Security BSides San Francisco Courses

Building Sustainable Security Programs

1 review

Explore strategies for building sustainable security programs, addressing burnout, risk alignment, and organizational culture to create effective and resilient information security practices.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

How to Fake Friends and Find People - A Build-A-Buddy Case Study

1 review

Explore operational security techniques for creating temporary online personas, isolating true identities, and conducting OSINT missions with insights from ex-Special Operations cyber operators.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

You Lost Data, Unfortunately - Who Will Knock on Your Door and Why

1 review

Explore data breach consequences, stakeholders, and regulatory implications across industries. Learn about post-incident processes and interactions with external parties and government agencies.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Don't Boil the Ocean - Using MITRE ATT&CK to Guide Hunting Activity

1 review

Learn to use MITRE ATT&CK framework for focused threat hunting, avoiding overwhelming approaches. Discover how to build hypotheses, plan hunts, and operationalize findings for more effective cybersecurity practices.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Achieving the Web Isolation Nirvana - How Far Along Are We?

Explore browser isolation mechanisms, their effectiveness, and future directions for enhancing web application security against untrusted code and third-party attacks.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Detection-as-Code - Why It Works and Where to Start

Explore detection-as-code principles for efficient security operations, leveraging version control, test-driven development, code reuse, and automated workflows in detection and response teams.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Buying Security - A Client's Guide

Comprehensive guide for effective security program implementation, focusing on vendor selection, value optimization, and marketplace insights from both client and vendor perspectives.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Attacking and Defending Infrastructure with Terraform - How We Got Admin Across Cloud Environments

Explore techniques for attacking and defending Terraform infrastructure, including secret exfiltration and deploying malicious applications, with insights on mitigating vulnerabilities in cloud environments.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Building Intelligent Automatons with Semantic Reasoning and Horse Glue

Explore graph-based ontologies and semantic reasoning to revolutionize security data analysis, consolidate information, and automate logical conclusions for more efficient cybersecurity workflows.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

So You Think You Can Patch - The Game Show that Questions Your Security Assumptions

Explore the complexities of security patching through a game show format. Experts discuss challenges, policies, and solutions for effective patch management in modern enterprises.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Rise of Coinminers

Exploring the rise of coinminers: their impact, technical aspects, detection methods, and defensive strategies. Insights into tracking campaigns, profits, and future predictions for this emerging cybersecurity threat.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Simple - Open - Mobile - A Look at the Future of Strong Authentication

Explore the future of strong authentication with FIDO U2F and FIDO 2 standards, offering simplicity and security for online users while addressing the limitations of traditional hardware tokens.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

The Tales of a Bug Bounty Hunter

Explore advanced mobile security techniques and real-world vulnerabilities in Instagram, with insights on bug bounty hunting, responsible disclosure, and prevention strategies in the software development lifecycle.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Scan Pwn Next! - Exploiting Service Accounts in Windows

Exploiting Windows service accounts: mismanagement risks, detection techniques, and prevention strategies. Includes live demonstrations and introduces an open-source tool for vulnerability assessment in networks.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

In the Crosshairs - The Trend Towards Targeted Attacks

Explore the rise of targeted cyber attacks, their effectiveness, and economic advantages. Learn about real-world examples and strategies to counter this growing threat.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk