Topic

Detection Engineering talks at BSides

433 talks tagged Detection Engineering from 91 chapters of BSides events worldwide.

Open Source Malware Lab

BSides London · 2016

Technical DFIR Detection Engineering Malware Analysis Intermediary Blue Technical Deep-dives Talk

Open →2016-07

Command-Line Obfuscation: You Can Run, _and_ You Can Hide

BSides Dublin · 2024

Technical DFIR Detection Engineering Talk

Open →2024-06

Security Onion: Peeling Back the Layers of Your Network in Minutes

BSides Augusta · 2013

Technical Tooling DFIR Detection Engineering Network Security Blue Demo Talk

Open →2013-09

David Bianco - The Secret Origins of the Pyramid of Pain

BSides Augusta · 2022

Technical Detection Engineering Threat Intel Intermediary Blue Case Studies and Incidents Analysis Methodology Talk

Open →2022-10

BSidesSF 2017 - Linux Monitoring at Scale with eBPF (Brendan Gregg & Alex Maestretti)

Brendan Gregg Alex Maestretti

BSidesSF · 2017

Technical Detection Engineering Network Security Blue Talk

Open →2017-03

Threat Hunting On Linux And Mac With Auditbeat System Module

BSides Luxembourg · 2019

Technical DFIR Detection Engineering Blue Talk

Open →2019-11

The AI Cyber War: Inside the AI Arms Race Between Attackers and Hunters

BSides SLC · 2025

Technical AI Security Detection Engineering Keynote

Open →2025-10

Objectively Measuring Hunt Value

Justin Kohler Patrick Perry

BSides Augusta · 2018

Technical Detection Engineering Threat Intel Blue Talk

Open →2018-10

Gollum: One Anti-Phish Bot to Rule Them All

BSides Cape Town · 2019

Technical Detection Engineering Threat Intel Tooling Blue Talk

Open →2019-12

BSides London · 2022

Technical Detection Engineering Threat Modeling Intro Blue Talk

Open →2022-01

TL;DR: Applying AI to Security

BSidesSF · 2024

Technical AI Security Detection Engineering Threat Intel Intro Talk

Open →2024-07

Using JA3: Asking for a Friend?

Justin Warner Ed Miles

BSides DC · 2019

Technical Cryptography DFIR Detection Engineering Network Security Blue Red Talk

Open →2019-11

Detecting Malicious Websites using Machine Learning

Ajit Thyagarajan Andrew Beard

BSides DC · 2016

Research Technical Detection Engineering Machine Learning Network Security Intermediary Blue Empirical Research+2

Open →2016-10

Find, Fix, Finish: Generating Competitive Advantage With Threat Hunting

BSides Canberra · 2024

Technical Detection Engineering Threat Intel Blue Methodology Talk

Open →2024-10

Detection as Code: The Engineering-Focused Future of Detection and Response

Jackie Bow Julie Agnes Sparks Jessica Rozhin Louis Barrett

BSidesSF · 2023

Technical Detection Engineering DevSecOps Threat Intel Blue Panel

Open →2023-05

The Art Of Cyber Deception

BSides London · 2025

Technical Detection Engineering Threat Intel Talk

Open →2024-02

Confidently Measuring Attack Technique Coverage by Asking Better Questions

Technical Detection Engineering Malware Analysis Reverse Engineering Blue Talk

Open →2021-10

Next-Gen Detection: Harnessing LLMs for Sigma Rule Automation

BSidesSF · 2024

Technical Detection Engineering Intermediary Blue Talk

Open →2024-07

NLP for Security Log Analysis: Learning to Crawl Before You Run

Arjun Chakraborty

BSidesSF · 2023

Research Technical AI Security Detection Engineering Talk

Open →2023-05

Enterprise Security Monitoring: Comprehensive Intel-Driven Detection

BSides Augusta · 2013

Technical Detection Engineering Threat Intel Methodology Talk

Open →2013-09

Understanding, Abusing and Monitoring AWS AppStream 2.0

Rodrigo Montoro

BSides Las Vegas · 2022

Technical Cloud IAM Detection Engineering Talk

Open →2022-09

Building an Effective Intrusion Detection Program

BSidesSF · 2017

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2017-03

Understanding IRSF Fraud: Protecting Against SMS Exploitation

Vien Van Senthil Sivasubramanian

BSidesSF · 2025

Technical Detection Engineering Threat Intel Web AppSec Talk

Open →2025-10

macOS Endpoint Security Framework: What It Can Do And How To Use It

BSides Munich · 2022

Technical Detection Engineering Malware Analysis Blue Talk

Open →2022-05

A Quick, Efficient Yet Not Entirely Sane Introduction to Deception

BSides Frankfurt

Technical Active Directory Detection Engineering Intermediary Blue Demo Talk

Open →2025-03

How to Stop Worrying & Build a Modern Detection & Response Program

BSides Berlin · 2023

Technical Detection Engineering Threat Intel Threat Modeling Blue Methodology Talk

Open →2024-01

Threat hunting: Using MITRE ATT&CK against Carbanak malware

BSidesSF · 2022

Technical Detection Engineering Malware Analysis Threat Intel Intermediary Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2022-07

Storytelling For SOC Analysts: Effective Investigation Notetaking And Report Writing

BSides London · 2025

Career Career & Soft Skills Detection Engineering Intro Talk

Open →2025-02

Threat Hunting AWS CloudTrail Logs with Microsoft Sentinel: Real-Time Attack Demo

BSides Sydney · 2025

Technical Cloud IAM Detection Engineering Threat Intel Intermediary Demo

Open →2025-02

MITRE D3FEND and How to Master It

BSides Sydney · 2025

Technical Detection Engineering Threat Intel Threat Modeling Blue Case Studies and Incidents Analysis Methodology Talk

Open →2025-02

Quick And Easy Forensic Timelines Via Sysmon, WEF, And ELK

BSides Munich · 2019

Technical DFIR Detection Engineering Blue Talk

Open →2019-03

Honeypot Boo Boo: Better Breach Detection With Deception Inception

Technical Detection Engineering Threat Intel Blue Talk

Open →2023-10

Network Security: It Just Makes pfSense

BSides Knoxville · 2026

Technical Detection Engineering Network Security Talk

Open →2025-01

Eyeing the Onion

Brad Shoop Chris Rimondi

BSides Augusta · 2013

Technical Detection Engineering Network Security Blue Demo Talk

Open →2013-09

CoinMiner Are Evasive - Omri Segev Moyal & Thomas Roccia

Omri Segev Moyal Thomas Roccia

BSides TLV · 2018

Technical Detection Engineering Malware Analysis Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2018-07

Logs and Tactical Defence

Allan Stojanovic

BSides Toronto · 2014

Technical Detection Engineering Network Security Threat Intel Blue Talk

Open →2014-12

Your Intrusion Detection Still Sucks (And What to Do About It)

BSidesSF · 2025

Technical Detection Engineering Threat Intel Talk

Open →2025-10

Leveraging Osquery for DFIR at Scale

Sohini Mukherjee

BSidesSF · 2020

Technical DFIR Detection Engineering Intermediary Talk

Open →2020-03

"SSH, so hot right now. Profiling it with HASSH" - Ben Reardon & Adel Karimi

Ben Reardon Adel Karimi

BSides Canberra · 2019

Technical Detection Engineering Network Security Threat Intel Talk

Open →2019-05

The No BS SOC Story

BSides Tampa · 2024

Career Detection Engineering Blue Talk

Open →2024-05

Using DeTT&CT and the MITRE ATT&CK Framework to Assess Your Security Posture

David Branscome

BSides Knoxville · 2022

Technical Detection Engineering Threat Modeling Intermediary Blue Demo Talk

Open →2022-05

Finetuning Large Language Models (LLMs) for Security Log Detections

BSidesSF · 2024

Technical AI Security Detection Engineering Machine Learning for Security Threat Intel Intermediary Blue Technical Deep-dives+1

Open →2024-07

Alex Kirk - Incident response and threat hunting using Bro/Zeek data

BSides Augusta · 2019

Technical DFIR Detection Engineering Threat Intel Intermediary Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2019-10

Team Threat Hunting with AI and Automation

Kenneth Peeples

BSides Charleston · 2024

Technical AI Security Container Security Detection Engineering Threat Intel Talk

Open →2024-11

A Case Study of MacOS Supply Chain Compromise

Jason Craig Michael George

BSidesSF · 2018

Technical Detection Engineering Malware Analysis Supply Chain Security Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2018-04

BSides Perth Day 1 (Part 2)

BSides Perth · 2021

Technical DFIR Detection Engineering Malware Analysis Intermediary Blue Technical Deep-dives Talk

Open →2021-09

Prioritising your security work using MITRE ATT&CK

BSides Tallinn · 2022

Technical Detection Engineering Threat Intel Threat Modeling Intermediary Blue Talk

Open →2022-10

One Technique, Two Techniques, Red Technique, Blue Technique: Operationalizing MITRE ATT&CK

Jamie Williams Daniel Weiss

Technical Detection Engineering Threat Intel Threat Modeling Talk

Open →2018-11

AV Evasion - How Adversaries Aim to Bypass Antivirus Tools

BSides Joburg · 2024

Technical Detection Engineering Malware Analysis Demo Talk

Open →2024-08

Surfacing a Hydra: Unveiling a Multi-Headed Chinese State-Sponsored Campaign Against a Foreign Government

BSides Charleston · 2024

Technical Detection Engineering Malware Analysis Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2024-11

A Study on Intrusion Detection Systems with a Practical Experiment on Snort - Vigneshwar Sethuraman

Vigneshwar Sethuraman

BSides Vancouver · 2021

Technical Detection Engineering Network Security Intermediary Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2021-06

Don't Google 'PowerShell Hunting'

Josh Rykowski Sean Eyre

BSides Augusta · 2017

Technical DFIR Detection Engineering Malware Analysis Talk

Open →2017-09

Thinking Outside the SOC: Structured Analytical Techniques for the Overloaded Cyber Analyst

Haley Beam Alina Thai

BSides Las Vegas · 2025

Technical DFIR Detection Engineering Threat Intel Talk

Open →2025-08

Hunting PowerShell Attacks on The Open Internet

BSides Augusta · 2019

Technical Detection Engineering Malware Analysis Threat Intel Blue Talk

Open →2019-10

AI and Machine Learning in Network Security - Igor Mezic

BSides KC · 2022

Research Technical AI Security Detection Engineering Network Security Talk

Open →2022-10

From Soup To Nuts: Building A Detection-as-Code Pipeline - David French

BSides Dublin · 2024

Technical Detection Engineering Intermediary Blue Talk

Open →2024-06

eBPF For Security Monitoring

BSides Leeds · 2019

Technical Detection Engineering Malware Analysis Network Security Demo Talk

Open →2019-01

Keynote: Winning the AI Race: Verifiability is All You Need

BSides Frankfurt · 2025

Technical AI Security Detection Engineering Threat Modeling Technical Deep-dives Keynote

Open →2025-12

Connect: How to build your own SIEM with open source tools and methodologies

BSides Atlanta · 2020

Technical Tooling Detection Engineering Threat Hunting Tooling Blue Talk

Open →2020-04

Scaling Amazon GuardDuty: A Comprehensive Detection Strategy

Avinash Reddy Thumma Amin

BSides Ahmedabad · 2025

Technical Cloud IAM Detection Engineering Threat Intel Talk

Open →2025-05

How to Train Your Detection Dragon

BSidesSF · 2025

Technical Detection Engineering Blue Talk

Open →2025-10

Quando o Simples Vence: Anatomia Real dos Ataques que Continuam Funcionando

Ricardo Tavares

BSides São Paulo · 2025

War Stories Active Directory Detection Engineering Malware Analysis Threat Intel Blue Purple Case Studies and Incidents Analysis+1

Open →2025-06

Hunting Supply Chain Threats Using Anomaly Detection

Craig Chamberlain

BSidesSF · 2023

Technical Cloud IAM Detection Engineering Supply Chain Security Case Studies and Incidents Analysis Methodology Talk

Open →2023-05

A Deep Look into a Chinese Advanced Attack

BSides DC · 2015

Technical Detection Engineering Malware Analysis Threat Intel Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2015-12

Attacking Microsoft Exchange: Fusing LightNeuron with Cobalt Strike

BSides Cape Town · 2023

Technical Detection Engineering Malware Analysis Reverse Engineering Advanced Purple Red Talk

Open →2023-12

Hack the system: exploring libpam with uprobes and eBPF

Peter McConnell

BSides Belfast · 2025

Technical Detection Engineering Reverse Engineering Advanced Demo Talk

Open →2025-02

Testing Security Solutions with Atomic Red Team

BSides Knoxville · 2018

Technical Detection Engineering Threat Intel Blue Talk

Open →2019-04

Automating Event Log Production & Testing for SIEM Detection

BSides Augusta · 2017

Technical Detection Engineering Tooling Blue Talk

Open →2017-09

Using MITRE D3FEND to Defend Against Cyber Threats

Jacek Grymuza Kacper Zariczny

BSides Warsaw · 2024

Technical Detection Engineering Network Security Threat Modeling Blue Talk

Open →2024-07

Unpacking Impacket: Detect remote execution of offensive tools

BSides SLC · 2022

Technical Active Directory DFIR Detection Engineering Blue Talk

Open →2023-01

Drop It Like It's Qbot: Detecting Initial Execution Earlier with OSINT

BSides Augusta · 2023

Technical Detection Engineering Malware Analysis OSINT Threat Intel Blue Talk

Open →2023-10

BSides St. John's · 2025

Technical AI Security Detection Engineering Supply Chain Security Keynote

Open →2025-09

The Math Behind Threat Hunting: Find Attacks Hidden in Your Logs

BSides SLC · 2026

Technical Detection Engineering Threat Intel Intermediary Blue Talk

Open →2026-04

LLM-Powered Network Intrusion Detection

BSides SLC · 2025

Technical AI Security Detection Engineering Network Security Blue Talk

Open →2025-06

5 Gaps Exposed In 30+ Real-World Tabletop Exercises - Ashu Savani

BSides London · 2025

Research Technical Detection Engineering Case Studies and Incidents Analysis Empirical Research Talk

Open →2026-03

PowerShell Is Dead – Epic Learnings

Ben Turner Doug McLeod

BSides Scotland · 2019

Technical Detection Engineering Malware Analysis Reverse Engineering Advanced Red Talk

Open →2019-06

Ana Respício Fernando Alves Alysson Bessani Pedro Ferreira

BSides Lisbon · 2018

Technical Detection Engineering OSINT Threat Intel Technical Deep-dives Talk

Open →2018-12

Simple Data Exfiltration in a Secure Industry Environment

BSides Boston · 2016

Technical War Stories Detection Engineering Network Security Threat Intel Red Talk

Open →2016-08

Open Source GitOps for Detection Engineering

BSides Las Vegas · 2023

Technical Detection Engineering DevSecOps Blue Demo Talk

Open →2023-10

Open Source Intelligence Based Intrusion Detection System

BSides Lisbon · 2018

Technical Detection Engineering OSINT Threat Intel Blue Talk

Open →2018-12

Security Lessons Learnt From The Cloud Frontline - Ben Fletcher

BSides Belfast · 2024

Technical Cloud IAM Detection Engineering Threat Intel Case Studies and Incidents Analysis Talk

Open →2024-03

Take Down Cyberthreat Dwell Time With Optimum Security

BSides Vancouver · 2021

Technical Detection Engineering Threat Intel Blue Talk

Open →2021-06

Think You're Stealthy? How to Detect Attacks in AD

Rachit Arora Sai Sathvik Ruppa Aakash Raman

BSides Charm · 2025

Technical Active Directory DFIR Detection Engineering Intermediary Blue Talk

Open →2025-05

Understanding the Latest MITRE ATT&CK Evaluation Data

BSides Vancouver · 2021

Technical Detection Engineering Threat Intel Blue Talk

Open →2021-06

BSides LV 2023 - Proving Ground - Tuesday

Yuval Zakaria Nicholas Carroll

BSides Las Vegas · 2023

Technical Detection Engineering Malware Analysis OSINT Reverse Engineering Talk

Open →2023-08

PW - Detecting Credential Abuse

Troy Defty Kathy Zhu

BSides Las Vegas

Technical Detection Engineering Threat Intel Blue Talk

Open →2024-09

SplunkGPT: Fine-tuning GPT-3 for Detection Engineering

Jake Coyne Andrew Gomez

BSides Augusta · 2023

Technical AI Security Detection Engineering Tooling Talk

Open →2023-10

Fernando Tomlinson - Gaining 20/20 vision during an incident with PowerShell

Fernando Tomlinson

BSides Augusta · 2019

Technical DFIR Detection Engineering Malware Analysis Blue Talk

Open →2019-10

Tired of Playing Exploit Kit Whack-A-Mole? Let's automate

BSidesSF · 2017

Technical Detection Engineering Malware Analysis Vulnerability Research Technical Deep-dives Talk

Open →2017-03

BG - The Fault in Our Metrics: Rethinking How We Measure Detection & Response

BSides Las Vegas

Technical Detection Engineering Blue Talk

Open →2024-09

Fundamentals That Time Forgot

BSides SLC · 2015

Technical Detection Engineering Network Security Intro Talk

Open →2015-04

Using BloodHound as a Defender: Tips from the Red Team

BSides Charm · 2024

Technical Active Directory Detection Engineering Threat Modeling Blue Talk

Open →2024-06

Testing Endpoint Security Solutions with Atomic Red Team

BSides Asheville · 2018

Technical Detection Engineering Threat Modeling Intermediary Blue Purple Methodology Demo

Open →2019-03

Slipping The Net: Qakbot, Emotet And Defense Evasion

BSides Cambridge · 2024

Technical Detection Engineering Malware Analysis Social Engineering Blue Talk

Open →2024-01

MS SQL Super Quality Logs

BSides Perth · 2023

Technical Detection Engineering Threat Intel Intermediary Blue Methodology Technical Deep-dives Talk

Open →2023-08

Secrets of the Second Factor: Threat Hunting with Multi-Factor Authentication

BSides Las Vegas · 2022

Technical Detection Engineering Threat Intel Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2022-09

How to Fight DDoS Attacks from the Command Line

Michael McMahon

Bsides CT · 2025

Technical Detection Engineering Network Security Blue Demo Talk

Open →2026-01

Network Segmentation without a Network Engineer

BSides Charm · 2024

Technical Active Directory Detection Engineering Network Security Talk

Open →2024-06

From Hours To Minutes: Automating Incident Response Triage With Open-Source Tools

Markus Einarsson

BSides Munich · 2025

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2026-02

Enemy Within: Leveraging Purple Teams for Advanced Threat Detection & Prevention

Jayson Grace Adam Bradbury

BSides Las Vegas · 2023

Technical Detection Engineering Threat Intel Threat Modeling Purple Case Studies and Incidents Analysis Methodology Talk

Open →2023-10

View all 433 talks tagged Detection Engineering →