GrrCon Talks & Presentations

Pacu Attack and Post Exploitation in AWS

Explore AWS post-exploitation techniques and Pacu, an open-source AWS exploitation framework, to enhance cloud security awareness and improve defensive strategies.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Red vs Blue - The Untold Chapter

Explore red team vs. blue team cybersecurity dynamics, uncovering lesser-known aspects and strategies for both offensive and defensive operations in this insightful presentation.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Augusta00 Keynote

Engaging keynote by Dave Kennedy exploring cutting-edge cybersecurity trends, threats, and strategies for effective defense in today's rapidly evolving digital landscape.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

How to Rob a Bank Over the Phone

Explore social engineering techniques used in phone-based bank fraud, understanding vulnerabilities and prevention strategies to enhance cybersecurity awareness and defense mechanisms.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Bounty Hunters

Explore the world of bug bounty hunting and learn strategies for finding and reporting vulnerabilities in web applications and networks.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Threat Modeling - How to Actually Do It and Make It Useful

Learn practical threat modeling techniques for effective cybersecurity. Explore various methodologies, tools, and frameworks to identify and mitigate potential risks in software and systems.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Guaranteed Failure Awareness - The Greatest Cyber Insanity

Explore the concept of cyber insanity and guaranteed failure awareness in this thought-provoking talk by Joshua Naga Crumbaugh, offering insights into cybersecurity challenges and potential solutions.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

InSpec Compliance as Code

Explore InSpec for compliance-as-code, learning how to automate security and compliance testing in infrastructure and applications.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Physical Badges and Why It Matters

Explore physical badge security, cloning risks, and defensive measures in access control systems. Learn about attack scenarios and offensive capabilities in this informative talk.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Intelligence Creating Intelligence - Leveraging What You Know to Improve Finding What You Don't

Explore techniques for creating and leveraging threat intelligence, from data collection to implementation, to enhance cybersecurity efforts and improve threat detection capabilities.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Internet Explorer Does What It Wants

Explore Internet Explorer's quirks and unexpected behaviors in web development, uncovering challenges and solutions for cross-browser compatibility.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Data Data Everywhere but No One Stops to Think

Explore data analysis challenges and solutions in cybersecurity with insights from industry experts, focusing on effective strategies for handling large-scale data in security operations.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Life, Death, the Nematodes - Long Live Cyber Resilience

Explore cyber resilience strategies inspired by nematodes, offering insights into adaptive security measures for evolving digital threats and challenges.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Automation and Open Source - Turning the Tide on Attackers

Explore automation and open-source tools for enhancing cybersecurity defenses and countering attackers, presented by John Grigg at GrrCon 2018.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

The Hybrid Analyst - How Phishing Created A New Type of Intel Analyst

Explore how phishing attacks have led to the emergence of hybrid intelligence analysts, combining threat intelligence and phishing analysis skills for enhanced cybersecurity.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk