Home
Talks
CFP Guide
What is BSides?
About
Contact
Light
← All talks
Team
Blue talks at BSides
710 talks tagged
Blue
from 93 chapters of BSides events worldwide.
Related topics
Detection Engineering
Technical
Talk
Threat Intel
DFIR
Intermediary
47:15
Closed For Business: Taking Down Darknet Markets
John Shier
BSides London
· 2019
War Stories
Intro
Blue
Case Studies and Incidents Analysis
Talk
Open →
2019-06
42:16
Catching the Catchers: Open Source Stingray Detection in the Wild
Michael Raymond
Bsides CT 2025
Technical
Cellular Security
OSINT
Intermediary
Blue
Talk
Open →
2025-12
33:48
Deep Dive on the Dark Web
John Shier
BSides London
· 2018
Technical
Intro
Blue
Talk
Open →
2018-06
49:41
Open Source Malware Lab
Robert Simmons
BSides London
· 2016
Technical
DFIR
Detection Engineering
Malware Analysis
Intermediary
Blue
Technical Deep-dives
Talk
Open →
2016-07
28:04
Exposing Malicious USB Cables: Hardware Detection of Embedded Implants
Jaynie Shorb
BSides PDX
· 2022
Technical
Intermediary
Blue
Technical Deep-dives
Demo
Talk
Open →
2022-10
31:04
Microsoft EMET Overview and Demonstration
Kevin Ginousso
BSides Peru 2015
Technical
Tooling
Blue
Demo
Talk
Open →
2015-06
27:37
PowerShell-Fu — Hunting on the Endpoint
Chris Gerritz
BSides Las Vegas
· 2016
Technical
DFIR
Malware Analysis
Threat Intel
Blue
Technical Deep-dives
Talk
Open →
2016-08
18:23
Forensicating Windows Artifacts: Investigation Without Event Logs!
Renzon Cruz
BSides London
· 2019
Technical
Blue
Talk
Open →
2019-06
44:22
Diamond Model for Intrusion Analysis: What You Need to Know
Andy Pendergast
BSides DC
· 2014
Research
Blue
Methodology
Talk
Open →
2014-10
46:38
How to 10X Your Company's Security (Without a Series D)
Clint Gibler
BSidesSF
· 2020
Technical
Cloud IAM
DevSecOps
Threat Modeling
Blue
Talk
Open →
2020-03
48:48
Confessions Of A Bug Bounty Triager
Glenn Pegden
BSides Leeds
· 2019
Community
Blue
Talk
Open →
2019-01
51:37
Security Onion: Peeling Back the Layers of Your Network in Minutes
Doug Burks
BSides Augusta
· 2013
Technical
Tooling
DFIR
Detection Engineering
Network Security
Blue
Demo
Talk
Open →
2013-09
32:11
Hijacking .NET to Defend PowerShell
Amanda Rousseau
BSidesSF
· 2017
Technical
Blue
Talk
Open →
2017-03
48:21
PowerShell Security: Defending the Enterprise from the Latest Attack Platform
Sean Metcalf
BSides DC
· 2016
Technical
Active Directory
Blue
Talk
Open →
2016-10
36:51
ThreatPursuit VM
Dan Kennedy
BSides Canberra
· 2020
Tooling
Malware Analysis
Threat Intel
Blue
Demo
Talk
Open →
2020-05
1:05:41
Hunting for Credential Dumping Attacks in Modern Windows Environments
Andrew Case
BSides Philly
· 2023
Technical
Active Directory
DFIR
Malware Analysis
Blue
Talk
Open →
2024-01
30:27
David Bianco - The Secret Origins of the Pyramid of Pain
David Bianco
BSides Augusta
· 2022
Technical
Detection Engineering
Threat Intel
Intermediary
Blue
Case Studies and Incidents Analysis
Methodology
Talk
Open →
2022-10
28:52
BSidesSF 2017 - Linux Monitoring at Scale with eBPF (Brendan Gregg & Alex Maestretti)
Brendan Gregg
Alex Maestretti
BSidesSF
· 2017
Technical
Detection Engineering
Network Security
Blue
Talk
Open →
2017-03
44:35
Anti-forensics Techniques Used By Threat Actors In The Wild
Hela Lucas
BSides London
· 2024
Technical
DFIR
Malware Analysis
Blue
Case Studies and Incidents Analysis
Talk
Open →
2024-02
47:47
IDS Configuration for Beginners
Nick Leghorn
BSides SATX
· 2018
Technical
Intro
Blue
Demo
Talk
Open →
2018-07
53:54
Reverse Engineering Sherlock Holmes Style: Obfuscated APIs & The Art of Deduction
Katie Deakin-Sharpe
BSides Canberra
Technical
Malware Analysis
Reverse Engineering
Advanced
Blue
Talk
Open →
2025-11
50:28
PowerShell Is DEAD — Epic Learnings!
Ben Turner
Doug McLeod
Rob Maslen
BSides London
· 2019
Technical
Advanced
Blue
Red
Talk
Open →
2019-06
47:45
John Heasman - Doing More in AppSec by Doing Less
John Heasman
BSides Knoxville
Technical
Threat Modeling
Web AppSec
Blue
Methodology
Talk
Open →
2024-09
34:22
Misbehaving Binaries: Methods to Detect LOLBin Abuse
Rachel Schwalk
BSides KC
· 2023
Technical
Blue
Talk
Open →
2023-10
38:26
The Woman Who Squashed Terrorists When an Embassy Gets Hacked
Chris Kubeka
BSides Cape Town
· 2019
War Stories
DFIR
Threat Intel
Blue
Case Studies and Incidents Analysis
Keynote
Open →
2019-12
46:44
Discover Analytic Gaps with Unfetter
Matt Davis
Shaun McCullough
BSides DC
· 2017
Technical
Blue
Talk
Open →
2017-10
42:44
Threat Hunting On Linux And Mac With Auditbeat System Module
Aaron Jewitt
BSides Luxembourg
· 2019
Technical
DFIR
Detection Engineering
Blue
Talk
Open →
2019-11
55:35
Objectively Measuring Hunt Value
Justin Kohler
Patrick Perry
BSides Augusta
· 2018
Technical
Detection Engineering
Threat Intel
Blue
Talk
Open →
2018-10
50:12
Active Directory Password Blacklisting
Leeren Chang
BSides Las Vegas
· 2018
Technical
Active Directory
Blue
Demo
Talk
Open →
2018-09
29:09
Implementing a Kick-Butt Training Program: BLUE TEAM GO!
Ryan Chapman
BSidesSF
· 2019
Career
Blue
Talk
Open →
2019-03
40:35
Defense In Depth: Designing Networks That Survive First Contact
BSides Delaware
· 2012
Technical
Network Security
Intermediary
Blue
Talk
Open →
2012-11
45:10
Gollum: One Anti-Phish Bot to Rule Them All
Byron Rudman
BSides Cape Town
· 2019
Technical
Detection Engineering
Threat Intel
Tooling
Blue
Talk
Open →
2019-12
56:11
Polowanie na czerwony październik
Dawid Golak
Jarosław Pukacki
BSides Warsaw
· 2019
Blue
Talk
Open →
2019-10
1:07:27
Polowanie na wewnętrznego wroga
Mateusz Pawłowski
BSides Warsaw
· 2019
Technical
Blue
Talk
Open →
2019-10
56:31
Using JA3: Asking for a Friend?
Justin Warner
Ed Miles
BSides DC
· 2019
Technical
Cryptography
DFIR
Detection Engineering
Network Security
Blue
Red
Talk
Open →
2019-11
13:24
MITRE D3FEND
James Gibbins
BSides London
· 2022
Technical
Detection Engineering
Threat Modeling
Intro
Blue
Talk
Open →
2022-01
46:48
Detecting Malicious Websites using Machine Learning
Ajit Thyagarajan
Andrew Beard
BSides DC
· 2016
Research
Technical
Detection Engineering
Machine Learning
Network Security
Intermediary
Blue
Empirical Research
+2
Open →
2016-10
50:58
It, Do it Live (PowerShell Digital Forensics)
Jared Atkinson
BSides DC
· 2015
Technical
Blue
Demo
Talk
Open →
2015-11
36:18
Macabre Stories of a Hacker in the Public Health Sector (Chile)
Philippe Delteil
BSides Cape Town
· 2019
War Stories
DFIR
Privacy
Vulnerability Research
Blue
Case Studies and Incidents Analysis
Talk
Open →
2019-12
41:04
Hunt Or Be Hunted
Alex Davies
BSides London
· 2017
Technical
Blue
Talk
Open →
2017-06
24:21
Find, Fix, Finish: Generating Competitive Advantage With Threat Hunting
Brody Nisbet
BSides Canberra
· 2024
Technical
Detection Engineering
Threat Intel
Blue
Methodology
Talk
Open →
2024-10
46:31
Detection as Code: The Engineering-Focused Future of Detection and Response
Jackie Bow
Julie Agnes Sparks
Jessica Rozhin
Louis Barrett
BSidesSF
· 2023
Technical
Detection Engineering
DevSecOps
Threat Intel
Blue
Panel
Open →
2023-05
10:54
Using Network Miner To Reconstruct Network Traffic
Matthew Short
BSides London
· 2019
Technical
Intro
Blue
Demo
Talk
Open →
2019-06
24:45
Honeydocs and Offensive Countermeasures
Roy Firestein
BSides Toronto
· 2014
Technical
DFIR
Threat Intel
Blue
Demo
Talk
Open →
2014-12
55:25
Confidently Measuring Attack Technique Coverage by Asking Better Questions
Matt Graeber
BSides Augusta
Technical
Detection Engineering
Malware Analysis
Reverse Engineering
Blue
Talk
Open →
2021-10
44:06
Cyberhydraulik w akcji - czyli skąd i jak cieknie!
Adam Lange
BSides Warsaw
· 2019
Blue
Red
Talk
Open →
2019-10
32:12
Back to the SOCless Future
Ubani Balogun
BSidesSF
· 2019
Technical
Blue
Talk
Open →
2019-03
39:22
Inside The Ransomware Toolbox: How To Beat Cybercriminals At Their Own Game
Will Thomas
BSides London
· 2025
Technical
Blue
Talk
Open →
2025-02
59:07
Malware Analysis 101: N00b to Ninja in 60 Minutes
BSides Las Vegas
· 2014
Technical
Malware Analysis
Intro
Blue
Talk
Open →
2016-12
37:59
Next-Gen Detection: Harnessing LLMs for Sigma Rule Automation
Dave Johnson
BSidesSF
· 2024
Technical
Detection Engineering
Intermediary
Blue
Talk
Open →
2024-07
30:07
GSuite Digital Forensics and Incident Response
Megan Roddie
BSides SATX
· 2018
Technical
Cloud IAM
DFIR
Intermediary
Blue
Case Studies and Incidents Analysis
Talk
Open →
2018-07
46:36
Incident Management with PowerShell
Matt Johnson
BSides Detroit
· 2013
Technical
DFIR
Blue
Talk
Open →
2013-06
47:42
Threat Hunting with RockNSM
Bradford Dabbs
BSides KC
· 2018
Technical
Blue
Talk
Open →
2018-06
19:45
Attacking Malware with AI
Dimitris Prasakis
BSides Munich
· 2022
Technical
AI Security
Malware Analysis
Blue
Talk
Open →
2022-05
37:51
Building an Effective Intrusion Detection Program
Jason Craig
BSidesSF
· 2017
Technical
DFIR
Detection Engineering
Threat Intel
Blue
Talk
Open →
2017-03
20:43
Application Fingerprinting with Kitsune
Peter Vicherek
BSides Toronto
· 2015
Technical
Intermediary
Blue
Case Studies and Incidents Analysis
Talk
Open →
2015-11
16:01
SOC It Up! Common Frustrations and Solutions in SOC Teams Today
Jymit Khondhu
BSides London
· 2019
Community
Technical
Blue
Talk
Open →
2019-06
23:20
Bye-Bye False Positives: Using AI to Improve Detection
Ivan Novikov
BSidesSF
· 2019
Technical
Web AppSec
Blue
Talk
Open →
2019-03
29:35
LSASS - What should we be doing?
Robert Wilson
BSides Augusta
· 2021
Technical
Active Directory
Threat Modeling
Intermediary
Blue
Talk
Open →
2021-10
29:03
macOS Endpoint Security Framework: What It Can Do And How To Use It
Connor Morley
BSides Munich
· 2022
Technical
Detection Engineering
Malware Analysis
Blue
Talk
Open →
2022-05
44:54
A Quick, Efficient Yet Not Entirely Sane Introduction to Deception
John Strand
BSides Frankfurt
Technical
Active Directory
Detection Engineering
Intermediary
Blue
Demo
Talk
Open →
2025-03
38:25
How to Stop Worrying & Build a Modern Detection & Response Program
Allyn Stott
BSides Berlin
· 2023
Technical
Detection Engineering
Threat Intel
Threat Modeling
Blue
Methodology
Talk
Open →
2024-01
29:22
Analyzing AutoIt Malware: Tools and Techniques
Chris Neal
Jerome Radcliffe
BSides Las Vegas
· 2021
Technical
Malware Analysis
Reverse Engineering
Intermediary
Blue
Talk
Open →
2021-08
27:54
Blue Team Fundamentals
Benjamin Hering
BSidesSF
· 2018
Technical
Intro
Blue
Talk
Open →
2018-04
52:59
Hiding in the clouds: How attackers can use applications for sustained persistence and how to find it
Mark Morowczynski
Michael Epping
Bsides CT
· 2020
Technical
Cloud IAM
Blue
Talk
Open →
2020-11
50:58
Threat hunting: Using MITRE ATT&CK against Carbanak malware
Amol Sarwate
BSidesSF
· 2022
Technical
Detection Engineering
Malware Analysis
Threat Intel
Intermediary
Blue
Case Studies and Incidents Analysis
Technical Deep-dives
+1
Open →
2022-07
29:42
Maltego In The Enterprise
David Bressler
BSides Boston
· 2013
Technical
OSINT
Threat Intel
Blue
Demo
Talk
Open →
2013-06
25:05
How to Kill an AWS Access Key
Benjamin Hering
BSidesSF
· 2020
Technical
Cloud IAM
Blue
Talk
Open →
2020-03
31:20
Don't Boil the Ocean: Using MITRE ATT&CK to Guide Hunting Activity
John Stoner
BSidesSF
· 2019
Technical
Blue
Talk
Open →
2019-03
57:19
PowerShell post-exploitation, the Empire has fallen
Michael Gough
BSides SATX
· 2018
Technical
Blue
Red
Talk
Open →
2018-07
18:02
Making Malware Analysis Less Scary
Jack Resetti
BSides London
· 2025
Technical
Malware Analysis
Reverse Engineering
Intro
Blue
Demo
Talk
Open →
2026-03
33:40
Quick And Easy Forensic Timelines Via Sysmon, WEF, And ELK
Aaron Jewitt
BSides Munich
· 2019
Technical
DFIR
Detection Engineering
Blue
Talk
Open →
2019-03
22:40
Pensieve: Finding Malicious Artifacts in Container Environments
Yathi Naik
BSidesSF
· 2018
Technical
Container Security
DFIR
Malware Analysis
Intermediary
Blue
Technical Deep-dives
Talk
Open →
2018-04
27:56
Honeypot Boo Boo: Better Breach Detection With Deception Inception
Justin Varner
BSides Munich
Technical
Detection Engineering
Threat Intel
Blue
Talk
Open →
2023-10
43:20
Eyeing the Onion
Brad Shoop
Chris Rimondi
BSides Augusta
· 2013
Technical
Detection Engineering
Network Security
Blue
Demo
Talk
Open →
2013-09
33:30
MITRE D3FEND and How to Master It
Saba Bagheri
BSides Sydney
· 2025
Technical
Detection Engineering
Threat Intel
Threat Modeling
Blue
Case Studies and Incidents Analysis
Methodology
Talk
Open →
2025-02
43:40
Diaphora: a new FOSS program diffing tool
Joxean Koret
BSides Lisbon
· 2015
Technical
Reverse Engineering
Vulnerability Research
Intermediary
Blue
Technical Deep-dives
Talk
Open →
2015-07
33:39
A year in the wild: fighting malware at the corporate level
Kuba Sendor
BSidesSF
· 2016
Technical
Blue
Talk
Open →
2016-04
14:55
Connecting the dots: A beginner's experience of threat actor tracking - Keith Short
Keith Short
BSides London
· 2018
Technical
Malware Analysis
Threat Intel
Intro
Blue
Talk
Open →
2018-06
56:30
Switching Sides: The Practical Benefits of Switching from Red to Blue to Purple
Maddie Stone
BSides Charleston
· 2019
Career
Blue
Purple
Red
Keynote
Open →
2019-11
24:40
Logs and Tactical Defence
Allan Stojanovic
BSides Toronto
· 2014
Technical
Detection Engineering
Network Security
Threat Intel
Blue
Talk
Open →
2014-12
22:52
WiFi Pineapple Active Detection via a Raspberry Pi Zero
Jason Bertman
BSides SLC
· 2020
Technical
Wireless Security
Blue
Talk
Open →
2020-03
17:09
I've seen you get hacked! (AI Real-Time Attack Simulation)
Nithen
BSides Joburg
Technical
Intermediary
Blue
Technical Deep-dives
Demo
Open →
2024-12
51:22
The No BS SOC Story
Mark Simos
BSides Tampa
· 2024
Career
Detection Engineering
Blue
Talk
Open →
2024-05
58:15
Modern Linux Kernel Mitigations
Ray Veldkamp
Matthew Kurz
BSides Canberra
· 2023
Technical
Vulnerability Research
Blue
Technical Deep-dives
Talk
Open →
2023-10
25:35
Secret Hunting
Tanya Janca
BSidesSF
· 2023
Technical
DevSecOps
Supply Chain Security
Intro
Blue
Talk
Open →
2023-05
51:24
Red Blue Purple AI
Jason Haddix
BSides Boulder
· 2024
Technical
AI Security
OSINT
Blue
Purple
Red
Keynote
Open →
2024-09
29:14
Alex Kirk - Incident response and threat hunting using Bro/Zeek data
Alex Kirk
BSides Augusta
· 2019
Technical
DFIR
Detection Engineering
Threat Intel
Intermediary
Blue
Case Studies and Incidents Analysis
Technical Deep-dives
+1
Open →
2019-10
48:34
Using DeTT&CT and the MITRE ATT&CK Framework to Assess Your Security Posture
David Branscome
BSides Knoxville
· 2022
Technical
Detection Engineering
Threat Modeling
Intermediary
Blue
Demo
Talk
Open →
2022-05
46:07
Canary Tokens - why and how to implement them and related gotchas
BSides PDX
· 2024
Technical
Blue
Talk
Open →
2024-11
26:09
Life of a Bug: An Insight on the GitHub Bounty Program
Jeffrey Guerra
Caitlin Buckshaw
BSidesSF
· 2023
Technical
Vulnerability Research
Blue
Case Studies and Incidents Analysis
Talk
Open →
2023-05
30:15
Incident Response Evidence Collection & Triage
John Meyers
BSides Peru
· 2017
Technical
DFIR
Malware Analysis
Blue
Demo
Talk
Open →
2017-06
25:10
Finetuning Large Language Models (LLMs) for Security Log Detections
Wilson Tang
BSidesSF
· 2024
Technical
AI Security
Detection Engineering
Machine Learning for Security
Threat Intel
Intermediary
Blue
Technical Deep-dives
+1
Open →
2024-07
50:58
Tales from the trenches: Cyber brawl with an Advanced Threat Actor
Ishaq Zafar
Ahmed Muneeb
BSides Islamabad
· 2020
War Stories
Blue
Talk
Open →
2020-11
43:03
Social Engineerios: How AI Changes (and Doesn't Change) Social Engineering
Aaron Strong
BSides Tampa
· 2026
Technical
AI Security
Social Engineering
Intro
Blue
Talk
Open →
2026-02
19:52
Using an mTLS Identity Provider to achieve Password-less auth, Device Health Attestation, and low Earth orbit
Armen Tashjian
BSidesSF
· 2023
Technical
Cloud IAM
Cryptography
Blue
Talk
Open →
2023-05
31:52
A Case Study of MacOS Supply Chain Compromise
Jason Craig
Michael George
BSidesSF
· 2018
Technical
Detection Engineering
Malware Analysis
Supply Chain Security
Blue
Case Studies and Incidents Analysis
Technical Deep-dives
Talk
Open →
2018-04
41:24
BSides Perth Day 1 (Part 2)
BSides Perth
· 2021
Technical
DFIR
Detection Engineering
Malware Analysis
Intermediary
Blue
Technical Deep-dives
Talk
Open →
2021-09
30:34
Ethical Hacking: DIY Mobile Security Workstation (For Cheap)
Dale Meredith
BSidesSF
· 2019
Tooling
Blue
Red
Demo
Open →
2019-03
29:46
X-Ray of Malware Evasion Techniques: Analysis, Dissection, Cure
Thomas Roccia
BSides Sydney
· 2023
Technical
Malware Analysis
Reverse Engineering
Blue
Technical Deep-dives
Talk
Open →
2023-05
View all 710 talks tagged Blue →
[ feedback ]
Spotted a wrong year, missing speaker, broken link, or anything off? Send a quick note.
From:
Subject:
Message:
Send →
