Chunky Cookies - Smashing Application Aware Defenses
Explore application-aware defense bypassing techniques, including data chunking, encryption, and reassembly methods for network traffic manipulation and evasion.
Clean Up on Aisle APT
Explore advanced persistent threats, sinkhole techniques, and global cybersecurity insights in this comprehensive analysis of malicious domain activities.
Weaponizing Splunk - Using Blue Teams for Evil
Explore how attackers can exploit Splunk for malicious purposes, including data extraction and command control, in this eye-opening cybersecurity presentation.
Exploring Zigbee Signals from Solar City
Explore Zigbee signals from Solar City's Fronius inverters, uncovering wireless communication protocols and potential security implications in solar energy systems.
OPSEC for the Security Practitioner
Explore OPSEC strategies for security professionals, covering credit monitoring, attack surface reduction, identity protection, and personal security measures.
Prioritize Vulnerability Remediation
Learn strategies for prioritizing vulnerability remediation, including identifying high-risk software, remote exploitable vulnerabilities, and end-of-life systems to enhance your organization's security posture.
Stories through Logging - It Was the Best of Logs, It Was the Worst of Logs
Explore effective logging practices for better storytelling and troubleshooting in IT systems. Learn to extract valuable insights from log files and improve system monitoring.
How to Kick Start an Application Security Program
Learn strategies to initiate and implement an effective application security program, covering key steps, best practices, and overcoming common challenges in organizational cybersecurity.
That Escalated Quickly
Explore red team tactics, from SYSVOL exploitation to token impersonation and SPN ticketing. Learn evasion techniques and payload delivery for enhanced cybersecurity understanding.
Vectors and Victims - Analyzing Vulnerabilities Through Disease Models
Explore vulnerability analysis using disease models to understand attack vectors and potential victims in cybersecurity, drawing insights from epidemiology.
Threat Modeling 101
Learn essential threat modeling techniques to identify and mitigate security risks in software systems, enhancing your ability to build robust and secure applications.
Defending the Defunded
Strategies for maintaining cybersecurity in resource-constrained environments, focusing on cost-effective solutions and prioritizing critical assets to protect organizations with limited budgets.
You Have Updates - A Look at an Old Tool Making a Comeback - Evilgrade
Explore Evilgrade, a resurgent tool for exploiting software update processes, and learn about its attack structure, technical factors, and potential applications.
How to Transform Developers into Security People
Transforming developers into security-minded professionals through effective strategies, cultural shifts, and practical techniques for embedding security awareness in software development.
Fast Wins for the Defense
Discover rapid defensive strategies for blue teamers, focusing on process creation, automation, and collaboration to enhance cybersecurity effectiveness.
Predicting Exploitability
Explore data-driven approaches for predicting and mitigating software vulnerabilities, focusing on real-time analysis, attacker incentives, and effective remediation strategies.
How Much Security Do You Really Need
Explore risk-based security strategies and learn to prioritize security measures effectively for optimal resource allocation and protection.
Tarnished Silver Bullets
A brief, under 1-hour video series from Converge 2017 entitled 'Tarnished Silver Bullets'.
Playing in Memory - Examples of User Thievery and Hunting for Malware
Explore memory forensics techniques using Volatility and other tools to investigate user activity and hunt for malware in captured system memory.
The AppSec Starter Kit
Learn essential tools and techniques for application security, including vulnerability assessment and penetration testing, from expert Timothy De Block.
An Employee, Their Laptop, and a Hacker Walk into a Bar
Explore laptop security risks, encryption, document theft, network infiltration, and preventive measures in this comprehensive cybersecurity talk from BSides Detroit 2017.