Security BSides Talks & Presentations

Security BSides San Francisco

How to Fake Friends and Find People - A Build-A-Buddy Case Study

1 rating

A case study in operational security for separating real identities from temporary online personas during crowdsourced OSINT and humanitarian missions.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

You Lost Data, Unfortunately - Who Will Knock on Your Door and Why

1 rating

A guide to who gets involved after data loss, from industry stakeholders to government agencies across jurisdictional boundaries.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Don't Boil the Ocean - Using MITRE ATT&CK to Guide Hunting Activity

1 rating

Use MITRE ATT&CK to formulate threat-hunting hypotheses, identify artifacts and indicators, and plan focused hunts.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

BSidesLV

Management Hacking 101 - Leading High Performance Teams

1 rating

Learn management approaches for leading high-performance teams.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Log in Your Own Eye - Exploiting a Stealthy C2 Channel in Azure Logging Infrastructure

Examines how Azure Log Analytics can be abused as a stealthy command-and-control channel, with a proof of concept and mitigation strategies.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Got Popcorn? What's on the Vuln Channel Tonight?

A platform architecture for scalable, continuous vulnerability scanning that delivers actionable findings through CI/CD integrations and ELK dashboards.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

So You Think You Can Secure Your Cloud - Red Team Engagements in GCP

Simulate red-team attacks in GCP using cloud-native persistence, privilege escalation, command and control, lateral movement, and data exfiltration.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Don't Turn Your Back on Ransomware

A live ransomware attack demonstration traces phishing, privilege escalation, lateral movement, domain compromise, and defensive measures for cyber resilience.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Achieving HITRUST on a Budget

A practical strategy for completing a HITRUST assessment in under a year and for less than $100,000.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Avoiding Insidious Points of Compromise in Infrastructure Access Systems

Analyze five major breaches to design infrastructure access systems with no standing credentials, segmented networks, and independently protected authentication.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

XSS Mitigation - The State of the Art

Explores modern defenses against cross-site scripting, from browser controls and Trusted Types to server-side mitigations and supply-chain security.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Threat Hunting - Using MITRE ATT&CK Against Carbanak Malware

Apply the MITRE ATT&CK framework to threat hunting by tracing Carbanak malware tactics, techniques, and behaviors across a banking attack.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Checking Your --privileged Container

Learn how Docker’s --privileged flag weakens container isolation and how Linux capabilities, access controls, and Kubernetes policies reduce the risk.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Visualizing Security

Explore how to turn real-world security data into clearer analyses, visualizations, and animations using practical visual encoding techniques.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Phishy Little Liars - Pretexts That Kill

Build custom social-engineering pretexts from open-source intelligence to make penetration-testing assessments more credible and harder for targets to detect.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk