0xdade Courses

Security Response Survival Skills

1 rating

Human-centered strategies for managing people, emotions, and teams during security incidents.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Chip Decapping on a Budget

A budget-minded, DIY guide to decapping integrated circuits and exposing their wafers, bond wires, and silicon dioxide through mechanical, chemical, and laser methods.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Whitelisting LD PRELOAD for Fun and No Profit

A Linux security talk on abusing LD_PRELOAD for process injection and using the rtld-audit subsystem to whitelist and block unauthorized preloads.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Resistance Isn't Futile - A Practical Approach to Prioritizing Defenses with Threat Modeling

A practical four-step threat modeling approach for prioritizing adversaries and improving an organization’s defenses.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Choose Your Own Adventure Ransomware Response

An audience-driven walkthrough of a ransomware incident, using votes to explore malware, threat actors, and digital forensics response.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

The Beginner’s Guide to the Musical Scales of Cyberwar

A beginner’s guide to applying the law of war to cyber operations, including self-defense, use of force, and gray tactics.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Un-F*#$ing Cloud Storage Encryption

Examines attacks on cloud-storage encryption key rotation and presents two updatable encryption schemes with different security and performance trade-offs.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Demystifying IMSI Catchers

Explores how IMSI catchers manipulate cellular standards to identify, locate, monitor, and detect mobile phones.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

High Confidence Malware Attribution Using the Rich Header

Analyze Microsoft Rich headers and metadata hashes to fingerprint malware build environments and link unknown samples to them with greater confidence.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Pseudo-Doppler Redux

A modern SDR implementation of pseudo-Doppler direction finding locates bursty, packet-based radio systems with a single receiver and fixed antennas.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Skill Building by Revisiting Past CVEs

Revisiting past CVEs to sharpen vulnerability-hunting and exploit-creation skills through hands-on analysis of CVE-2013-5576.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Catch Me If You Can - A Decade of Evasive Malware Attack and Defense

A decade-long survey of how evasive malware detects automated dynamic analysis systems—and how researchers detect and mitigate those evasions.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Vendors, and Risk, and Tigers, and Bears, Oh My - How to Create a Vendor Review Process From the Ground Up

Build a practical vendor review process from the ground up using everyday tools instead of specialized GRC software.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Adversary Detection Pipelines - Finally Making Your Threat Intel Useful

Learn how adversary detection pipelines operationalize threat intelligence, use TTPs to track activity groups, and support purple-team security operations.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

The Cyberlous Mrs. Maisel

A satirical introduction to Russia’s information warfare principles, including maskirovka, disinformation, and reflexive control.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk