Windows Agentless C2 - Abusing the MDM Client Stack
Uncover vulnerabilities in Windows MDM client stack for agentless Command and Control. Explore MDM infrastructure, enrollment, and management protocols for potential abuse in device management.
Building Native Extensions - This Could Take A While
Explore techniques for building native gem versions, improving installation speed and reliability. Learn about toolchains, trust considerations, and deploying pre-compiled packages.
Network Security - What About the Data
Explore network security beyond firewalls, focusing on data protection strategies like role-based access, DLP, and data classification to safeguard valuable information assets.
ProbeSpy - Tracking Your Past, Predicting Your Future
Explore WiFi tracking techniques, behavioral profiling, and positioning systems. Learn about privacy implications and potential vulnerabilities in wireless networks.
Plotting Hackers - Visualizing Attack Patterns
Explore data visualization techniques for analyzing hacker attack patterns using logs, APIs, and tools like Elastic Search to create informative charts and graphs.
New School Security - Combat Mindset
Explore modern school security strategies, focusing on prevention, detection, and response. Learn about the combat mindset, new technologies, and user education for comprehensive protection.
Leveraging Vagrant to Quickly Deploy Forensics Environments
Learn to rapidly deploy forensics environments using Vagrant, enhancing efficiency in digital investigations and incident response.
Misbehaving Networks
Explore network misbehavior and its impact on security with insights from Daniel Gregory's analysis of real-world scenarios and potential mitigation strategies.
AppSec Behaviors for DevOps Breed Security Culture Change
Learn effective AppSec behaviors to foster a security-conscious DevOps culture. Discover practical strategies for integrating security, conducting code reviews, and responding to vulnerabilities.
A Top 10 List for Better AppSec - Hint - It's Not the OWASP Top Ten
Explore key AppSec strategies beyond OWASP Top 10, focusing on proactive controls and practical cheat sheets for enhanced application security implementation.
Violent Ruby - A Talk for Hackers, Forensic Analysts, Penetration Testers, and Security
Explore Ruby programming for hacking, forensics, and security testing. Learn techniques for penetration testing and digital forensics using Ruby's powerful capabilities.
BSidesCharm 2017 Closing
Reflections and key takeaways from the BSidesCharm 2017 cybersecurity conference, highlighting memorable moments and future directions in the field.
Microsoft Patch Analysis for Exploitation
Explore techniques for analyzing Microsoft patches to identify vulnerabilities and potential exploitation methods, enhancing your cybersecurity skills.
Detecting the Elusive Active Directory Threat Hunting
Learn advanced techniques for detecting and hunting threats in Active Directory environments from security expert Sean Metcalf.
Threat Hunting - Thinking About Tomorrow
Explore advanced threat hunting techniques and future trends in cybersecurity. Learn proactive strategies to detect and mitigate emerging threats in an ever-evolving digital landscape.
Understanding the Cybersecurity Act of 2015
Explore the Cybersecurity Act of 2015, its impact on information sharing, privacy concerns, and legal implications in this comprehensive analysis by Jeff Kosseff.
The AVATAR Project and You
Explore the AVATAR Project's impact on cybersecurity and its relevance to you in this insightful presentation from BSidesCharm 2017.
Red Teaming the Board
Explore red teaming strategies for effective board communication, enhancing cybersecurity awareness and decision-making at the executive level.
SOC Panel Keynote
Explore insights from security operations center experts in this panel discussion, covering best practices, challenges, and emerging trends in cybersecurity management.
I Went Phishing and Caught a Charge - Maryland Law for Pentesters
Explore legal implications of penetration testing in Maryland, focusing on phishing and cybersecurity laws. Learn crucial insights for ethical hacking and compliance.
Automating Bulk Intelligence Collection
Explore techniques for automating bulk intelligence collection in cybersecurity, including data mining, malware analysis, and email campaign investigation. Learn about the Yalda framework for efficient threat intelligence gathering.