis, using real-world examples to enhance reverse engineering techniques and streamline the process of analyzing obfuscated binaries.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Dispatch - Crisis Management Automation When Everything is On Fire

Explore Dispatch, an automation tool for crisis management lifecycles, streamlining incident response from initial report to post-incident review.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Leveraging Osquery for DFIR at Scale

Explore efficient incident response using Osquery for digital forensics, accelerating breach investigations and uncovering attacker breadcrumbs in large-scale environments.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk