Topic

Detection Engineering talks at BSides

317 talks tagged Detection Engineering from 82 chapters of BSides events worldwide.

49:41

Open Source Malware Lab

BSides London · 2016

Technical DFIR Detection Engineering Malware Analysis Intermediary Blue Technical Deep-dives Talk

Open →2016-07

41:25

Command-Line Obfuscation: You Can Run, _and_ You Can Hide

BSides Dublin · 2024

Technical DFIR Detection Engineering Talk

Open →2024-06

51:37

Security Onion: Peeling Back the Layers of Your Network in Minutes

BSides Augusta · 2013

Technical Tooling DFIR Detection Engineering Network Security Blue Demo Talk

Open →2013-09

30:27

David Bianco - The Secret Origins of the Pyramid of Pain

BSides Augusta · 2022

Technical Detection Engineering Threat Intel Intermediary Blue Case Studies and Incidents Analysis Methodology Talk

Open →2022-10

28:52

BSidesSF 2017 - Linux Monitoring at Scale with eBPF (Brendan Gregg & Alex Maestretti)

Brendan Gregg Alex Maestretti

BSidesSF · 2017

Technical Detection Engineering Network Security Blue Talk

Open →2017-03

42:44

Threat Hunting On Linux And Mac With Auditbeat System Module

BSides Luxembourg · 2019

Technical DFIR Detection Engineering Blue Talk

Open →2019-11

55:35

Objectively Measuring Hunt Value

Justin Kohler Patrick Perry

BSides Augusta · 2018

Technical Detection Engineering Threat Intel Blue Talk

Open →2018-10

1:07:55

The AI Cyber War: Inside the AI Arms Race Between Attackers and Hunters

BSides SLC · 2025

Technical AI Security Detection Engineering Keynote

Open →2025-10

45:10

Gollum: One Anti-Phish Bot to Rule Them All

BSides Cape Town · 2019

Technical Detection Engineering Threat Intel Tooling Blue Talk

Open →2019-12

43:57

TL;DR: Applying AI to Security

BSidesSF · 2024

Technical AI Security Detection Engineering Threat Intel Intro Talk

Open →2024-07

56:31

Using JA3: Asking for a Friend?

Justin Warner Ed Miles

BSides DC · 2019

Technical Cryptography DFIR Detection Engineering Network Security Blue Red Talk

Open →2019-11

13:24

BSides London · 2022

Technical Detection Engineering Threat Modeling Intro Blue Talk

Open →2022-01

46:48

Detecting Malicious Websites using Machine Learning

Ajit Thyagarajan Andrew Beard

BSides DC · 2016

Research Technical Detection Engineering Network Security Talk

Open →2016-10

46:31

Detection as Code: The Engineering-Focused Future of Detection and Response

Jackie Bow Julie Agnes Sparks Jessica Rozhin Louis Barrett

BSidesSF · 2023

Technical Detection Engineering DevSecOps Threat Intel Blue Panel

Open →2023-05

24:21

Find, Fix, Finish: Generating Competitive Advantage With Threat Hunting

BSides Canberra · 2024

Technical Detection Engineering Threat Intel Blue Methodology Talk

Open →2024-10

17:51

The Art Of Cyber Deception

BSides London · 2025

Technical Detection Engineering Threat Intel Talk

Open →2024-02

55:25

Confidently Measuring Attack Technique Coverage by Asking Better Questions

Technical Detection Engineering Malware Analysis Reverse Engineering Blue Talk

Open →2021-10

45:17

Enterprise Security Monitoring: Comprehensive Intel-Driven Detection

BSides Augusta · 2013

Technical Detection Engineering Threat Intel Methodology Talk

Open →2013-09

37:51

Building an Effective Intrusion Detection Program

BSidesSF · 2017

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2017-03

28:25

Understanding IRSF Fraud: Protecting Against SMS Exploitation

Vien Van Senthil Sivasubramanian

BSidesSF · 2025

Technical Detection Engineering Threat Intel Web AppSec Talk

Open →2025-10

50:58

Threat hunting: Using MITRE ATT&CK against Carbanak malware

BSidesSF · 2022

Technical Detection Engineering Malware Analysis Threat Intel Intermediary Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2022-07

33:40

Quick And Easy Forensic Timelines Via Sysmon, WEF, And ELK

BSides Munich · 2019

Technical DFIR Detection Engineering Blue Talk

Open →2019-03

27:56

Honeypot Boo Boo: Better Breach Detection With Deception Inception

Technical Detection Engineering Threat Intel Blue Talk

Open →2023-10

43:20

Eyeing the Onion

Brad Shoop Chris Rimondi

BSides Augusta · 2013

Technical Detection Engineering Network Security Blue Demo Talk

Open →2013-09

33:30

MITRE D3FEND and How to Master It

BSides Sydney · 2025

Technical Detection Engineering Threat Intel Threat Modeling Blue Case Studies and Incidents Analysis Methodology Talk

Open →2025-02

14:37

Storytelling For SOC Analysts: Effective Investigation Notetaking And Report Writing

BSides London · 2025

Career Career & Soft Skills Detection Engineering Intro Talk

Open →2025-02

26:05

CoinMiner Are Evasive - Omri Segev Moyal & Thomas Roccia

Omri Segev Moyal Thomas Roccia

BSides TLV · 2018

Technical Detection Engineering Malware Analysis Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2018-07

24:40

Logs and Tactical Defence

Allan Stojanovic

BSides Toronto · 2014

Technical Detection Engineering Network Security Threat Intel Blue Talk

Open →2014-12

20:25

Leveraging Osquery for DFIR at Scale

Sohini Mukherjee

BSidesSF · 2020

Technical DFIR Detection Engineering Intermediary Talk

Open →2020-03

33:30

Your Intrusion Detection Still Sucks (And What to Do About It)

BSidesSF · 2025

Technical Detection Engineering Threat Intel Talk

Open →2025-10

34:05

"SSH, so hot right now. Profiling it with HASSH" - Ben Reardon & Adel Karimi

Ben Reardon Adel Karimi

BSides Canberra · 2019

Technical Detection Engineering Network Security Threat Intel Talk

Open →2019-05

51:22

The No BS SOC Story

BSides Tampa · 2024

Career Detection Engineering Blue Talk

Open →2024-05

29:14

Alex Kirk - Incident response and threat hunting using Bro/Zeek data

BSides Augusta · 2019

Technical DFIR Detection Engineering Threat Intel Talk

Open →2019-10

25:10

Finetuning Large Language Models (LLMs) for Security Log Detections

BSidesSF · 2024

Technical AI Security Detection Engineering Threat Intel Talk

Open →2024-07

27:48

Team Threat Hunting with AI and Automation

Kenneth Peeples

BSides Charleston · 2024

Technical AI Security Container Security Detection Engineering Threat Intel Talk

Open →2024-11

31:52

A Case Study of MacOS Supply Chain Compromise

Jason Craig Michael George

BSidesSF · 2018

Technical Detection Engineering Malware Analysis Supply Chain Security Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2018-04

41:49

Prioritising your security work using MITRE ATT&CK

BSides Tallinn · 2022

Technical Detection Engineering Threat Intel Threat Modeling Intermediary Blue Talk

Open →2022-10

45:48

One Technique, Two Techniques, Red Technique, Blue Technique: Operationalizing MITRE ATT&CK

Jamie Williams Daniel Weiss

Technical Detection Engineering Threat Intel Threat Modeling Talk

Open →2018-11

45:41

Surfacing a Hydra: Unveiling a Multi-Headed Chinese State-Sponsored Campaign Against a Foreign Government

BSides Charleston · 2024

Technical Detection Engineering Malware Analysis Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2024-11

49:48

AV Evasion - How Adversaries Aim to Bypass Antivirus Tools

BSides Joburg · 2024

Technical Detection Engineering Malware Analysis Demo Talk

Open →2024-08

50:00

Hunting PowerShell Attacks on The Open Internet

BSides Augusta · 2019

Technical Detection Engineering Malware Analysis Threat Intel Blue Talk

Open →2019-10

37:47

Don't Google 'PowerShell Hunting'

Josh Rykowski Sean Eyre

BSides Augusta · 2017

Technical DFIR Detection Engineering Malware Analysis Talk

Open →2017-09

53:12

AI and Machine Learning in Network Security - Igor Mezic

BSides KC · 2022

Research Technical AI Security Detection Engineering Network Security Talk

Open →2022-10

1:02:52

eBPF For Security Monitoring

BSides Leeds · 2019

Technical Detection Engineering Malware Analysis Network Security Demo Talk

Open →2019-01

44:08

From Soup To Nuts: Building A Detection-as-Code Pipeline - David French

BSides Dublin · 2024

Technical Detection Engineering Intermediary Blue Talk

Open →2024-06

33:15

Keynote: Winning the AI Race: Verifiability is All You Need

BSides Frankfurt · 2025

Technical AI Security Detection Engineering Threat Modeling Technical Deep-dives Keynote

Open →2025-12

22:49

Scaling Amazon GuardDuty: A Comprehensive Detection Strategy

Avinash Reddy Thumma Amin

BSides Ahmedabad · 2025

Technical Cloud IAM Detection Engineering Threat Intel Talk

Open →2025-05

50:02

Hunting Supply Chain Threats Using Anomaly Detection

Craig Chamberlain

BSidesSF · 2023

Technical Cloud IAM Detection Engineering Supply Chain Security Case Studies and Incidents Analysis Methodology Talk

Open →2023-05

1:05:35

A Deep Look into a Chinese Advanced Attack

BSides DC · 2015

Technical Detection Engineering Malware Analysis Threat Intel Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2015-12

37:15

How to Train Your Detection Dragon

BSidesSF · 2025

Technical Detection Engineering Blue Talk

Open →2025-10

36:45

Testing Security Solutions with Atomic Red Team

BSides Knoxville · 2018

Technical Detection Engineering Threat Intel Blue Talk

Open →2019-04

24:38

Automating Event Log Production & Testing for SIEM Detection

BSides Augusta · 2017

Technical Detection Engineering Tooling Blue Talk

Open →2017-09

28:33

Hack the system: exploring libpam with uprobes and eBPF

Peter McConnell

BSides Belfast · 2025

Technical Detection Engineering Reverse Engineering Advanced Demo Talk

Open →2025-02

55:33

Using MITRE D3FEND to Defend Against Cyber Threats

Jacek Grymuza Kacper Zariczny

BSides Warsaw · 2024

Technical Detection Engineering Network Security Threat Modeling Blue Talk

Open →2024-07

46:01

Drop It Like It's Qbot: Detecting Initial Execution Earlier with OSINT

BSides Augusta · 2023

Technical Detection Engineering Malware Analysis OSINT Threat Intel Blue Talk

Open →2023-10

32:39

Unpacking Impacket: Detect remote execution of offensive tools

BSides SLC · 2022

Technical Active Directory DFIR Detection Engineering Blue Talk

Open →2023-01

45:17

PowerShell Is Dead – Epic Learnings

Ben Turner Doug McLeod

BSides Scotland · 2019

Technical Detection Engineering Malware Analysis Reverse Engineering Advanced Red Talk

Open →2019-06

39:24

5 Gaps Exposed In 30+ Real-World Tabletop Exercises - Ashu Savani

BSides London · 2025

Research Technical Detection Engineering Case Studies and Incidents Analysis Empirical Research Talk

Open →2026-03

49:46

Ana Respício Fernando Alves Alysson Bessani Pedro Ferreira

BSides Lisbon · 2018

Technical Detection Engineering OSINT Threat Intel Talk

Open →2018-12

37:55

Simple Data Exfiltration in a Secure Industry Environment

BSides Boston · 2016

Technical War Stories Detection Engineering Network Security Threat Intel Red Talk

Open →2016-08

42:42

Open Source Intelligence Based Intrusion Detection System

BSides Lisbon · 2018

Technical Detection Engineering OSINT Threat Intel Blue Talk

Open →2018-12

32:15

Security Lessons Learnt From The Cloud Frontline - Ben Fletcher

BSides Belfast · 2024

Technical Cloud IAM Detection Engineering Threat Intel Case Studies and Incidents Analysis Talk

Open →2024-03

49:21

PW - Detecting Credential Abuse

Troy Defty Kathy Zhu

BSides Las Vegas

Technical Detection Engineering Threat Intel Blue Talk

Open →2024-09

55:44

Fernando Tomlinson - Gaining 20/20 vision during an incident with PowerShell

Fernando Tomlinson

BSides Augusta · 2019

Technical DFIR Detection Engineering Malware Analysis Blue Talk

Open →2019-10

19:06

Tired of Playing Exploit Kit Whack-A-Mole? Let's automate

BSidesSF · 2017

Technical Detection Engineering Malware Analysis Vulnerability Research Technical Deep-dives Talk

Open →2017-03

35:12

Using BloodHound as a Defender: Tips from the Red Team

BSides Charm · 2024

Technical Active Directory Detection Engineering Threat Modeling Blue Talk

Open →2024-06

41:27

Fundamentals That Time Forgot

BSides SLC · 2015

Technical Detection Engineering Network Security Intro Talk

Open →2015-04

43:16

Testing Endpoint Security Solutions with Atomic Red Team

BSides Asheville · 2018

Technical Detection Engineering Threat Modeling Intermediary Demo

Open →2019-03

40:28

Slipping The Net: Qakbot, Emotet And Defense Evasion

BSides Cambridge · 2024

Technical Detection Engineering Malware Analysis Social Engineering Blue Talk

Open →2024-01

47:22

Secrets of the Second Factor: Threat Hunting with Multi-Factor Authentication

BSides Las Vegas · 2022

Technical Detection Engineering Threat Intel Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2022-09

43:57

MS SQL Super Quality Logs

BSides Perth · 2023

Technical Detection Engineering Threat Intel Blue Talk

Open →2023-08

22:43

The Math Behind Threat Hunting: Find Attacks Hidden in Your Logs

BSides SLC · 2026

Technical Detection Engineering Threat Intel Intermediary Blue Talk

Open →2026-04

45:01

How to Fight DDoS Attacks from the Command Line

Michael McMahon

Bsides CT · 2025

Technical Detection Engineering Network Security Blue Demo Talk

Open →2026-01

22:10

Code C.A.I.N – Keeping Your Source Code Under Control

BSides TLV · 2022

Technical Detection Engineering OSINT Supply Chain Security Talk

Open →2022-07

48:43

Applying Data Science to Identify Malicious Actors in Enterprise Logs

Balaji Balakrishnan

BSides DC · 2016

Technical Detection Engineering Malware Analysis Threat Intel Blue Talk

Open →2016-10

29:35

How I Learned to Stop Worrying and Build a Modern Detection & Response Program

BSides Toronto · 2023

Technical Detection Engineering Threat Modeling Blue Methodology Talk

Open →2023-11

51:35

Spotting The Adversary Using The ATT&CK Matrix: A Practical Approach

BSides Bristol · 2019

Technical Detection Engineering Threat Intel Blue Talk

Open →2019-07

50:06

Threat Hunting: Out of the Gate with Windows Logs

Greg Longo Brian Gardiner

BSides Peru · 2019

Technical Detection Engineering Malware Analysis Threat Intel Intro Blue Technical Deep-dives Talk

Open →2019-07

52:34

No Silver Bullet: Multi-Contextual Threat Detection via Machine Learning

Rod Soto Joseph Zadeh

BSides Las Vegas · 2016

Research Technical Detection Engineering Malware Analysis Talk

Open →2016-08

20:02

Falco: runtime security analysis through syscalls

Leonardo Di Donato

BSides Athens · 2020

Technical Container Security Detection Engineering Intermediary Blue Talk

Open →2020-06

46:21

Detection At Scale by Troy Defty

BSides London · 2023

Technical Detection Engineering Threat Intel Blue Talk

Open →2023-05

29:07

SOC Analyst's Arsenal: Essential Tools, Tips & Tricks For Effective Investigations

Technical DFIR Detection Engineering Tooling Intermediary Blue Talk

Open →2023-10

50:01

Grapl — A Graph Platform for Detection and Response

BSides Las Vegas · 2019

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2019-10

23:16

Training the Next Generation of Security Engineers

BSides Las Vegas · 2019

Career Career & Soft Skills Detection Engineering Talk

Open →2019-10

24:38

Cloudy With a Chance of Purple Rain: Leveraging Stratus Red Team to Secure Your Clouds

Luciano Avendano

BSides PDX · 2022

Technical Cloud IAM Detection Engineering Threat Modeling Purple Demo Talk

Open →2022-10

20:27

Georgios Karantzas - It's Duck Season: Forensic Detection of BadUsb Attacks

Georgios Karantzas

BSides TLV · 2023

Technical DFIR Detection Engineering Hardware Hacking Talk

Open →2023-07

29:35

From Hours To Minutes: Automating Incident Response Triage With Open-Source Tools

Markus Einarsson

BSides Munich · 2025

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2026-02

30:42

Follow the Trace: How Traditional AppSec Tools Have Failed Us

BSidesSF · 2025

Technical Detection Engineering Web AppSec Talk

Open →2025-10

47:20

GCP BigQuery as Security Detection Platform

Diana Kramer Norberto García Marín

BSides Las Vegas · 2021

Technical Cloud IAM Detection Engineering Talk

Open →2021-08

45:53

Data Analytics-Based Detection At Scale

Pedro Chaves Jan Pospisil

BSides Lisbon · 2018

Technical Detection Engineering Malware Analysis Blue Talk

Open →2018-12

31:41

'Like at do ye'? Perfecting Threat Detection for Next-Gen SOC's! - Aaron Wilkinson

Aaron Wilkinson

BSides Belfast 2025

Technical Detection Engineering Intermediary Blue Talk

Open →2025-12

49:59

Tinker Tailor LLM Spy: Investigate & Respond to Attacks on GenAI Chatbots

BSides Charm · 2025

Technical AI Security Detection Engineering Blue Case Studies and Incidents Analysis Methodology Talk

Open →2025-05

49:31

Endpoint to Internet: Security Control Validation Using Threat Behavior Emulation

Ken Jenkins Stuart McMurray

BSides DC · 2018

Technical Detection Engineering Threat Intel Blue Red Talk

Open →2018-11

23:14

Tactics, Techniques and Procedures - Building and Running a Blue Team from Scratch

Abhishek Tripathi

BSides SATX · 2018

Technical Detection Engineering Threat Intel Blue Talk

Open →2018-10

37:36

Ransomware Emulation Done Right

Shreyas Rami Shaun Jones

BSides Las Vegas · 2022

Technical Detection Engineering Malware Analysis Threat Intel Purple Case Studies and Incidents Analysis Talk

Open →2022-09

52:07

Revoke-Obfuscation: PowerShell Obfuscation Detection (And Evasion) Using Science

Daniel Bohannon

BSides DC · 2017

Technical Detection Engineering Malware Analysis Blue Talk

Open →2017-10

54:47

GPT-3 and Me: Large Language Models for Defensive Cybersecurity

Joshua Saxe Younghoo Lee

BSides Las Vegas · 2022

Research Technical AI Security Detection Engineering Talk

Open →2022-09

23:58

Complexities Of Vulnerability Management: Strategies For Managing Security Holes by Pablo Ramos

BSides Dublin · 2023

Technical Detection Engineering Vulnerability Research Talk

Open →2023-07

26:46

Collect All the Data; Protect All the Things

Aaron Rosenmund

BSidesSF · 2019

Technical Detection Engineering Threat Intel Blue Talk

Open →2019-03

40:37

How EDRs See Everything (Until They Don't)

Bsides CT · 2025

Technical Detection Engineering Reverse Engineering Technical Deep-dives Talk

Open →2025-12

43:11

Ransomware vs EDR: Inside the Mind of Attackers

Zoziel Pinto Freire

BSides São Paulo · 2025

Technical Detection Engineering Malware Analysis Advanced Red Talk

Open →2025-06

53:42

PlagueScanner: An Open Source Multiple AV Scanner Framework

BSides SLC · 2015

Technical Tooling Detection Engineering Malware Analysis Blue Demo Talk

Open →2015-04

26:43

EDR Killers: Live Rootkit Demo That Blinds Security Tools

BSides SLC 2026

Technical Detection Engineering Malware Analysis Reverse Engineering Advanced Red Demo

Open →2026-04

19:45

Bots of the SOC

Michael Kearney

BSides Cheltenham

Technical AI Security Detection Engineering Blue Demo Talk

Open →2024-07

26:57

Threat Modelling for Detection and Response

Misha Yalavarthy

BSides Berlin · 2021

Technical Detection Engineering Threat Modeling Blue Talk

Open →2021-09

45:20

SocVel Live: Command The Breach

Technical DFIR Detection Engineering Threat Intel Blue Workshop

Open →2025-09

46:04

The Role of AI & ML in Predicting Threat Intelligence

Gunjan Chhillar Kartik Shinde Vandana Verma Setu Parimi

BSides Ahmedabad · 2025

Technical AI Security Detection Engineering Threat Intel Panel

Open →2024-05

23:18

Building a Practical AI Assistant for Security Operations

Vincent Ruijter

BSides Lisbon · 2025

Technical AI Security Detection Engineering Intermediary Talk

Open →2026-01

30:09

Keeping Electric Vehicles Secure: The Need For A CAN Security Framework

Sivaranjani Sankaralingam

BSides Munich · 2022

Technical Detection Engineering Hardware Hacking Threat Modeling Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2022-05

46:39

Kyle Howson: How to build a Security Operations program

BSides Calgary · 2020

Technical Detection Engineering Threat Intel Threat Modeling Blue Talk

Open →2020-12

34:01

Detect the Undetectable with Sysmon and PowerShell Logs

Dimitrios Margaritis

BSides Athens · 2017

Technical Detection Engineering Malware Analysis Threat Intel Blue Talk

Open →2017-10

48:51

PowerShell pew pew pew: Skillz 4 blue team

BSides Columbus · 2020

Technical Detection Engineering Blue Talk

Open →2020-08

18:40

Everyday AI: Leveraging LLMs for Simple, Effective Security Automation

Matthew Sullivan Dominic Zanardi

BSidesSF · 2025

Technical AI Security Cloud IAM Detection Engineering Talk

Open →2025-10

25:05

Obfuscation in Plain Sight

Ed Sabijon Jon Chaipis

BSides Charlotte · 2023

Technical Detection Engineering Malware Analysis Purple Talk

Open →2023-09

58:04

Continuous Security: Monitoring & Active Defense in the Cloud

BSides Iowa · 2018

Technical Cloud IAM Detection Engineering Threat Intel Blue Purple Case Studies and Incidents Analysis Talk

