44CON Talks & Presentations

44CON Information Security Conference

What is eBPF and Why Should You Care?

Explore eBPF technology: its basics, implementation challenges, and diverse applications in system observability, security, and performance optimization for developers and IT professionals.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Lord of War - Investigating the Theft of a Gambling Platform and Outsmarting the Thieves

Forensic investigation of a gaming platform theft in Ukraine, using original evidence. Insights into cybercrime, hacker tactics, and investigative techniques in hostile jurisdictions.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

The Need for a Human Touch in Cyber Security

Exploring human-centric approaches to cybersecurity, emphasizing people skills, empathy, and communication to enhance defense strategies and organizational resilience against cyber threats.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Tooling Up for Kerberos

Explore Kerberos security with custom tools, focusing on local machine vulnerabilities and privilege escalation. Gain insights into complex Kerberos artifacts for enterprise network protection.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

The Office of Danger - A Choose Your Own Adventure Story

Interactive social engineering simulation where audience makes real-time decisions to infiltrate a high-security office building, showcasing quick thinking and adaptability needed in covert operations.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

I'm the Captain Now!

Explore maritime cybersecurity vulnerabilities and learn how to hack ship systems, from steering controls to PLCs. Gain insights into industrial control systems and IoT security in the nautical world.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

44CON Information Security Conference

The Log4J Rollercoaster - From an Incident Response Perspective

Insights from the frontlines of Log4J incident response: preparing for unknown vulnerabilities, leveraging threat intelligence, and aiding the community during a major cybersecurity crisis.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Ciphers and Crime

Explore encrypted messages in criminal cases with cryptology expert Klaus Schmeh. Discover fascinating insights into historical and modern codebreaking techniques used in crime investigations.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Codecepticon – Building an Obfuscator to Bypass Modern EDR and AV

Explore Codecepticon, an offensive security obfuscator for C#, PowerShell, and VBA. Learn its development process, effectiveness against modern EDR and AV, and real-world applications in Red and Purple Team engagements.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

The Tale of Phineas Fisher

Explore the intriguing story of Phineas Fisher, a notorious hacker, through their own words and manifestos. Delve into high-profile cyber incidents involving surveillance, finance, and politics.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Threat Hunting - From Bodging to Efficiency in 7 Steps

Learn efficient threat hunting techniques in 7 steps, from basic concepts to advanced strategies. Ideal for aspiring hunters and professionals looking to enhance their cybersecurity skills.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Supply Chain Unchained - How To Be A Bad SaaS

Explore software supply chain vulnerabilities, focusing on SaaS security. Learn about access control, API restrictions, maturity evaluation, logging, cloud security, and code integrity.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Aviation Security 101

Explore aviation security vulnerabilities through pen testing research, covering access risks, performance calculations, maintenance mode issues, and potential misunderstandings in the industry.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

The Anti-Checklist Manifesto

Explore effective third-party risk assessment beyond checklists. Learn to ask insightful questions that reveal an organization's commitment to security and trustworthiness in the software supply chain.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Why Are We Still Doing Authentication Wrong?

Explore common authentication pitfalls, costs, and phases. Learn about 2FA misconceptions, password security, and new guidelines for robust authentication practices in the digital age.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk