Security BSides San Francisco Courses

How to Fake Friends and Find People - A Build-A-Buddy Case Study

1 review

Explore operational security techniques for creating temporary online personas, isolating true identities, and conducting OSINT missions with insights from ex-Special Operations cyber operators.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

You Lost Data, Unfortunately - Who Will Knock on Your Door and Why

1 review

Explore data breach consequences, stakeholders, and regulatory implications across industries. Learn about post-incident processes and interactions with external parties and government agencies.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Building Sustainable Security Programs

1 review

Explore strategies for building sustainable security programs, addressing burnout, risk alignment, and organizational culture to create effective and resilient information security practices.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Don't Boil the Ocean - Using MITRE ATT&CK to Guide Hunting Activity

1 review

Learn to use MITRE ATT&CK framework for focused threat hunting, avoiding overwhelming approaches. Discover how to build hypotheses, plan hunts, and operationalize findings for more effective cybersecurity practices.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

From Cockroaches to Marble Floors - What Happens When You Turn On the Lights?

Practical tools and methodologies to transform software security posture by eliminating false distinctions between security bugs and other defects, improving product quality and aligning teams.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Transform Your Presentation Skills

Enhance your public speaking with expert tips on confidence, audience engagement, and effective slide design for impactful presentations in the tech industry.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

The GCP Metadata API - Security Considerations, Vulnerabilities, and Remediations

Explore GCP Metadata API security: risks, attacks, defenses, and best practices. Learn about service accounts, Kubernetes, and Cloud Build implications for your organization's cloud infrastructure.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Chrome Extension Risks and You

Explore Chrome extension risks, malicious examples, and Lyft's strategic approach to mitigate threats at scale. Learn effective strategies for enhancing browser security.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Hanging on the Telephone - Hacking VoIP

Explore VoIP vulnerabilities and hacking techniques, from historical phone phreaking to modern threats like toll fraud and vishing, with insights on protecting communication systems.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

An Effective Approach to Software Obfuscation

Explore effective software obfuscation techniques, their limitations, and a novel approach to enhance code protection against reverse engineering and analysis.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

WHOIS Calling the 80s to Get Their Finger Back

Explore creating a remote access trojan using TCP services like Whois and Finger, discussing implementation, detection, and mitigation strategies for this Live Off the Land technique.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Beyond AV - Detection-Oriented File Analysis

Explore advanced file analysis techniques for enhanced threat detection, focusing on Strelka's features and applications in enterprise security.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

All Your Containers Are Belong to Us

Explore container orchestration security risks, focusing on exposed management nodes and APIs. Learn implications, recommendations, and see demonstrations of potential exploits in popular platforms.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Friend or Replicant - How Attackers Automate and Disguise Themselves

Explore the tactics behind fake online accounts, from creation to manipulation, and learn how attackers exploit various vectors to influence the digital landscape at scale.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Two-Faces of WASM Security

Explore WebAssembly's dual nature: its potential for malicious use in sophisticated attacks and the vulnerabilities it introduces, presenting challenges for both users and web developers.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk