BSidesLV Courses

Strategies for Secure Development with GraphQL

Explore strategies for building secure GraphQL APIs, including security as a core feature, developer tools for secure applications, and effective request logging techniques.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Regular Expressions in Information Security - A Technical Deep-Dive

Explore the power of regular expressions in infosec, from theory to practical implementation, and learn why they're crucial for security professionals.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Hyper-scale Detection and Response - Cost-Effective SIEM Alternatives

Discover cost-effective, open-source solutions for hyper-scale threat detection, processing 45TB+ logs daily. Learn to enhance security monitoring without expensive SIEM platforms.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Cybersecurity Integration from the Beginning - Perils and Benefits

Explores challenges and benefits of integrating cybersecurity from project inception, offering insights on overcoming resistance, developing secure designs, and building value chains in early-stage cybersecurity implementation.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Mainframe Hacking for CICS and Giggles

Explore mainframe security, vulnerabilities, and exploitation techniques in critical business applications used by Fortune 500 companies for ATMs, taxes, and travel bookings.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Overcoming Barriers in Security DSLs with BabbelPhish - Empowering Detection Engineers

Explore BabbelPhish, an innovative approach using large language models to bridge natural language queries and security DSLs, streamlining threat detection and making detection-as-code platforms more accessible.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Cyber Crash Investigations: Learning from Past Crises

Explore insights from cyber crisis investigations, focusing on prevention, impact reduction, and effective response strategies. Learn from real-world case studies to enhance organizational readiness.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Public Service Journeys - From Hacking Culture to Government Cybersecurity

Explore diverse journeys from military to hacking, and from hacking to government, highlighting how varied experiences strengthen cybersecurity efforts and protect the public.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Free Video

Leveling Up Your Red Team with a New Capability Maturity Model

Introducing a Capability Maturity Model for Red Teams to assess readiness, plan growth, and communicate effectiveness to leadership, enhancing organizational security.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Unveiling the Hidden - Discovering RDP Vulnerabilities Using PDF Files

Innovative OSINT techniques reveal critical RDP vulnerabilities, including remote code execution and security bypasses, without conventional reverse engineering tools. Explore unconventional research methodologies and vulnerability analysis.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Wrangling Cats: How We Coordinate Red Team Testing

Explore an end-to-end process for coordinating Red Team cybersecurity testing, including onboarding, prioritization, resource allocation, and communication strategies to enhance organizational efficiency.

• YouTube
• 15 minutes
• On-Demand
• Free Video

Understanding Technical and Enterprise Tradeoffs in Cybersecurity

Explore strategies for navigating cybersecurity challenges in organizations, understanding human behavior, and negotiating better decision-making when faced with resistance to implementing security solutions.

• YouTube
• 20 minutes
• On-Demand
• Free Video

How to Prioritize Red Team Findings - Introducing CRTFSS: Common Red Team Findings Score System

Learn to prioritize red team findings with the Common Red Team Findings Score System (CRTFSS), enhancing cybersecurity assessment and decision-making processes.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Injection on Steroids - Code-less Code Injections and 0-Day Techniques

Explore advanced code injection techniques and zero-day vulnerabilities without writing code. Learn cutting-edge cybersecurity strategies for identifying and exploiting system weaknesses.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

ATGP - All Your RFz Are Belong to Me - Software Defined Radio Exploits

Explore software-defined radio exploits and their implications for wireless security in this comprehensive presentation on cutting-edge RF technology and potential vulnerabilities.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk