BSidesCharm Courses

Securing AI-Generated Code: Challenges and Solutions for the Future

Explore the critical challenges and solutions for securing AI-generated code, featuring practical tools and research for building AI security engineering capabilities.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Using Bloodhound as a Defender: Tips from the Red Team

Discover how to leverage BloodHound from a red team perspective to identify and remediate critical Active Directory security flaws, with practical insights using the new ad-recon automation tool.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Securing Generative AI: Threats Old and New

Explore essential security concepts for generative AI and LLMs, understanding both traditional cybersecurity approaches and emerging threats in this evolving technological landscape.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Windows System Monitor (Sysmon) for Incident Investigation and Threat Response

Master Windows System Monitor (Sysmon) for incident investigation, learning to track program execution, registry writes, and DNS queries to effectively trace threat actor activities and enhance system security.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

Purple Teaming: Attack Simulation and Control Validation with Atomic Red

Discover how to leverage Atomic Red Team for simulating cyber attacks, validating security controls, and improving SOC effectiveness through practical demonstrations and MITRE framework mapping.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

AI with a Security Mindset

Explore AI security challenges and opportunities with tech leader Elissa Shevinsky as she shares insights from her extensive experience in privacy, security, and cryptocurrency sectors.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Blackbox Containers: Container Security in the Enterprise

Dive into container security fundamentals, lifecycle management, and enterprise-level best practices for securing containerized applications in modern development environments.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Protecting Yourself From Supply Chain Attacks - Trust Is Overrated

Discover practical strategies and tools for validating hardware and software integrity, minimizing supply chain risks, and implementing effective security measures across your technology stack.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Stop the Leak: Adversarial Thinking in Cybersecurity with PRE-ATT&CK

Explore adversarial thinking techniques in cybersecurity using MITRE PRE-ATT&CK framework to prevent file and data leakage incidents through authentic defensive strategies.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Ten Ways to Frustrate Attackers in Network Security

Discover practical network security strategies and tools from a pentester's perspective to strengthen defenses and make attackers' work significantly more challenging and time-consuming.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Active Directory and DNS: A Match Made in Heck - Understanding Directory Services Integration

Dive into the intricate relationship between Active Directory and DNS, exploring security implications, management strategies, and best practices for maintaining a robust directory service infrastructure.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

The Action Group Model for Incident Response

Discover a flexible framework for coordinating incident response teams, improving support structures, and developing staff capabilities during security incidents.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Evolving into the Next-Gen SOC - Baby Steps to the Future

Discover how to transform traditional Security Operations Centers into agile, next-generation entities capable of addressing modern cyber threats and future challenges through practical, actionable steps.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Analysis of North Korean Nation-State Attacks Using MagicRAT Malware

Dive into North Korean APT group Lazarus's cyber-kill chain tactics, examining their MagicRAT malware and attack strategies against global energy companies through detailed MITRE ATT&CK analysis.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Complexity for Complexity's Sake: The Bane of Cybersecurity Programs

Discover how to simplify cybersecurity approaches by avoiding tool overload and focusing on effective, streamlined solutions for better threat management and user experience in modern security programs.

• YouTube
• 52 minutes
• Self-Paced
• Free Video