BSidesLV Courses

How to Succeed as a Freelance Pentester

Advice on building a successful freelance career as a penetration tester.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Oauth Third Party Not Departing

A security-focused session on OAuth in third-party integrations, centered on the “not departing” scenario.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

SBOM is Here - Making Progress - Not Excuses

A conference talk on making practical progress with software bills of materials (SBOMs).

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

ICS Security Assessments 101 or How da Fox I Test Dis?

An introductory talk on assessing the security of industrial control systems, presented at BSidesLV 2022.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Lessons Learned from the CISA COVID Task Force & Healthcare Attacks

Lessons learned from the CISA COVID Task Force and cyberattacks targeting healthcare.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Failing Upwards - How to Rise in Cybersecurity by Finding and Exploiting Your Weaknesses

A cybersecurity talk about turning personal weaknesses into opportunities for professional growth.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Hacking Remote Interviewing - Lessons Learned

Practical lessons for remote interviews, from optimizing bandwidth, equipment, and environment to handling questions, rapport, OSINT checks, and onboarding.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Find Your North Star

A session on finding your north star, presented in the Hire Ground program at BSidesLV.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Security AI in the Real World - Lessons Learned from Building Practical Machine Learning Systems Deployed to Hundreds of Thousands of Networks

Lessons learned from building practical machine learning systems deployed to hundreds of thousands of networks.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Model Robustness Isn't Security

Explains why machine-learning model robustness does not guarantee security.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Weeding Out Living-off-the-land Attacks at Scale

Explore approaches for weeding out living-off-the-land attacks at scale.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Repurposing Vulnerability Tickets to Predict Severity Levels - An Introduction to Natural Language Processing and Classification Algorithms

Repurpose vulnerability tickets as text data to predict severity levels with natural language processing and classification algorithms.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

That Escalated Quickly - A System for Alert Prioritization

A system for prioritizing security alerts using ground truth.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Lessons Learned While Modeling Rare Catastrophic Cyber Loss Events

Lessons learned from modeling rare catastrophic cyber loss events.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

I Got an Alert, Now What?

Learn effective strategies for handling security alerts, from initial triage to resolution, enhancing your incident response skills and decision-making process.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk