Phishing - Going from Recon to Credentials
Explore phishing techniques, from reconnaissance to credential harvesting, covering attack types, setup, deployment, and post-exploitation strategies. Learn about prevention, detection, and response measures.
Live Forensic Acquisition Techniques
Explore live forensic acquisition techniques, including disc forensics, DNS cache analysis, and targeted searches, to enhance digital investigation skills.
Predator to Prey - Tracking Criminals with Trojans and Data Mining for Fun and Profit
Explore tracking techniques for stolen devices, from USB hacks to data mining, with ethical considerations and real-world case studies in digital forensics and cybersecurity.
Open Source Intelligence - What I Learned by Being an OSINT Creeper
Explore OSINT techniques, ethics, and tools for digital forensics. Learn methodologies, case studies, and protective measures for responsible intelligence gathering.
Malicious Office Doc Analysis for Everyone
Explore techniques for analyzing malicious Office documents, from initial triage to static analysis. Learn precautions, tools, and strategies for effective malware investigation.
High Confidence Malware Attribution Using the Rich Header
Explore advanced malware attribution techniques using the Rich Header, including its generation, fingerprinting capabilities, and a novel metadata hash for large-scale sample detection.
Whitelisting LD PRELOAD for Fun and No Profit
Explore LD_PRELOAD process injection, its audit system, and whitelisting challenges. Learn about built-in protection vs. bolt-on solutions for Linux security.
Platforms in Everything - Analyzing Ground-Truth Data on the Anatomy and Economics of Bullet-Proof Hosting
Empirical study on Bullet-Proof Hosting provider Maxided, analyzing business model, supply chain, customers, and finances. Reveals shifts in BPH landscape and potential intervention points for disrupting cybercrime-supporting services.
Car Hacking
Explore car hacking essentials: CAN types, UDS, ISO TP, MOST/LIN/Flexray/Automotive Ethernet protocols. Gain insights from industry experts in this virtual lab on automotive cybersecurity.
Extracting Messages From iCloud - Vladimir Katalov
Explore techniques for extracting messages from iCloud, covering iCloud security basics, data protection, and accessing stored messages. Learn about encryption, token policies, and iCloud sync settings.
Searching for a Needle in a Remote Haystack
Challenges in cyberattack investigation and a novel open-source solution for remote digital forensic analysis, featuring a live demo of analyzing a complex infection on a remote machine.
Breaking Apple's iCloud Keychain
Discover techniques for accessing and analyzing data stored in Apple's iCloud, including synced information, backups, and keychain contents. Learn about vulnerabilities in two-factor authentication.
Repurposing Neural Networks to Generate Synthetic Media for Information Operations
Explore the ease of generating synthetic media using neural networks, its implications for information operations, and challenges in detection and attribution.
Fooling Windows Through Superfetch
Explore Windows Superfetch service's privacy implications, forensic potential, and methods to manipulate its predictive behavior for enhanced system security and user privacy.
Fixing a Memory Forensics Blind Spot - Linux Kernel Tracing
Explore Linux kernel tracing infrastructure and its impact on memory forensics. Learn about blind spots in defensive research and strategies to enhance detection of sophisticated attackers.
I'm Unique, Just Like You - Human Side-Channels and Their Implications for Security and Privacy
Explore unintentional human-generated identifiers in digital security, their uses in attack and defense, and countermeasures. Gain insights into "human side-channels" and their privacy implications.
Detecting Deep Fakes with Mice
Explore innovative techniques for detecting AI-generated speech using biological systems, focusing on mice's auditory perception and neural responses to distinguish authentic from synthetic voices.
AI Gone Rogue - Exterminating Deep Fakes Before They Cause Menace
Explore the dangers of deepfakes and learn about an innovative deep learning solution for identifying complex deepfake videos, with a live demonstration of the proposed technology.
Charged by an Elephant - An APT Fabricating Evidence to Throw You in Jail
Explore ModifiedElephant's decade-long operation, incriminating activists through planted evidence. Uncover the concerning ties to commercial surveillance and multiple regional threat actors targeting victims.
GameOver Zeus - Badguys and Backends
Detailed exploration of GameOver Zeus botnet, covering its operators, law enforcement investigation, and innovative legal strategies used to dismantle the cybercriminal network.
You Got That With Google?
Explore advanced Google search techniques for information gathering and security testing, led by expert Johnny Long at Black Hat USA 2004.