Topic

DFIR talks at BSides

180 talks tagged DFIR from 65 chapters of BSides events worldwide.

49:41

Open Source Malware Lab

BSides London · 2016

Technical DFIR Detection Engineering Malware Analysis Intermediary Blue Technical Deep-dives Talk

Open →2016-07

54:05

The Road to Hell is Paved with Bad Passwords

BSides Las Vegas · 2019

War Stories DFIR Threat Intel Case Studies and Incidents Analysis Talk

Open →2019-10

27:37

PowerShell-Fu — Hunting on the Endpoint

BSides Las Vegas · 2016

Technical DFIR Malware Analysis Threat Intel Blue Technical Deep-dives Talk

Open →2016-08

41:15

OSTrICa – Open Source Threat Intelligence Collector

Roberto Sponchioni

BSides London · 2016

Technical DFIR Threat Intel Tooling Demo Talk

Open →2016-07

41:25

Command-Line Obfuscation: You Can Run, _and_ You Can Hide

BSides Dublin · 2024

Technical DFIR Detection Engineering Talk

Open →2024-06

2:08:11

Windows Forensics Workshop

BSides Amman · 2021

Technical DFIR Intermediary Workshop

Open →2021-07

51:37

Security Onion: Peeling Back the Layers of Your Network in Minutes

BSides Augusta · 2013

Technical Tooling DFIR Detection Engineering Network Security Blue Demo Talk

Open →2013-09

44:35

Anti-forensics Techniques Used By Threat Actors In The Wild

BSides London · 2024

Technical DFIR Malware Analysis Blue Case Studies and Incidents Analysis Talk

Open →2024-02

42:44

Threat Hunting On Linux And Mac With Auditbeat System Module

BSides Luxembourg · 2019

Technical DFIR Detection Engineering Blue Talk

Open →2019-11

29:48

Kevin Breen: RATs and IOC's - The Easy Way

BSides London · 2014

Technical DFIR Malware Analysis Threat Intel Talk

Open →2014-05

55:21

IoT 4n6: The Growing Impact of the Internet of Things on Digital Forensics

BSidesROC · 2018

Technical DFIR IoT Talk

Open →2018-08

56:31

Using JA3: Asking for a Friend?

Justin Warner Ed Miles

BSides DC · 2019

Technical Cryptography DFIR Detection Engineering Network Security Blue Red Talk

Open →2019-11

24:45

Honeydocs and Offensive Countermeasures

BSides Toronto · 2014

Technical DFIR Threat Intel Blue Demo Talk

Open →2014-12

45:56

Flash Memory, NAND, ECC, Oh My! Practical Techniques for Acquiring and Processing Raw NAND Images

BSides Charleston · 2022

Technical DFIR Hardware Hacking IoT Reverse Engineering Technical Deep-dives Talk

Open →2023-01

30:07

GSuite Digital Forensics and Incident Response

BSides SATX · 2018

Technical Cloud IAM DFIR Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2018-07

46:36

Incident Management with PowerShell

BSides Detroit · 2013

Technical DFIR Blue Talk

Open →2013-06

27:24

Cold Case — Catch a Killer in 16 Bytes

BSides Canberra · 2021

Technical War Stories DFIR Hardware Hacking Reverse Engineering Advanced Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2021-04

37:51

Building an Effective Intrusion Detection Program

BSidesSF · 2017

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2017-03

31:32

Maersk: The Ransomware Survivors

BSides Prishtina · 2017

Technical DFIR Malware Analysis Supply Chain Security Intermediary Case Studies and Incidents Analysis Talk

Open →2023-05

33:40

Quick And Easy Forensic Timelines Via Sysmon, WEF, And ELK

BSides Munich · 2019

Technical DFIR Detection Engineering Blue Talk

Open →2019-03

22:40

Pensieve: Finding Malicious Artifacts in Container Environments

BSidesSF · 2018

Technical Container Security DFIR Malware Analysis Intermediary Blue Technical Deep-dives Talk

Open →2018-04

28:47

Learning from AWS Customer Security Breaches

Bsides CT · 2020

Technical Cloud IAM DFIR Intermediary Case Studies and Incidents Analysis Talk

Open →2020-11

50:28

Estonian Electronic Identity Card and its Security Challenges

BSides Tallinn · 2021

Research Cryptography DFIR Advanced Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2021-10

47:19

The Dangers of Working in Cyber Security

Simon Whittaker

BSides Belfast · 2017

War Stories Career & Soft Skills DFIR Threat Intel Case Studies and Incidents Analysis Talk

Open →2017-10

40:43

Digital Forensics: The Missing Piece of Internet of Things Promise

Ali Dehghantanha

BSides Manchester · 2017

Research DFIR IoT Talk

Open →2017-08

20:25

Leveraging Osquery for DFIR at Scale

Sohini Mukherjee

BSidesSF · 2020

Technical DFIR Detection Engineering Intermediary Talk

Open →2020-03

29:14

Alex Kirk - Incident response and threat hunting using Bro/Zeek data

BSides Augusta · 2019

Technical DFIR Detection Engineering Threat Intel Talk

Open →2019-10

30:15

Incident Response Evidence Collection & Triage

BSides Peru · 2017

Technical DFIR Malware Analysis Blue Demo Talk

Open →2017-06

26:00

Exposed Secrets — How Public Git Repositories and Docker Images Expose Millions of Secrets

Mackenzie Jackson

BSidesSF · 2022

Research DFIR Supply Chain Security Threat Intel Case Studies and Incidents Analysis Empirical Research Talk

Open →2022-07

51:56

Unbreaking the iPhone: Bootchain Reversal, SEP Sabotage, and the iOS Kernel Frontier

BSides Canberra · 2025

Technical DFIR Mobile Security Reverse Engineering Advanced Red Technical Deep-dives Demo

Open →2025-11

45:13

Analyzing volatile memory on a Google Kubernetes Engine node

Marcus Hallberg

BSides NYC · 2023

Technical Cloud IAM Container Security DFIR Demo Talk

Open →2023-06

37:47

Don't Google 'PowerShell Hunting'

Josh Rykowski Sean Eyre

BSides Augusta · 2017

Technical DFIR Detection Engineering Malware Analysis Talk

Open →2017-09

58:14

Velociraptor: Digging Deeper

BSides Sydney · 2019

Technical DFIR Threat Intel Blue Demo Talk

Open →2019-09

36:38

Forensics Impossible: Self-Destructing Thumb Drives

BSides Knoxville · 2016

Technical DFIR Hardware Hacking Reverse Engineering Advanced Red Talk

Open →2016-06

38:25

Matriux Leandros: An Open Source Penetration Testing and Forensic Distribution

Prajwal Panchmahalkar

BSides Las Vegas · 2013

Technical DFIR Tooling Talk

Open →2017-01

1:00:10

Threat Hunting In Practice - Michael-Angelo Zummo

Michael-Angelo Zummo

BSides KC · 2022

Technical DFIR Threat Intel Blue Talk

Open →2022-10

43:12

Tracking Malicious Logon: Visualize and Analyze Active Directory Event Logs

Shusei Tomonaga Tomoaki Tani

BSides Las Vegas · 2018

Technical Active Directory DFIR Threat Intel Blue Talk

Open →2018-09

38:01

Living on the Edge: Evicting Threat Actors from Perimeter Appliances

Evgen Blohm Marius Genheimer

BSides Frankfurt · 2025

Technical DFIR Network Security Vulnerability Research Advanced Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2025-12

20:58

Modifying WhatsApp Messages

BSides TLV · 2021

Technical DFIR Mobile Security Technical Deep-dives Demo

Open →2021-08

32:39

Unpacking Impacket: Detect remote execution of offensive tools

BSides SLC · 2022

Technical Active Directory DFIR Detection Engineering Blue Talk

Open →2023-01

33:46

Is the Power Grid a Huge Cybersecurity Risk?

BSides Vancouver · 2021

Technical DFIR Network Security Talk

Open →2021-06

27:32

Behind the Curtain of Dark Web and Cybercrime Operations

Alexander Wilczek

BSides Canberra · 2025

Research Technical Cryptography DFIR Threat Intel Talk

Open →2025-12

59:08

Closed For Business: Taking Down Darknet Markets

BSides Cymru Wales · 2019

Technical DFIR OSINT Threat Intel Talk

Open →2019-10

52:06

No Disassembly Required

BSides Peru · 2018

Technical DFIR Malware Analysis Reverse Engineering Blue Talk

Open →2018-06

58:25

Characteristics of Emotet Infections

BSides Augusta · 2022

Technical DFIR Malware Analysis Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2022-10

47:45

Windows 10 DFIR and InfoSec Challenges

BSides Las Vegas · 2019

Technical DFIR Malware Analysis Blue Technical Deep-dives Talk

Open →2019-10

55:44

Fernando Tomlinson - Gaining 20/20 vision during an incident with PowerShell

Fernando Tomlinson

BSides Augusta · 2019

Technical DFIR Detection Engineering Malware Analysis Blue Talk

Open →2019-10

25:56

How to take cookies from the Cookie Monster: Genesis Market Takedown

BSides TLV · 2023

War Stories DFIR Malware Analysis Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2023-07

0:50

Digital Forensics: Triage Imaging and Fast Acquisition

BSides Tampa · 2024

Technical DFIR Talk

Open →2024-04

23:03

The Little Phone That Could Ch-ch-chroot

Mathew Evans Jack Whitter-Jones

BSides London · 2019

Technical DFIR Mobile Security Threat Modeling Advanced Red Talk

Open →2019-06

57:51

Will Schroeder & Max Harley - Meet Your Nemesis: Fighting Data With Data

Will Schroeder Max Harley

BSides Augusta · 2023

Technical DFIR Threat Intel Advanced Red Talk

Open →2023-10

23:23

Why should I care about my Metadata?

BSides Perth · 2023

Technical DFIR Threat Intel Talk

Open →2023-08

45:12

Choose Your Own Adventure: Group Interactive IR Scenario

BSides Tampa · 2024

Technical DFIR Threat Intel Intro Blue Workshop

Open →2024-04

16:07

Disabling Drones: Disruption and Forensic Data Analysis

BSides London · 2025

Technical DFIR Vulnerability Research Wireless Security Red Case Studies and Incidents Analysis Technical Deep-dives Demo+1

Open →2025-02

29:07

SOC Analyst's Arsenal: Essential Tools, Tips & Tricks For Effective Investigations

Technical DFIR Detection Engineering Tooling Intermediary Blue Talk

Open →2023-10

50:01

Grapl — A Graph Platform for Detection and Response

BSides Las Vegas · 2019

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2019-10

38:30

Maximising the Impact of OSINT in Investigations

BSides Belfast · 2023

Research Technical DFIR OSINT Threat Intel Case Studies and Incidents Analysis Empirical Research Talk

Open →2023-11

24:20

Google Workspace Forensics – Insights from Real-World Hunts & IR

Ariel Szarf Doron Karmi

BSides TLV · 2023

Technical Cloud IAM DFIR Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2023-07

27:21

Blue Team Keynote by Lisa Forte

BSides Leeds · 2023

Technical DFIR Threat Intel Blue Keynote

Open →2023-07

34:13

From Panic To Protocol: Digital Forensics & Incident Response

Technical DFIR Intro Blue Talk

Open →2024-08

20:27

Georgios Karantzas - It's Duck Season: Forensic Detection of BadUsb Attacks

Georgios Karantzas

BSides TLV · 2023

Technical DFIR Detection Engineering Hardware Hacking Talk

Open →2023-07

29:35

From Hours To Minutes: Automating Incident Response Triage With Open-Source Tools

Markus Einarsson

BSides Munich · 2025

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2026-02

55:01

Intel AMT: Using & Abusing the Ghost in the Machine

BSides Lisbon · 2017

Technical DFIR Hardware Hacking Advanced Talk

Open →2017-11

53:27

Unparalleled Remote Desktop Monitoring: Revealing Attackers' Tradecraft

Olivier Bilodeau Adrian Beron

BSides Augusta · 2023

Research DFIR Malware Analysis Network Security Threat Intel Blue Case Studies and Incidents Analysis Empirical Research+1

Open →2023-10

40:07

Navigating the Shadows: KYC, AML, and Cyber Threat Intelligence

Jonathan Gonzalez

BSides SATX · 2024

Technical DFIR Threat Intel Talk

Open →2024-06

53:55

The Evolution of Cyber Security and What to Expect Next

BSides Athens · 2026

Career DFIR Threat Intel Case Studies and Incidents Analysis Keynote

Open →2024-03

49:09

Rastrea2r: Multi-Platform Threat Hunting and Incident Response

Sudheendra S Bhat

BSides PDX · 2018

Technical DFIR Threat Intel Talk

Open →2019-02

45:20

SocVel Live: Command The Breach

Technical DFIR Detection Engineering Threat Intel Blue Workshop

Open →2025-09

16:59

DanderSpritz: A case study in Nation State Post-Exploitation Framework Capabilities & Defense Strategies

Francisco Donoso

BSides KC · 2018

Technical DFIR Malware Analysis Threat Intel Advanced Red Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2018-06

24:10

Digital Forensics: Myths, Legends and Reality

BSides Newcastle · 2025

Technical War Stories DFIR Blue Case Studies and Incidents Analysis Talk

Open →2025-01

26:06

DarkEngine: Conducting Research into a Highly Orchestrated Phishing Campaign

BSides Canberra · 2025

Research DFIR Malware Analysis Social Engineering Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2025-12

59:53

USB Device Analysis

BSides SLC · 2017

Technical DFIR Hardware Hacking Malware Analysis Intermediary Blue Case Studies and Incidents Analysis Methodology+1

Open →2017-06

40:24

Deductive Reasoning: File Analysis Techniques

John Laycock Chris Rogers

BSides DC · 2015

Technical DFIR Malware Analysis Intro Talk

Open →2015-11

47:07

True Story: I Saw Phishing Done by a Panda(Doc)

Fernando Tomlinson

BSides Augusta · 2022

Technical DFIR Social Engineering Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2022-10

16:01

How Digital Forensics And A Batch Script Helped Me Understand The Infection Chain - Ataur Rahman

BSides London · 2025

Technical DFIR Malware Analysis Intermediary Case Studies and Incidents Analysis Talk

Open →2026-03

18:07

Ransomware incidents demystified

Thanassis Diogos

BSides Athens · 2021

War Stories DFIR Malware Analysis Threat Intel Case Studies and Incidents Analysis Talk

Open →2021-07

25:46

Live Interrogation With Osquery

BSides Augusta · 2018

Technical DFIR Detection Engineering Threat Intel Blue Demo Talk

Open →2018-10

20:21

Jason Smart & APTs vs the world

BSides Perth · 2023

Technical DFIR Malware Analysis Threat Intel Talk

Open →2023-08

4:41

Bsides DFW 2013 David Balcar

BSides Dallas/Fort Worth · 2013

War Stories DFIR Threat Intel Talk

Open →2014-01

48:20

Victim of Your Own Cyberattack

Henrik Noben Stephan Van Dyck

BSides Tallinn · 2025

Technical DFIR Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2025-10

34:30

When Diplomats Send Beacon — A Retrospective of APT29 Malicious Phishing Campaigns

BSides Cymru Wales · 2023

Technical War Stories DFIR Malware Analysis Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2023-04

38:51

Choose Your Own Keynote

BSides Newcastle · 2021

Career & Soft Skills DFIR Keynote

Open →2021-10

49:43

Whodunnit - git repository mysteries

Natalie Somersall

BSides Boulder · 2024

Technical DFIR Supply Chain Security Technical Deep-dives Talk

Open →2024-09

41:47

Windows Search Index: The Forensic Artifact You've Been Searching For

Phalgun Kulkarni

Bsides CT · 2023

Technical DFIR Blue Technical Deep-dives Talk

Open →2023-10

1:00:02

Calling from Inside the House: How Nation States Use Your Domain to Compromise Your Cloud Infrastructure

BSides Vancouver · 2021

Technical Cloud IAM DFIR Threat Intel Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2021-06

38:43

Emergency VPN: Analyzing Mobile Network Traffic To Detect Digital Threats

BSides Liverpool · 2019

Technical DFIR Mobile Security Network Security Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2019-07

32:23

Descifrando los Infostealers en Latinoamérica: Una mirada a su evolución

Daniel Soriano Julia Viña Josic Espinosa

Research Technical DFIR Malware Analysis Threat Intel Talk

Open →2024-10

42:09

Who Let the Dogs Out? When PUPs Become BlackCat's Best Friend Ryan Rath & Matthew Boyle

Ryan Rath Matthew Boyle

BSides Tampa · 2024

Technical DFIR Malware Analysis Threat Intel Case Studies and Incidents Analysis Talk

Open →2024-05

44:01

Lessons Learned From The Verizon Data Breach Investigation Report

BSides Luxembourg · 2018

Research DFIR Threat Intel Case Studies and Incidents Analysis Talk

Open →2018-10

31:04

Host-Hunting on a Budget

BSides Augusta · 2019

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2019-10

29:19

File History: Deconstructing the Catalog

Kenneth Johnson

BSides Iowa · 2015

Technical DFIR Intermediary Blue Technical Deep-dives Talk

Open →2015-04

27:26

Don't Turn Your Back on Ransomware

BSides Newcastle · 2022

Technical Active Directory DFIR Malware Analysis Demo Talk

Open →2022-09

31:54

Everyone is a Collector

Isis Rodriguez-Cortes

BSides Charleston · 2025

DFIR Social Engineering Threat Intel Keynote

Open →2025-11

51:22

A not so quick Primer on iOS Encryption

BSidesROC · 2016

Technical Cryptography DFIR Mobile Security Talk

Open →2016-05

41:59

Stalking Known Open Source Offenders for Novel CVEs

Bsides CT · 2020

Research DFIR Vulnerability Research Case Studies and Incidents Analysis Methodology Talk

Open →2020-11

24:35

Press F to MOVEit: A quest to discover how a web shell appeared

BSides Charlotte · 2023

Technical DFIR Malware Analysis Web AppSec Intermediary Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2023-09

13:24

Turning To The Dark Side: Utilizing Offensive Techniques In Incident Response

BSides London · 2025

Technical Active Directory DFIR OSINT Threat Intel Talk

Open →2025-02

22:15

Conti Leaks and CARVER Analysis for Threat Intel Analysts

BSides Las Vegas

DFIR Malware Analysis Threat Intel Case Studies and Incidents Analysis Methodology Talk

Open →2023-10

45:09

Cookie Monster: Exfiltrating Data and More, Byte by Tasty Byte

Eric Kuehn Mic Whitehorn-Gillam

BSides Las Vegas · 2022

Technical DFIR Network Security Web AppSec Red Demo Talk

Open →2022-09

37:41

Overlooked Artifacts: Enhancing Windows Forensics Analysis

Fernando Tomlinson

BSides Charlotte · 2021

Technical DFIR Blue Talk

Open →2021-09

33:43

Operation Grand Mars: Defending Against Carbanak

Thanassis Diogos

BSides Athens · 2017

Technical Active Directory DFIR Malware Analysis Blue Case Studies and Incidents Analysis Talk

Open →2017-10

30:49

Stacked and Hacked: Crafting the Ultimate COTS Incident Response Arsenal

BSides Philly · 2023

Technical DFIR Detection Engineering Blue Talk

Open →2024-01

15:27

From Ground Zero to Sky's Hero: Analyzing Drone Logs from Smart Devices

Evangelos Mantas Nikos Mantas

BSides Athens · 2020

Technical DFIR IoT Mobile Security Case Studies and Incidents Analysis Technical Deep-dives Workshop

Open →2020-06

39:18

4th Annual Bsides Asheville Keynote - John Bumgarner

BSides Asheville · 2016

Technical War Stories DFIR Threat Intel Vulnerability Research Advanced Red Keynote

Open →2018-06

45:00

Intelligence Driven Incident Response

Vito Alfano Artem Artemov

BSides Zagreb · 2024

Technical DFIR Threat Intel Threat Modeling Case Studies and Incidents Analysis Talk

Open →2025-03

49:05

How To Investigate IOS Devices - Paul Rascagneres

Paul Rascagneres

BSides Belfast · 2020

Technical DFIR Malware Analysis Mobile Security Talk

Open →2020-01

38:29

Fantastic Persistence: Creative backdoors & where you will NOT find them

BSides Budabest 2025

Technical Active Directory DFIR Detection Engineering Demo Talk

Open →2026-03

29:07

BSides Denver 2024

BSides Denver 2024

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2024-09

2:10:27

AJ Leece: Workshop: Incident Response Tabletop

BSides Calgary · 2021

Technical DFIR Detection Engineering Blue Workshop

Open →2021-12

45:18

Using Volatility 3 to Detect Sophisticated Malware

BSides NYC · 2025

Technical DFIR Malware Analysis Threat Intel Blue Talk

Open →2025-11

52:58

CloudSec Rules Everything Around Me (C.R.E.A.M.)

BSides Las Vegas · 2019

Technical Cloud IAM DFIR Detection Engineering Intro Talk

Open →2019-10

30:08

Before the Breach: The Security Essentials

BSides Charlotte · 2025

Technical DFIR Detection Engineering Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2025-05

54:53

Inside Ransomware Negotiations: A Day in the Life of a Threat Actor Negotiator

BSides SLC · 2026

War Stories DFIR Threat Intel Blue Talk

Open →2026-04

46:24

Digital Hostage: Navigating Ransomware Realities

Luke Weatherburn-Bird

BSides Exeter · 2024

Technical War Stories DFIR Malware Analysis Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2024-10

21:30

Domain Name Stupidity

BSides Bristol · 2025

Technical DFIR Network Security Advanced Red Technical Deep-dives Talk

Open →2024-01

51:01

Processing Conti Leaks thru Carver Analysis

BSides Charlotte · 2023

Technical DFIR Threat Intel Threat Modeling Case Studies and Incidents Analysis Methodology Talk

Open →2023-09

28:57

A Brief History of Spyware in Mexico: A Civil Society Perspective

DFIR Privacy Threat Intel Case Studies and Incidents Analysis Talk

Open →2024-10

41:51

Keeping up with the Jones's and other APT threats

Kenneth Inkster

Technical DFIR Detection Engineering Malware Analysis Threat Intel Blue Talk

Open →2020-12

37:53

Dynamic Malware Analysis for the Overworked Analyst

Edmund Brunaghin

BSides Belfast · 2017

Technical DFIR Malware Analysis Threat Intel Intermediary Blue Talk

Open →2017-10

48:42

Facilitating Fluffy Forensics

BSides Boston · 2016

Technical Cloud IAM DFIR Talk

Open →2016-07

54:06

Your Taxes Are Being Leaked

BSides Las Vegas · 2018

Policy Technical DFIR Privacy Vulnerability Research Talk

Open →2018-09

46:26

DFIR: Analyzing Voting Machines at DEF CON

BSides Cayman Islands

Research Technical DFIR Vulnerability Research Talk

Open →2023-05

26:40

Breaking the Mobile Log Analysis Barrier with AI

BSides NYC · 2025

Technical AI Security DFIR Mobile Security Intermediary Talk

Open →2025-12

40:35

Incident Response in containerized and ephemeral environments

David Mitchell Adrian Wood

BSides Charleston · 2022

Technical Container Security DFIR Detection Engineering Blue Talk

Open →2023-01

50:00

Getting Saucy with APFS! The State of Apple's New File System

BSides Charm · 2018

Technical DFIR Mobile Security Blue Talk

Open →2021-05

46:30

Response in Action: Lessons from the Digital Frontlines

BSides Joburg · 2025

Technical DFIR Threat Intel Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2025-09

36:40

Intrusion Analysis: A Two-Edged Sword Against Persistent Threats

Ahmad Muneeb Khan Syed Hasan

BSides Islamabad · 2022

Research Technical DFIR Malware Analysis Threat Intel Talk

Open →2022-05

24:44

Cloud IR: A Rapid Guide For AWS, Azure & GCP

BSides Munich · 2025

Technical Cloud IAM DFIR Detection Engineering Blue Talk

Open →2026-02

43:37

Leveraging Data Analytics to Tackle Everyday Security Tasks

BSides Oklahoma · 2017

Technical DFIR Threat Intel Case Studies and Incidents Analysis Talk

Open →2017-04

41:42

Ransomware Response in Action: Lessons from the Frontlines

Aishwarya Desai

BSides SATX · 2025

War Stories DFIR Malware Analysis Threat Intel Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2025-09

52:01

Beyond a Mystery Nation: North Korea Hackers

BSides Delaware · 2017

Research DFIR Malware Analysis Threat Intel Talk

Open →2017-11

31:06

Escapades in DFIR, An Incident Responder's Reflections

BSides RDU · 2022

Career War Stories DFIR Detection Engineering Threat Intel Blue Purple Talk

Open →2023-03

51:54

Wes Lambert - Augmenting the (Security) Onion: Facilitating Enhanced Detection and Response

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2019-10

25:09

The Insider Threat: Detecting Data Exfiltration via EDR

BSides Budabest · 2022

Technical DFIR Detection Engineering Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2023-06

30:15

Structuring Cyber Incident Root-Cause Investigations: A Walk-Through

Joao Collier De Mendonca

BSides Munich · 2025

Technical DFIR Threat Intel Talk

Open →2026-02

18:54

I Thought I Saw a HAXOR

Thomas V. Fischer

BSides Amsterdam · 2017

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2017-09

25:48

How to Lose Your Credentials and Gain a New Domain Admin

BSides Charlotte · 2026

Technical Active Directory DFIR Threat Intel Intermediary Red Talk

Open →2026-04

50:21

From Ransom to Lambo: Tracing Cryptocurrency Laundering in Cybercrime

BSides Zagreb · 2026

Technical DFIR Threat Intel Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2026-03

38:22

Building Cyber Resilience in the Face of Cyber Attacks

BSides Edmonton · 2023

Technical DFIR Detection Engineering Talk

Open →2023-11

46:29

Smashing the Screen Does Nothing: Chipoff Recovery of eMMC Data

BSides SLC · 2018

Technical DFIR Hardware Hacking Demo Talk

Open →2018-12

17:04

Danger? Look Here and Let Me Know

BSides Leeds · 2024

Technical DFIR Malware Analysis Social Engineering Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2024-08

43:51

Cyber Crash Investigations: Seizing the Opportunity to Learn from Past Crises

Julia Wighton David Stocks

BSides Las Vegas · 2023

War Stories DFIR Detection Engineering Blue Case Studies and Incidents Analysis Talk

Open →2023-10

40:01

John Watson - RCIPS Cyber Crime and Digital Forensic Unit

BSides Cayman Islands · 2023

War Stories DFIR Threat Intel Blue Talk

Open →2023-05

58:47

The Art of Post Infection Response and Mitigation

BSides Asheville · 2015

Technical DFIR Malware Analysis Talk

Open →2018-06

1:01:35

A VIEW FROM THE FRONT LINES

BSides Vancouver · 2017

Research DFIR Malware Analysis Threat Intel Case Studies and Incidents Analysis Empirical Research Talk

Open →2017-05

41:30

Tracking Down the Rogue Node

BSides Oklahoma · 2017

Technical DFIR Malware Analysis Threat Intel Blue Talk

Open →2017-04

31:07

Lessons (not) learned from the Kyivstar Wiper Attack - Ben Aveling

BSides Belfast · 2025

War Stories DFIR Network Security Threat Intel Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2025-12

26:49

Detecting the Insider Threat: It's Not Magic

BSides SATX · 2021

Technical DFIR Threat Intel Talk

Open →2021-06

16:16

When Incidents Get Physical: A View Of Incident Response In Critical Infrastructure - Akash Sandhu

Technical DFIR Talk

Open →2026-03

30:56

Understanding, Preventing, And Responding To Cyber Extortion - Victor Onyenagubom

Victor Onyenagubom

BSides Bristol · 2025

Technical DFIR Malware Analysis Threat Intel Intro Talk

Open →2025-01

41:20

Thinking Outside the SOC: Structured Analytics for the Overloaded Cyber Analyst

Alina Thai Haily Beem

BSides Las Vegas · 2025

Technical DFIR Threat Intel Threat Modeling Talk

Open →2025-12

30:41

Beyond the Perimeter: Uncovering the Hidden Threat of Data Exfiltration in Google Cloud Platform

BSides Las Vegas · 2023

Technical Cloud IAM DFIR Detection Engineering Talk

Open →2023-10

43:43

Building a Sawmill: Processing Logs with Security Onion

BSides Peru · 2024

Technical DFIR Detection Engineering Threat Intel Blue Demo Talk

Open →2024-08

47:35

Sharing Open Datasets with the World to Develop Detections from Home | Roberto Rodriguez

Roberto Rodriguez

BSides Delhi 2020

Community Technical DFIR Detection Engineering Threat Modeling Talk

Open →2020-11

1:33:02

MacOs Forensics

BSides Göteborg · 2026

Technical DFIR Malware Analysis Blue Workshop

Open →2026-03

34:53

AI Won't Save You—But It Might Have Helped: A Retrospective on DevSecOps and Cloud IR

BSides Edmonton · 2025

Technical Cloud IAM DFIR DevSecOps Talk

Open →2025-10

49:39

Supercharge Your SOC with Sysmon

Chris Lee Matthew Giannetto

BSides Philly · 2018

Technical DFIR Detection Engineering Malware Analysis Blue Talk

Open →2018-11

21:18

Kubernetes For Incident Responders

Technical Container Security DFIR Detection Engineering Blue Talk

Open →2025-06

24:36

Hunting Before Day Zero

BSidesROC · 2023

Technical DFIR Detection Engineering Threat Intel Talk

Open →2024-09

12:29

SSD Data Evaporation

BSides Las Vegas · 2013

Technical DFIR Hardware Hacking Technical Deep-dives Talk

Open →2017-03

25:00

The Importance of Engineering Privacy From the Get Go

BSides Las Vegas

Technical DFIR Privacy Intro Talk

Open →2023-10

52:36

Anatomy of Cyber Crime Investigation

BSides Cayman Islands · 2025

Technical War Stories DFIR Malware Analysis Social Engineering Threat Intel Talk

Open →2025-01

41:09

Clean Forensics: Analyzing Network Traffic of Vacuum Bots

BSides Boulder · 2022

Technical DFIR IoT Network Security Red Case Studies and Incidents Analysis Empirical Research Talk

Open →2022-12

36:07

T1 05 Temet Nosce - Thomas V. Fischer

Thomas V. Fischer

Technical DFIR Detection Engineering Malware Analysis Blue Talk

Open →2016-07

44:59

Lend Me Your IR's

BSides Columbus · 2020

Technical DFIR Malware Analysis Social Engineering Intermediary Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2020-08

37:21

Russian Nesting Dolls: Turla's Compromise of Pakistani ISI Command & Control

BSides Las Vegas · 2025

Research DFIR Malware Analysis Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2025-12

27:50

Wild Blue Yonder: Dissecting the BlueKeep Window's Exploit

Taree Reardon Adan Valencia

BSides Boulder · 2021

Technical DFIR Malware Analysis Threat Intel Blue Talk

Open →2021-01

38:15

Remote Desktop Exploitation: A Deep Dive into Midnight Blizzard's RDP Phishing

Mickey De Baets

BSides Amsterdam · 2025

Technical DFIR Malware Analysis Threat Intel Case Studies and Incidents Analysis Talk

Open →2026-01

56:04

Stop Shooting Blanks: No Magic Bullets in Your Arsenal

BSides Las Vegas · 2013

Technical DFIR Detection Engineering Malware Analysis Blue Talk

Open →2017-01

48:44

You Need a PROcess to Check Your Running Processes and Modules

BSides Newcastle · 2020

Technical DFIR Malware Analysis Blue Technical Deep-dives Talk

Open →2020-11

19:58

Contribute to Learn: Building DFIR Expertise Through Open Source

Christopher Eng

BSides NYC · 2025

Community Technical DFIR Vulnerability Research Talk

Open →2025-12

35:14

Opening and Keynote

BSides Kristiansand · 2026

Career Career & Soft Skills DFIR Keynote

Open →2026-02

40:57

Profiling Bad USB Attacks

Anitha A Payal R K

BSides Toronto · 2020

Technical DFIR Hardware Hacking Talk

Open →2021-11

31:21

Tony Drake Incident Response for the Overwhelmed, Understaffed, and Unprepared

Career DFIR Talk

Open →2021-08

53:00

Meet the Nation This Week on Sunday: A Special Vulnerability Edition

Jen Ellis Leonard Bailey Tod Beardsley Colin Morgan

BSides Las Vegas · 2019

Policy Technical DFIR Vulnerability Research Panel

Open →2019-10

23:57

The First Hour of Incident Response: Every Second Logs

BSides Exeter · 2026

Technical DFIR Detection Engineering Intermediary Blue Talk

Open →2026-05

18:53

Evolving Threats: A Hybridised Malware Analysis of Ransomware Behaviour

BSides Kristiansand · 2026

Research Technical DFIR Malware Analysis Intermediary Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2026-02

58:18

Technical DFIR Detection Engineering Threat Intel Intermediary Blue Talk

Open →2024-03

19:49

Casting Light on Shadow Cloud Deployments

Chapin Bryce Brittney Argirakis

BSides Las Vegas · 2025

Technical Cloud IAM DFIR Threat Intel Blue Talk

Open →2025-12

41:57

Cascading Failure, Unified Defense: Defending Water, Power, Healthcare, & EMS

Alexander Vanino Ruslan Karimov

BSides Las Vegas · 2025

Technical DFIR Talk

Open →2025-12