Cooper Courses

Sigma - Generic Signatures for Log Events

Explore generic signatures for log events with Sigma, a YAML-based format for sharing and converting log signatures across different SIEM systems and query languages.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Barncat - Using MISP for Bulk Surveillance of Malware

Explore MISP for large-scale malware surveillance, focusing on config extraction, analysis techniques, and practical applications in cybersecurity threat intelligence.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Keynterceptor - Press Any Key to Continue

Explore USB security vulnerabilities and the Keynterceptor, a stealthy keyboard implant for capturing and injecting keystrokes, with real-world demonstration and implications.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Intel AMT - Using & Abusing the Ghost in the Machine

Explore Intel AMT vulnerabilities and forensics techniques. Learn about potential attacks, mitigations, and non-destructive investigation methods for compromised systems. Gain insights into remote management technology risks.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Let's Play with WinDBG & .NET

Explore automated .NET analysis using WinDBG, focusing on PowerShell scripts and .NET packer unpacking. Gain practical insights through live demonstrations and real-world case studies.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Queer Privacy & Building Consensual Systems

Exploring privacy challenges faced by marginalized communities through real stories, highlighting the need for inclusive, safer tools and systems that protect vulnerable individuals.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Snuffleupagus - Killing Bugclasses in PHP 7, Virtual-Patching the Rest

Explore Snuffleupagus, an open-source PHP security module that kills bug classes, implements virtual-patching, and enhances protection against vulnerabilities without modifying application code.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

When Crypto Fails

Exploring real-world cryptographic failures in malware, this talk offers insights into identifying and potentially exploiting these vulnerabilities, with practical examples and a useful triage tool.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

WiFi Exploitation - How Passive Interception Leads to Active Exploitation

Explore WiFi exploitation techniques, from passive interception to active attacks. Learn about device profiling, rogue access points, and MitM attacks. Includes demonstration of a new sensor framework for visualizing 802.11 data.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

House Intercoms Attacks - When Frontdoors Become Backdoors

Explores vulnerabilities in modern building intercoms, demonstrating practical attacks and security risks associated with connected entry systems. Highlights potential backdoors and recommends security measures for M2M solutions.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Interesting Malware - No, I’m Not Kidding

Explore the intriguing CheshireCat malware family, its unique traits, and stealth tactics. Learn about its decade-long operation, retro coding style, and functional obfuscation techniques.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Where Should I Host My Malware?

Explore IoT vulnerabilities, focusing on FTP services in routers and NAS devices. Learn about ScanR framework, malware analysis, and protective measures against these widespread threats.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Bootstrapping an Architectural Research Platform

Explore x86 architecture research, covering CPU privileges, hypervisors, and emerging technologies. Learn to focus on research questions by understanding fundamental architectural concepts.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Credential Assessment - Mapping Privilege Escalation at Scale

Explore privilege escalation techniques in large-scale breaches and learn how to identify and combat credential exposure using a comprehensive framework for both offensive and defensive purposes.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Machine Duping - Pwning Deep Learning Systems

Explore vulnerabilities in deep learning systems and learn techniques to manipulate image recognition, speech recognition, and phishing detection through practical demonstrations and attack methodologies.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk