Security BSides Talks & Presentations

Security BSides London

Forensicating Windows Artifacts - Investigation Without Event Logs

Discover essential Windows artifacts for forensic investigations without event logs. Learn to leverage prefetch files, registry keys, and browser data for effective incident response.

• YouTube
• 18 minutes
• On-Demand
• Conference Talk

Security BSides London

Watching the Watchers - The Stalkerware Surveillance Ecosystem

Explore the hidden world of consumer-grade surveillance tools and their impact on privacy, based on months of research into the stalkerware industry's technical and non-technical aspects.

• YouTube
• 13 minutes
• On-Demand
• Conference Talk

Security BSides London

Exploring Emotet, An Elaborate Everyday Enigma

Dive into the intricacies of Emotet, the notorious and evolving malware family. Learn about its sophisticated operation, components, and the investigative techniques used to reverse engineer this digital threat.

• YouTube
• 14 minutes
• On-Demand
• Conference Talk

Security BSides London

IPv6 for Pentesters

Learn IPv6 security essentials for penetration testing, covering addressing, host discovery, and common vulnerabilities with practical demos and configuration tips.

• YouTube
• 15 minutes
• On-Demand
• Conference Talk

Security BSides London

Honeywords - Detectable Password Theft

Explore the concept of "Honeywords" as a solution to detect password theft, examining implementation, effectiveness, and potential extensions for cross-service protection.

• YouTube
• 16 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

WireGuard from the Ground Up

Comprehensive overview of WireGuard: its implementation, protocol, cryptography, and comparison with other VPN solutions. Learn when and how to use this efficient end-to-end encryption tool.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Keynote - We Need More Mediocre Security Engineers

Challenging elitism in cybersecurity, this talk advocates for inclusivity and rethinking entry barriers to address growing demand and burnout in the field.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

How to 10X Your Company's Security - Without a Series D

Discover actionable strategies to dramatically enhance your company's security posture without significant financial investment. Learn from distilled insights and lessons from DevSecOps and modern AppSec experts.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

DevSecOps State of the Union

Comprehensive overview of DevSecOps best practices, tools, and methodologies. Distills insights from industry leaders to help AppSec teams improve security integration, automation, and culture.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Implementing a Kick-Butt Training Program - Blue Team Go

Discover a framework for building a robust cybersecurity training program that empowers analysts with hands-on skills in incident response, forensics, and threat hunting.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Automating Web Application Bug Hunting

Discover techniques for automating web application vulnerability scanning to enhance bug bounty hunting and application security analysis efficiency.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Abusing WCF Endpoint for RCE and Privilege Escalation

Explore WCF vulnerabilities in .NET programs, focusing on privilege escalation and remote code execution. Learn to identify and exploit these bugs through a real-world case study.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

How to Orchestrate a Cyber Security Incident Tabletop Exercise

Interactive presentation on orchestrating cyber security incident tabletop exercises, focusing on "assume breach" scenarios and guiding participants through simulated timelines and decision-making processes.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Lyft Cartography - Automating Security Visibility and Democratization

Explore Lyft's open-source security intelligence platform for asset tracking, relationship mapping, and automated decision-making. Learn how it improves visibility and empowers teams to enhance security posture.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Hacking the Law - Are Bug Bounties a True Safe Harbor?

Explore the legal risks and challenges of bug bounty programs, examining potential liabilities for hackers and suggesting steps to create safer legal environments for vulnerability disclosure.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk