Lightning Talks
Lightning talks on diverse SRE topics: incident response, distributed systems, resource management, automation, operational maturity, and monitoring. Insights from industry experts on improving reliability and efficiency.
Incident Response and the Attorney Client Privilege
Explore legal protection of incident reports through attorney-client privilege. Learn when it applies, its limitations, and best practices for collaborating with attorneys during security incidents.
Meatbag Systems - How Our Reliability Culture & Practice Evolved over Time
Exploring the evolution of reliability culture through major incidents, emphasizing the human aspect in maintaining production systems and aligning reliability with customer value.
How We Drained Every Backbone Router Simultaneously
Exploring Meta's 2021 outage: causes, cascading effects, and lessons learned. Insights into network infrastructure, disaster recovery, and future improvements for preventing similar incidents.
Pages from a Sword-Maker's Notebook Part II
Explore covert intelligence gathering techniques, from anti-virus evasion to counter-intelligence, with practical code examples in Golang. Learn methodologies and technical solutions for long-term surveillance operations.
Profiling and Detecting All Things SSL with JA3
Explore SSL/TLS fingerprinting with JA3, learn its capabilities for detecting malware and C2 servers, and discover the new JA3S for server fingerprinting. Enhance your network security skills.
One Year After a Major Attack at DefCamp 2018
Análisis retrospectivo de un ataque cibernético significativo ocurrido en DefCamp 2018, examinando sus consecuencias y lecciones aprendidas un año después.
Back to the Future - How to Respond to Threats Against ICS Environments
Explore strategies for responding to threats in Industrial Control System environments, focusing on current challenges and future-oriented solutions for enhanced cybersecurity in critical infrastructure.
Incident Busters - A 2017 Retrospective
Retrospective analysis of major cybersecurity incidents from 2017, exploring lessons learned and strategies for improved incident response and prevention in the information security field.
Active Defense Untangled
Explora estrategias de defensa activa en ciberseguridad, analizando técnicas y consideraciones éticas para proteger sistemas y redes de manera proactiva frente a amenazas emergentes.
No More Time - Closing the Gap with Attackers
Explore strategies to reduce cybersecurity response times and close the gap with attackers. Learn how organizations are leveraging data to detect and respond to threats more quickly and effectively.
What's the DFIRence for ICS?
Explore digital forensics for industrial control systems, focusing on embedded devices in critical infrastructure. Learn data collection and analysis techniques for RTUs in electric substations.
Watching Commodity Malware Get Sold to a Targeted Actor
Explore how commodity malware breaches are reclassified and upgraded for targeted attacks, and learn detection techniques to prevent threat escalation in organizational networks.
Hardening AWS Environments and Automating Incident Response for AWS Compromises
Learn to automate incident response in AWS, collect forensic evidence, and secure your cloud environment against API key compromises through proper configuration and monitoring.
OSS Security Maturity - Time to Put on Your Big Boy Pants
Explore open source software risks, evaluation strategies, and a maturity model for organizations. Learn to manage vulnerabilities, assess costs, and implement effective security practices in product development.
Building a Product Security Incident Response Team - Learnings From the Hivemind
Building a Product Security Incident Response Team: Best practices, templates, and actionable recommendations for small to medium companies to establish effective PSIRT processes and respond to vulnerability reports.
Catching the Phisherman
Uncover the largest credential harvesting campaign: its discovery, impact, and ongoing response. Gain insights into cybersecurity threats and investigative techniques.
Life of a Bug - An Insight on the GitHub Bounty Program
Explore GitHub's bug bounty program, from initial submission to resolution. Learn about the roles of Bug Bounty and PSIRT teams, and gain insights into the incident response process.
Hiring and Interviewing as Security Engineers
Insights on reducing bias in security hiring and maximizing interviews for various roles, drawing from a decade of global experience across major tech companies and startups.
SIEMple Technology
Guía práctica para implementar un SIEM en tu entorno: desde la investigación inicial hasta la revisión periódica, pasando por la recopilación y correlación de registros, y la optimización continua.
Angler Lurking in the Domain Shadows
Explore the Angler exploit kit, domain shadowing, and cybersecurity threats. Learn detection methods and gain insights into evolving attack techniques and defense strategies.