Open →2018-04

32:49

In Search of a Silver Bullet: Malware Detection Strategies Past and Future

Dmitry Samosseiko

BSides Vancouver · 2017

Technical Detection Engineering Malware Analysis Blue Talk

Open →2017-05

25:54

Cyber Deception in GCP with Generative Traps

BSides Charm · 2025

Technical Cloud IAM Detection Engineering Talk

Open →2025-05

15:45

Using LLMs To Accelerate Threat Detection - Richard Finlay Tweed

Richard Finlay Tweed

BSides Bristol · 2025

Technical AI Security Detection Engineering Talk

Open →2025-01

41:33

Use What You Have

BSides Peru · 2023

Technical Active Directory Detection Engineering Network Security Blue Talk

Open →2023-08

27:36

How Microsoft Made Me Love SIEMs Again

BSides Philly · 2020

Technical Cloud IAM Detection Engineering Talk

Open →2020-12

21:36

Look Ma, No Hands! Decentralizing Security for Scale

BSidesSF · 2017

Community Technical Detection Engineering DevSecOps Talk

Open →2017-03

47:34

Securing and Pentesting Kubernetes

BSides Peru · 2022

Technical Container Security Detection Engineering Technical Deep-dives Talk

Open →2022-09

29:31

Blank Space: Filling the Gaps in Atomic and Behavioral Cloud-Specific IoCs

Merav Bar Gili Tikochinski

BSidesSF · 2025

Technical Cloud IAM Detection Engineering Threat Intel Intermediary Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2025-10

31:19

Modern Adversary Tradecraft

BSides Munich · 2021

Technical Detection Engineering Malware Analysis Threat Intel Blue Talk

Open →2021-06

53:34

Marriage of Threat Intelligence and Incident Response

BSides Peru · 2018

Technical Detection Engineering OSINT Threat Intel Intermediary Talk

Open →2018-06

3:20:23

Live BSides Amsterdam 2025 - Tech Track

BSides Amsterdam · 2025

Technical Detection Engineering Malware Analysis Talk

Open →2025-11

50:38

BSides Colombia 2025 Training Programs

Levi Resa Cibel Oliveira

BSides Colombia · 2025

Technical Detection Engineering OSINT Threat Intel Purple

Open →2025-05

25:04

Automating False Positive Whack-a-Mole with Real-Time Behavioral Analytics

BSides Budabest · 2022

Technical Detection Engineering Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2023-06

25:46

Live Interrogation With Osquery

BSides Augusta · 2018

Technical DFIR Detection Engineering Threat Intel Blue Demo Talk

Open →2018-10

1:04:28

Hashbrowns & BAGELS

Mike Schladt Chris Boettcher Andrew Plunkett

BSides Cincinnati · 2017

Technical Tooling Detection Engineering Malware Analysis Threat Intel Talk

Open →2017-05

27:26

Deception Technology... A Maturing Threat Intelligence Solution That Adds Real Value - TrapX

BSides Liverpool · 2019

Technical Detection Engineering Threat Intel Blue Talk

Open →2019-07

50:08

Integrating Large Language Models into Your Security Stack

BSides Tampa · 2026

Technical AI Security Detection Engineering Threat Intel Blue Talk

Open →2026-02

27:28

BSidesSF 2019 - Profiling "VIP Accounts" Access Patterns in User-Centric Data Streams

Rod Soto Joseph Zadeh Xiodan Li

BSidesSF · 2019

Technical Active Directory Detection Engineering Kerberos Threat Intel Talk

Open →2019-03

54:25

Phish Your Users for Free! (As In Beer!)

Julie Fugett Shane Fonyi

BSides KC · 2018

Community Detection Engineering Social Engineering Blue Talk

Open →2018-06

26:59

Adversary Emulation for Everyone!

Cristian Di Bartolomeo Todd Brecher

BSides Toronto · 2023

Technical Detection Engineering Threat Intel Threat Modeling Intro Purple Demo Talk

Open →2023-11

49:37

Lean Threat Intelligence

Lennart Koopmann

BSides San Diego · 2017

Technical Detection Engineering Threat Intel Talk

Open →2017-01

20:33

Purple Team: How This Color Can Help You And Your Organisation Learn and Get Better

Patrick Mathieu

BSides Las Vegas · 2017

Technical Detection Engineering Threat Modeling Purple Talk

Open →2017-09

31:04

Host-Hunting on a Budget

BSides Augusta · 2019

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2019-10

22:11

Screaming About Detection Coverage in ALLCAPS

BSides Philly · 2025

Technical Detection Engineering Threat Modeling Purple Empirical Research Methodology Talk

Open →2026-02

37:57

Evasive Maneuvers: Strategies To Overcome Runtime Detection Tools - Amit Schendel and Nir Levy

Amit Schendel Nir Levy

BSides Prague · 2025

Technical Container Security Detection Engineering Vulnerability Research Advanced Red Talk

Open →2025-04

40:37

One SOC, The Whole SOC, and Nothing But The SOC, So Help Me

Carson Zimmerman

BSidesSF · 2025

Technical Detection Engineering Blue Talk

Open →2025-10

51:16

Shelfware, Threat Intel & Social Engineering: Why Tech Is Not the Answer

BSides Tallinn · 2022

Detection Engineering Social Engineering Threat Intel Talk

Open →2022-10

41:46

Vulnerability Regression Testing with Nuclei Framework

Domagoj Vratarić

Technical Detection Engineering DevSecOps Vulnerability Research Case Studies and Incidents Analysis Talk

Open →2025-03

1:20:35

What is eBPF and Why Should You Care!

BSides Athens · 2022

Technical Detection Engineering Reverse Engineering Tooling Advanced Blue Red Talk

Open →2023-06

54:41

Delivering Control Assurance Through Purple Teaming

Carlos Rodriguez Ben Finke

BSides Charlotte · 2022

Technical Detection Engineering Threat Modeling Purple Talk

Open →2022-09

1:03:24

AI Cyberoperations: Boosting SOC Efficiency with Artificial Intelligence

BSides Colombia

Technical AI Security Detection Engineering Blue Talk

Open →2025-03

39:41

Catch Me if You Can

BSides Asheville · 2016

Technical Active Directory Detection Engineering Threat Intel Red Talk

Open →2018-06

1:00:24

Model Context Protocol (MCP): The Future of AI-Powered SOC Workflows

BSides SLC · 2026

Technical AI Security Detection Engineering Threat Intel Blue Talk

Open →2026-04

41:44

What if we could teach machines to think like hackers?

Alexandru-Bogdan Miron

BSides Budabest 2025

Technical AI Security Detection Engineering Malware Analysis Talk

Open →2026-04

39:18

Big SIEM Energy at Micro-SIEM Cost

BSides Las Vegas

Technical Cloud IAM Detection Engineering Demo Talk

Open →2023-10

24:24

Robust Defense for the Rest of Us

BSides Las Vegas · 2017

Technical Detection Engineering Network Security Threat Modeling Blue Talk

Open →2017-08

30:24

Detecting Network Beaconing With Convolutional Networks And Zeek Logs by Ignacio Arnaldo

Ignacio Arnaldo

BSides Basingstoke

Technical Detection Engineering Network Security Threat Intel Talk

Open →2024-03

37:50

Are your Network Devices Good or Evil?

Hans Ismirnioglou

BSides DC · 2019

Technical Detection Engineering Network Security Threat Intel Demo Talk

Open →2019-10

34:50

AMSI: O cão de guarda que late mas não morde?

Mario Lobo Romero

BSides São Paulo · 2025

Technical Detection Engineering Malware Analysis Technical Deep-dives Talk

Open →2025-06

16:40

SaaSquatch Hunters: Threat Detection In The Wild Of SaaS

Julie Agnes Sparks

BSides Dublin · 2026

Technical Cloud IAM Detection Engineering Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2025-10

25:52

Easy Mode Deception Technology Deployments at Scale

BSides PDX · 2023

Technical Detection Engineering Threat Modeling Blue Talk

Open →2023-10

30:55

Log In Through the Front Door: Automating Defense Against Credential Leaks

Barath Subramaniam

BSidesSF · 2025

Technical Detection Engineering Threat Intel Blue Talk

Open →2025-10

22:15

Detection Mastery: War Stories From The Hunters Side

Ilya Kolmanovich Felix Kurmisch

BSides Toronto · 2020

Technical Detection Engineering Malware Analysis Threat Intel Blue Talk

Open →2021-11

36:33

Honeypot Boo Boo: Better Breach Detection with Deception Inception

BSides Peru · 2022

Technical Detection Engineering Threat Intel Talk

Open →2022-09

29:44

Mackenize Morris - Building a securable architecture for interconnected ICS environments

Mackenize Morris

BSides Augusta · 2019

Technical Detection Engineering Network Security Talk

Open →2019-10

30:23

Trawling for IOCs: Catching C2 in a Sea of Data

BSidesSF · 2025

Technical Detection Engineering Malware Analysis Threat Intel Intermediary Talk

Open →2025-10

30:49

Stacked and Hacked: Crafting the Ultimate COTS Incident Response Arsenal

BSides Philly · 2023

Technical DFIR Detection Engineering Blue Talk

Open →2024-01

48:17

Did You Say Millions Of Sessions? How Cheap Kits Fuel AiTM Attacks On Microsoft 365

BSides London · 2025

Research Technical Detection Engineering Threat Intel Web AppSec Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2026-03

37:55

Purple Teaming 301 – Free Attack Simulation and Control Validation via Atomic Red Team

BSides Charm · 2024

Technical Detection Engineering Threat Modeling Purple Talk

Open →2024-06

41:57

Lying to your fACE: Deploying an ADCS honeypot the easy way

Zdravko Petričušić Josip Pavičić

BSides Zagreb · 2026

Technical Active Directory Detection Engineering Threat Intel Blue Technical Deep-dives Talk

Open →2026-03

38:29

Fantastic Persistence: Creative backdoors & where you will NOT find them

BSides Budabest 2025

Technical Active Directory DFIR Detection Engineering Demo Talk

Open →2026-03

19:04

Can LLMs Take Our Jobs? AI-Assisted Detection Research

Maam Khan Darsh Smith Uday Mayapan RC Oric

BSides PDX · 2024

Research Technical AI Security Detection Engineering Threat Intel Blue Empirical Research Technical Deep-dives+1

Open →2024-11

29:07

BSides Denver 2024

BSides Denver 2024

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2024-09

2:10:27

AJ Leece: Workshop: Incident Response Tabletop

BSides Calgary · 2021

Technical DFIR Detection Engineering Blue Workshop

Open →2021-12

31:44

Something's Phishy: See the Hook Before the Bait

BSidesSF · 2025

Technical Detection Engineering Threat Intel Threat Modeling Blue Technical Deep-dives Talk

Open →2025-06

31:30

Practical Blue Teaming by Peter Jones

Technical Detection Engineering GRC Threat Intel Blue Talk

Open →2023-07

52:58

CloudSec Rules Everything Around Me (C.R.E.A.M.)

BSides Las Vegas · 2019

Technical Cloud IAM DFIR Detection Engineering Intro Talk

Open →2019-10

32:42

Navigating the Unknowns: Fraud Mitigation for Netflix Live Events

Aditi Gupta Yue Wang

BSidesSF · 2025

Technical Detection Engineering Threat Intel Threat Modeling Intermediary Case Studies and Incidents Analysis Talk

Open →2025-10

30:08

Before the Breach: The Security Essentials

BSides Charlotte · 2025

Technical DFIR Detection Engineering Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2025-05

24:25

Enhancing Incident Response with AI: Leveraging ML for OT/IoT/IIoT Attack Detection and Prevention

Prof. Atdhe Buja

BSides Philly · 2025

Research Technical AI Security Detection Engineering IoT Malware Analysis Empirical Research Technical Deep-dives+1

Open →2026-02

33:09

Fe-fi-fo-FIM, I Smell The Monitoring Of An Elastic Stack!

Brett Calderbank

BSides Manchester · 2019

Technical Detection Engineering GRC Talk

Open →2019-09

33:54

EDR Evasion 101 in a Professional Hacker Red Team

BSides Kristiansand 2026

Technical Detection Engineering Reverse Engineering Advanced Red Talk

Open →2026-02

28:26

Chasing Whispers: A Pragmatic Review of Adversary Emulation Processes

BSides Charleston · 2024

Technical Detection Engineering Threat Intel Threat Modeling Purple Talk

Open →2024-11

32:54

Cognitive Defenders: How AI Transforms Cyber Security

Rosalind Grindrod

BSides Bristol · 2025

Technical AI Security Detection Engineering Threat Intel Blue Talk

Open →2024-01

2:56:32

BSides Knoxville 2018 (Third Track, Pres Pub)

BSides Knoxville · 2018

Technical Detection Engineering Threat Modeling Talk

Open →2018-05

37:49

Benjamin Spencer Jake Knowlton

BSides KC · 2023

Technical Detection Engineering Talk

Open →2023-10

37:32

Keeping on Top of Security Advisories

Michael Fincham Filip Vujičić

BSides Wellington · 2017

Technical Detection Engineering DevSecOps Threat Intel Talk

Open →2018-02

15:57

Grappling for Evil in the Cloud

BSides Prishtina · 2024

Technical Cloud IAM Detection Engineering Threat Intel Blue Demo

Open →2024-09

39:10

The Fault in Our Metrics: Rethinking How We Measure Detection & Response

BSides SATX · 2024

Technical Detection Engineering Threat Intel Talk

Open →2024-06

32:20

Secure(r) Cloud Development

Christo Goosen Toufeeq Ockards

BSides Cape Town · 2017

Technical Cloud IAM Detection Engineering DevSecOps Talk

Open →2017-12

26:00

The Allure of Go's Cross-Platform Capability: A Gateway for Threats

BSides NYC · 2025

Technical Detection Engineering Malware Analysis Reverse Engineering Intermediary Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2025-12

41:51

Keeping up with the Jones's and other APT threats

Kenneth Inkster

Technical DFIR Detection Engineering Malware Analysis Threat Intel Blue Talk

Open →2020-12

56:04

Jason Keirstead - A Gentle Introduction to MITRE ATT&CK

Jason Keirstead

BSides Fredericton · 2018

Community Technical Detection Engineering Threat Intel Intro Blue Talk

Open →2018-12

21:24

Insider Threat Kill Chain: Human Indicators of Compromise

BSides Las Vegas · 2014

Technical Detection Engineering Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2016-12

19:48

Deep Learning for Predictive Alerting and Cyber-Attack Mitigation

BSides Prishtina · 2024

Research Technical AI Security Detection Engineering Threat Intel Empirical Research Technical Deep-dives Talk

Open →2024-09

40:35

Incident Response in containerized and ephemeral environments

David Mitchell Adrian Wood

BSides Charleston · 2022

Technical Container Security DFIR Detection Engineering Blue Talk

Open →2023-01

48:59

Doug Leece: Detection Engineering

BSides Calgary · 2021

Technical Detection Engineering Purple Talk

Open →2021-12

24:44

Cloud IR: A Rapid Guide For AWS, Azure & GCP

BSides Munich · 2025

Technical Cloud IAM DFIR Detection Engineering Blue Talk

Open →2026-02

19:01

Building a Security Audit Logging System on a Shoestring Budget

BSides Las Vegas

Technical Detection Engineering DevSecOps Talk

Open →2024-09

20:58

SOAR In Cyber Security - Arjola Hoxha

Technical Detection Engineering Threat Intel Talk

Open →2023-11

28:25

Detecting Threats at Hyperscale: My Journey and Lessons from Google's Front Lines

BSides Dublin · 2026

Technical Detection Engineering Threat Intel Talk

Open →2025-10

43:50

Considering Cloud Coverage in SIEM/XDR Design

BSides SLC · 2025

Technical Cloud IAM Detection Engineering Threat Modeling Blue Talk

Open →2025-06

31:06

Escapades in DFIR, An Incident Responder's Reflections

BSides RDU · 2022

Career War Stories DFIR Detection Engineering Threat Intel Blue Purple Talk

Open →2023-03

51:54

Wes Lambert - Augmenting the (Security) Onion: Facilitating Enhanced Detection and Response

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2019-10

34:36

Intrusion Response And Detection By Knowing What You Don't Know

Jon Espenschied Chris Compton

BSides Belfast · 2016

Technical Detection Engineering Threat Intel Threat Modeling Talk

Open →2017-09

28:55

Beyond Manual: Enhancing And Scaling Security With Automation

Christian Bauer

BSides Munich · 2024

Technical Detection Engineering DevSecOps Vulnerability Research Blue Talk

Open →2024-11

1:00:02

Hunting Threats like a Cybersecurity Ninjas

Roberto Martínez

BSides Colombia

Technical Detection Engineering Threat Intel Threat Modeling Blue Talk

Open →2025-04

19:31

Sifting Through The Noise, Advanced Threat Analysis

Technical Detection Engineering Threat Intel Blue Talk

Open →2024-10

25:09

The Insider Threat: Detecting Data Exfiltration via EDR

BSides Budabest · 2022

Technical DFIR Detection Engineering Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2023-06

25:02

Baited Canaries: Monitoring Attackers With Active Beacons

Gregory Caswell

BSides Las Vegas · 2019

Technical Detection Engineering Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2019-10

25:18

From Context-Switching Hell to AI-Powered Ops

BSides PDX 2025

Technical AI Security Detection Engineering Tooling Talk

Open →2025-12

46:03

Defending Beyond Defense

Dr. Catherine J. Ullman

BSides 312 · 2025

Career Technical Detection Engineering Malware Analysis Threat Intel Talk

Open →2025-11

18:54

I Thought I Saw a HAXOR

Thomas V. Fischer

BSides Amsterdam · 2017

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2017-09

54:31

Network Situational Awareness with Flow Data

BSides Augusta · 2016

Technical Detection Engineering Network Security Talk

Open →2016-09

20:36

Essential Logs Pyramid SIEM

BSides PDX · 2023

Technical Detection Engineering Threat Intel Blue Talk

Open →2023-10

44:13

Closing the Gap vs Adversaries With Community Resources

BSides NYC · 2023

Technical Detection Engineering Threat Intel Threat Modeling Blue Demo Talk

Open →2023-06

50:47

RAG Against the Machine: Using Retrieval-Augmented Generation & MCP to Fortify Cybersecurity Defense

BSides Las Vegas · 2025

Technical AI Security Detection Engineering GRC Talk

Open →2025-12

35:35

Lessons Learned from Security Operations

BSides Greenville · 2021

Career Detection Engineering Talk

Open →2021-10

51:04

The Hole in Your SOC: How a compromise of your SIEM could be a disaster for your organization

BSides Tampa · 2021

Technical Active Directory Cloud IAM Detection Engineering Kerberos Threat Intel Talk

Open →2021-04

24:18

Unwitting Hosts: How Residential Proxies Increase Risk

Darin Smith Blake

BSides PDX 2025

Technical Detection Engineering Network Security Threat Intel Blue Empirical Research Technical Deep-dives Talk

Open →2025-12

21:39

Show Me The Honey: Creating Elasticsearch Honeypots Powered By LLMs

BSides Belfast · 2025

Research Technical AI Security Detection Engineering Threat Intel Talk

Open →2025-12

33:38

Compliance meets SIEM automation

BSides Newcastle · 2020

Technical Active Directory Detection Engineering GRC Talk

Open →2020-11

48:07

Can You Hear Me Now? Good — Because Volt Typhoon Can, Too

David Branscome

BSides Augusta · 2025

Technical Active Directory Detection Engineering Threat Intel Case Studies and Incidents Analysis Talk

Open →2025-10

38:22

Building Cyber Resilience in the Face of Cyber Attacks

BSides Edmonton · 2023

Technical DFIR Detection Engineering Talk

Open →2023-11

35:41

Paul Ihme - Building a sustainable detector development lifecycle

BSides Cayman Islands

Technical Detection Engineering Threat Intel Blue Talk

Open →2023-05

21:33

Overcoming Barriers in Security DSLs with BabbelPhish

BSides Las Vegas

Technical AI Security Detection Engineering Talk

Open →2023-10

38:02

Taking ChatGPT Hunting by Nicholas Carroll

Nicholas Carroll

BSides Tampa · 2026

Technical AI Security Detection Engineering Threat Intel Talk

Open →2026-02

22:55

Social Engineering Honeypots - Raf Tomaszewski

Raf Tomaszewski

BSides Basingstoke

Technical Detection Engineering Social Engineering Threat Intel Blue Talk

Open →2024-09

45:05

Detecting the Elusive: Active Directory Threat Hunting

BSides Charm · 2017

Technical Active Directory Detection Engineering Kerberos Blue Technical Deep-dives Talk

Open →2021-05

44:38

Breaking the Illusion: Bypassing Endpoint Security Controls with Simple Tactics

Blake Hudson Caleb Sargent

BSides Las Vegas · 2025

Technical Detection Engineering Malware Analysis Red Talk

Open →2025-12

49:51

Suricata 8: The newest release from the mob

BSides Augusta · 2025

Technical Detection Engineering Network Security Talk

Open →2025-10

45:50

Threats Versus Capabilities: Building Better Detect and Respond Capabilities

BSides Dublin · 2022

Technical Detection Engineering Threat Intel Blue Talk

Open →2022-05

14:26

Actioning ATT&CK

BSides Delaware · 2018

Technical Detection Engineering Threat Modeling Purple Technical Deep-dives Talk

Open →2018-11

44:41

Threat Hunting at Different Scales: Lessons Learned from Practice

BSides Zagreb · 2026

Technical Detection Engineering Threat Intel Blue Talk

Open →2026-03

24:50

PG - Enemy at the Gate, and Beyond: Detecting and Stopping Account Takeover

BSides Las Vegas · 2023

Technical Cloud IAM Detection Engineering Threat Intel Blue Talk

Open →2023-10

43:51

Cyber Crash Investigations: Seizing the Opportunity to Learn from Past Crises

Julia Wighton David Stocks

BSides Las Vegas · 2023

War Stories DFIR Detection Engineering Blue Case Studies and Incidents Analysis Talk

Open →2023-10

20:30

Cloud-Based Contextual Analysis as Code

BSides SLC · 2020

Technical Cloud IAM Detection Engineering Threat Modeling Talk

Open →2020-03

37:48

Copy That: Tracking and clustering ClickFix campaigns

BSides Augusta · 2025

Technical Detection Engineering Malware Analysis Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2025-10

50:45

Spycraft 2.0: Hunting Dead Drops in Web Applications

Jonathan Fuller

BSides NYC · 2025

Technical Detection Engineering Malware Analysis Reverse Engineering Advanced Blue Talk

Open →2025-12

49:35

You Got A SIEM Now What

BSidesROC · 2023

Technical Detection Engineering Threat Intel Blue Talk

Open →2024-09

22:57

Honeytrapper: The Attacker Strikes Back

BSides Newcastle · 2025

Technical Detection Engineering Threat Intel Talk

Open →2025-02

54:27

A Tale of Two Powershells

Fernando Tomlinson

BSides Greenville · 2020

Technical Active Directory Detection Engineering Malware Analysis Purple Talk

Open →2020-06

23:31

From Application to Access: Detecting DPRK IT Workers Before They Become Insider Threats

BSides Seattle 2026

Technical Detection Engineering Social Engineering Threat Intel Blue Case Studies and Incidents Analysis Methodology Talk

Open →2026-03

25:33

RAGnarok: Assisting Threat Hunting with Local LLMs

Jun Miura Cybelle Oliveira

BSides Las Vegas · 2025

Technical AI Security Detection Engineering Threat Intel Blue Demo Talk

Open →2025-12

21:16

Self-healing K8s: Lessons Learned in Automation of Incident Response

BSides Charleston · 2025

Research Technical AI Security Container Security Detection Engineering DevSecOps Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2025-11

30:54

BSidesBoulder 2023 - Ryan Thompson - Ecosystem of Insights Building Operation Dashboards That Enable

BSides Boulder · 2023

Technical Detection Engineering Tooling Talk

Open →2024-02

33:15

Technical Active Directory Detection Engineering Threat Modeling Blue Talk

Open →2022-12

24:41

Evading Detection with Dynamic AI Mimicry

Darin Smith Moazzam Khan

BSides Seattle · 2026

Technical AI Security Detection Engineering Malware Analysis Advanced Red Technical Deep-dives Talk

Open →2026-03

30:41

Beyond the Perimeter: Uncovering the Hidden Threat of Data Exfiltration in Google Cloud Platform

BSides Las Vegas · 2023

Technical Cloud IAM DFIR Detection Engineering Talk

Open →2023-10

29:45

Hype and Reality: Practical Advice for Implementing and Evaluating AI/ML for Cybersecurity

BSides SATX · 2021

Technical AI Security Detection Engineering Threat Intel Talk

Open →2021-06

53:54

2024 Security BSides // Garry Coldwells

Garry Coldwells

BSides Cayman Islands · 2024

Technical Detection Engineering IoT Threat Intel Talk

Open →2025-01

43:43

Building a Sawmill: Processing Logs with Security Onion

BSides Peru · 2024

Technical DFIR Detection Engineering Threat Intel Blue Demo Talk

Open →2024-08

47:35

Sharing Open Datasets with the World to Develop Detections from Home | Roberto Rodriguez

Roberto Rodriguez

BSides Delhi 2020

Community Technical DFIR Detection Engineering Threat Modeling Talk

Open →2020-11

29:54

Déjà Vu With Scattered Spider: Are Your SaaS Doors Still Unlocked?

Andi Ahmeti Abian Morina

BSides Munich · 2025

Technical War Stories Cloud IAM Detection Engineering Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2026-02

39:44

Red Teaming AWS: Practice What You Preach

BSides Newcastle · 2021

Community Technical Cloud IAM Detection Engineering Threat Intel Purple Red Case Studies and Incidents Analysis+1

Open →2021-10

49:39

Supercharge Your SOC with Sysmon

Chris Lee Matthew Giannetto

BSides Philly · 2018

Technical DFIR Detection Engineering Malware Analysis Blue Talk

Open →2018-11

27:08

The Ransomware Threat: Tracking the Digital Footprints

Kevin Bottomley

BSidesSF · 2016

Technical Detection Engineering Malware Analysis Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2016-04

19:17

Phish-Back: How to Turn the Problem into a Solution

BSides Las Vegas · 2025

Technical Detection Engineering Threat Intel Web AppSec Advanced Blue Talk

Open →2025-12

21:18

Kubernetes For Incident Responders

Technical Container Security DFIR Detection Engineering Blue Talk

Open →2025-06

26:24

Adversaries Also Lift & Shift: Cloud Threats Through the Eyes of an Adversary

Adi Inov Roy Sherman

BSides Las Vegas · 2024

Technical Cloud IAM Detection Engineering Threat Intel Talk

Open →2024-09

37:31

De-mystifying Zero Trust in Industrial Control System Environments

Stephen Mathezer

BSides Edmonton · 2023

Technical Detection Engineering Network Security Threat Modeling Talk

Open →2023-10

43:52

JOINing Across the Stack: Structured Security Analytics for the Modern Attack Surface

BSides Las Vegas · 2021

Technical Cloud IAM Container Security Detection Engineering Blue Talk

Open →2021-08

1:00:11

AI in the CTI–IR–CISO Triangle

Bojan Alikavazovic Hervé Englman Vladimir Ozura Vlatko Kosturjak Andrija Galinovic

BSides Zagreb · 2026

Technical AI Security Detection Engineering Threat Intel Panel

Open →2026-03

23:08

Advancing Network Threat Detection Through Standardized Feature Extraction and Dynamic Ensemble Learning

BSides Las Vegas · 2025

Research Technical Detection Engineering Threat Intel Empirical Research Technical Deep-dives Talk

Open →2025-12

24:36

Hunting Before Day Zero

BSidesROC · 2023

Technical DFIR Detection Engineering Threat Intel Talk

Open →2024-09

53:47

ZERO-RULES Alert Contextualizer & Correlator

BSides Las Vegas · 2024

Technical AI Security Detection Engineering Threat Intel Blue Talk

Open →2024-09

27:19

Preserving Telecom Infrastructure Using Machine Learning

BSides Calgary · 2021

Technical AI Security Detection Engineering Network Security Talk

Open →2021-12

53:55

Analyzing Emotet infections

BSides Tampa · 2021

Technical Detection Engineering Malware Analysis Network Security Intermediary Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2021-04

28:35

IDS/IPS Choices: Benefits, Drawbacks, and Configurations

BSides Augusta · 2016

Technical Detection Engineering Network Security Threat Intel Blue Talk

Open →2016-09

48:01

Christopher Peacock: TTP Pyramid

Christopher Peacock

BSides St. Pete · 2025

Technical Detection Engineering Threat Intel Purple Technical Deep-dives Talk

Open →2026-03

46:26

Catch Me If You Can: How Attackers Outsmart EDR

BSides Amsterdam · 2025

Technical Detection Engineering Malware Analysis Reverse Engineering Blue Red Technical Deep-dives Talk

Open →2026-03

42:12

Honeypot Boo Boo: Better Breach Detection with Deception Technology

Technical Detection Engineering Threat Intel Blue Talk

Open →2024-02

47:02

Data Exfiltration Via DNS Lookup

BSides Belfast · 2016

Technical Detection Engineering Malware Analysis Network Security Technical Deep-dives Talk

Open →2017-09

36:07

T1 05 Temet Nosce - Thomas V. Fischer

Thomas V. Fischer

Technical DFIR Detection Engineering Malware Analysis Blue Talk

Open →2016-07

38:39

Detecting, Deobfuscating, and Preventing Obfuscated Script Execution with Tree‑sitter

BSides Las Vegas · 2025

Technical Detection Engineering Malware Analysis Blue Talk

Open →2025-12

40:19

Ransomware, Threat Actors, and the Shifting Enterprise Security Landscape

BSidesROC · 2024

Technical Detection Engineering Malware Analysis Threat Intel Blue Keynote

Open →2025-03

43:01

My friend Ben: solid employee, DPRK agent

BSides Las Vegas · 2025

Technical Detection Engineering Threat Intel Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2025-12

51:42

Living off the (land)cloud: Scattered Spider and the cloud

Shivakumar Buruganahalli

BSides NYC · 2025

Technical Cloud IAM Detection Engineering Threat Intel Blue Talk

Open →2025-12

31:19

Red Teaming AWS: Practice What You Preach

BSides Barcelona · 2021

Technical Cloud IAM Detection Engineering Red Talk

Open →2022-01

37:29

Intrusion Detection in the Clouds

BSidesSF · 2015

Technical Detection Engineering Network Security Blue Talk

Open →2023-12

31:20

Evading C2 Detection with Asymmetry

Andrew Johnston Anthony Morrow

BSides Philly · 2018

Technical Detection Engineering Threat Intel Advanced Red Talk

Open →2018-11

8:34

A Review of IDS in Large-Scale IoT Systems: Challenges, Approaches, and Needs

Othmane Belarbi

BSides Cymru Wales · 2023

Research Detection Engineering IoT Talk

Open →2023-04

20:37

The Rise of Synthetic Passwords in Botnet & Attack Operations

BSides Las Vegas · 2025

Technical Detection Engineering Malware Analysis Web AppSec Talk

Open →2025-12

49:45

ChatGPT for Security Analysts

Technical Detection Engineering Malware Analysis Threat Intel Talk

Open →2024-03

56:04

Stop Shooting Blanks: No Magic Bullets in Your Arsenal

BSides Las Vegas · 2013

Technical DFIR Detection Engineering Malware Analysis Blue Talk

Open →2017-01

36:36

Agentic AI for Cyber Operations

BSides Göteborg · 2026

Technical AI Security Detection Engineering Blue Talk

Open →2026-03

56:09

P0LR Espresso: Pulling Shots of Cloud Live Response & Advanced Analysis

BSides NYC · 2025

Technical Tooling Cloud IAM Detection Engineering Threat Intel Talk

Open →2025-11

33:54

Rocke'in the NetFlow TTPs to Detection

Nathaniel Q Quist

BSides Denver · 2019

Technical Cloud IAM Detection Engineering Malware Analysis Threat Intel Case Studies and Incidents Analysis Talk

Open →2019-09

34:38

Trustno1: Protecting Your Data in a Zero Trust World

David Branscome

BSides Greenville · 2020

Technical Active Directory Cloud IAM Detection Engineering Blue Demo Talk

Open →2020-06

23:10

Phish And Chips: Tactics, Tales And Takeaways

BSides London · 2025

Technical War Stories Detection Engineering Social Engineering Threat Intel Blue Talk

Open →2026-03

10:58

What's Running In There

BSides Belfast · 2025

Technical Container Security Detection Engineering Intro Talk

Open →2025-12

27:06

SOC Like a Genius: Cognitive Agents Delivering Wisdom at Scale

Oudy Even Haim Sarah Young

BSides Las Vegas · 2025

Technical AI Security Detection Engineering Threat Intel Blue Demo Talk

Open →2025-12

37:55

Categorical Correlations as Probabilistic Rules

Nathan Danneman

BSides Asheville · 2018

Research Technical Detection Engineering Network Security Threat Intel Talk

Open →2019-03

15:38

Ransomware detection based on comparative hybridised analysis

Alida Øvermo Mortensen

BSides Kristiansand · 2026

Research Technical Detection Engineering Malware Analysis Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2026-02

22:41

Plight at the End of the Tunnel

BSides Charm · 2018

Technical Detection Engineering Malware Analysis Network Security Blue Talk

Open →2021-05

23:36

Illuminate the Grid: Building Telemetry Through Purple Teaming

BSides Charlotte · 2026

Technical Detection Engineering Threat Intel Threat Modeling Purple Case Studies and Incidents Analysis Methodology Talk

Open →2026-04

29:40

Deploying Honeypots for High-Fidelity Threat Detection and Intelligence

Anicet Fopa Tchoffo

Technical Detection Engineering Threat Intel Blue Talk

Open →2025-08

53:24

Measuring Protection Efficacy in Real Time for Fun and Learning

Technical Detection Engineering Malware Analysis Workshop

Open →2024-03

25:37

Swarmed Cyber Defence

Philippe Humeau

BSides Newcastle · 2021

Technical Detection Engineering Network Security Threat Intel Blue Talk

Open →2021-10

26:30

SIGMA: One Rule to Find Them All

BSides Las Vegas · 2025

Technical Detection Engineering Threat Intel Blue Talk

Open →2025-12

26:58

Tracking the Adversaries in the Middle

BSides Amsterdam · 2025

Technical Detection Engineering Social Engineering Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2026-01

26:17

Sweeping Up Misconfiguration Crumbs Before Attackers Do

BSides Newcastle · 2025

Technical AI Security Detection Engineering Network Security Talk

Open →2025-12

53:06

Shining Light into Container Cluster Visibility

Nathaniel Quist

BSides Boulder · 2022

Technical Cloud IAM Container Security Detection Engineering Blue Talk

Open →2022-12

20:51

Reasonable Rapid Recognition and Response to Rogues

BSides Charm · 2019

Technical Detection Engineering GRC Network Security Blue Technical Deep-dives Talk

Open →2021-05

28:46

It's Game Over Man — How to Train Your Blue Team

BSides Kristiansand · 2026

Technical Detection Engineering Threat Modeling Blue Talk

Open →2026-02

23:28

Azazel System: Tactical Delaying Action via the Cyber-Scapegoat Gateway

Makoto Sugita Soya Aoyama

BSides Las Vegas · 2025

Technical Detection Engineering Network Security Blue Demo Talk

Open →2025-12

23:57

The First Hour of Incident Response: Every Second Logs

BSides Exeter · 2026

Technical DFIR Detection Engineering Intermediary Blue Talk

Open →2026-05

15:27

A Convenient Truth

BSides St. John's

Technical Detection Engineering Network Security Talk

Open →2025-05

33:17

The Squid That Lost Its Shell

Simon Goldsmith

BSides Bristol · 2025

Technical Detection Engineering Threat Intel Talk

Open →2025-01

31:19

Data Exfiltration Techniques: Wi-Fi, DNS, Email, ICMP, SSL, and QR Codes

Technical Detection Engineering Network Security Wireless Security Talk

Open →2024-03

56:02

Cloud & Container Security: A Defensive Puzzle from Pipeline to SOC Operations

BSides Exeter · 2026

Technical Cloud IAM Container Security Detection Engineering Blue Talk

Open →2026-05

28:14

Six Hundred Degrees of IAM Admin: Battles with a Cloud Conscious Adversary

BSides Seattle 2026

Technical Cloud IAM Detection Engineering Intermediary Blue Talk

Open →2026-04

58:18

Technical DFIR Detection Engineering Threat Intel Intermediary Blue Talk

Open →2024-03

40:52

It's Malware Time: A Bar Crawl from Skunked Homebrew to Rotten Apples

Erika Noerenberg

BSides Charm · 2019

Technical Detection Engineering Malware Analysis Reverse Engineering Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2021-05

30:52

Embrace the Red: Enhancing Detection Capabilities with Adversary Simulation

Mauricio Velazco

BSides Charm · 2019

Technical Active Directory Detection Engineering Threat Intel Purple Technical Deep-dives Talk

Open →2021-05

40:31

SOC: The Good, The Bad & The Ugly

Harish Kumar Gopalakrishnan

BSides Exeter · 2026

War Stories Career & Soft Skills Detection Engineering Blue Talk

Open →2026-05

44:57

Contextual Agentic Garbage Collector: Sweeping Up Misconfiguration Crumbs Before Attackers Do

BSides Edmonton · 2025

Technical AI Security Detection Engineering Network Security Advanced Talk

Open →2025-10

25:24

Effective Monitoring for Operational Security

Russell Mosley Ryan St. Germain

Technical Detection Engineering Threat Intel Blue Talk

Open →2021-05

40:06

Shadow AI Is Your New Data Exfiltration Channel

BSides Exeter · 2026

Technical AI Security Detection Engineering GRC Talk

Open →2026-05

29:22

Identity Observability with Knowledge Graph: Beyond Monitoring to Enforcement

BSides Seattle 2026

Technical Cloud IAM Detection Engineering Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2026-04

41:40

Ivan Marchany: How to Build a Cyber Home Lab

BSides St. Pete · 2025

Career Detection Engineering Threat Intel Vulnerability Research Intro Talk

Open →2026-03

33:34

The Journey of Security Automation

BSides St. Pete · 2025

Technical Detection Engineering DevSecOps Threat Intel Demo Talk

Open →2026-03