Security BSides San Francisco Courses

Building Sustainable Security Programs

1 review

Explore strategies for building sustainable security programs, addressing burnout, risk alignment, and organizational culture to create effective and resilient information security practices.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

You Lost Data, Unfortunately - Who Will Knock on Your Door and Why

1 review

Explore data breach consequences, stakeholders, and regulatory implications across industries. Learn about post-incident processes and interactions with external parties and government agencies.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

How to Fake Friends and Find People - A Build-A-Buddy Case Study

1 review

Explore operational security techniques for creating temporary online personas, isolating true identities, and conducting OSINT missions with insights from ex-Special Operations cyber operators.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Don't Boil the Ocean - Using MITRE ATT&CK to Guide Hunting Activity

1 review

Learn to use MITRE ATT&CK framework for focused threat hunting, avoiding overwhelming approaches. Discover how to build hypotheses, plan hunts, and operationalize findings for more effective cybersecurity practices.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Log in Your Own Eye - Exploiting a Stealthy C2 Channel in Azure Logging Infrastructure

Explore Azure Log Analytics exploitation as a covert channel, uncovering potential security threats in cloud logging infrastructure and learning mitigation strategies.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Got Popcorn? What's on the Vuln Channel Tonight?

Explore a platform for automated code scanning and vulnerability data streaming, designed to provide developers with fast, timely information on potential security issues.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

So You Think You Can Secure Your Cloud - Red Team Engagements in GCP

Comprehensive guide to adversary simulations in GCP, covering initial access, persistence, privilege escalation, C2 using Google products, and data exfiltration techniques.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Secure by Design - Usable Security Tooling

Explore strategies for creating effective security products by prioritizing usability, leading to better and more secure experiences for users.

• YouTube
• 17 minutes
• On-Demand
• Conference Talk

So You’re the First Security Hire - Creating a Security Program and Integrating Security into Your Company’s Culture

Guidance for pioneering security professionals on establishing a robust security program, integrating it into company culture, and balancing protection with business needs.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

Operation PZCHAO - Dissecting a Cyber-Attack

Explore a sophisticated cyber-attack targeting Asian institutions, dissecting its modules, capabilities, and impact on victims' data in this in-depth analysis of Operation PZCHAO.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

Owning the Smart Home with Logitech Harmony Hub

Explore reverse engineering of Logitech's Harmony smart home hub, uncovering vulnerabilities and discussing their implications for device security and potential exploitation.

• YouTube
• 18 minutes
• On-Demand
• Conference Talk

Fighting Email Phishing with a Custom Cloud IDS

Learn to build a custom cloud-based email IDS to combat phishing, enhancing security while improving operational efficiency. Explore real-time threat adaptation and AWS implementation.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

DNS Attacks - Past, Present, and Future

Explore DNS vulnerabilities, their historical impact, and potential future threats in this comprehensive overview of attack techniques and pentesting applications.

• YouTube
• 16 minutes
• On-Demand
• Conference Talk

Tired of Playing Exploit Kit Whack-A-Mole? Let's Automate

Explore automated detection of Exploit Kits using headless browsers, JavaScript, and DOM inspectors for efficient web crawling and analysis of malware delivery techniques.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

Introduction to Windows Kernel Mode Debugging

Explore Windows kernel debugging essentials, including symbol servers, BSOD analysis, and live debugging. Learn practical approaches to diagnose CPU issues, deadlocks, and blue screens for improved software security.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk