Flushing Away Preconceptions of Risk
Explore risk management in security, challenging misconceptions and revealing its value. Learn to interpret, measure, and leverage risk effectively for better organizational outcomes.
Get in the Ring - Understanding Windows Drivers
Explore Windows drivers: IRPs, IRQLs, device objects, function handlers, I/O controls, and memory access. Gain practical insights for driver development and debugging.
Bootstrapping an Architectural Research Platform
Explore x86 architecture for security research: privileges, events, hypervisors, and emerging tech. Gain foundational knowledge to streamline your research setup and focus on key questions.
How to Respond to Cops Who Want Your Passwords
Learn strategies for protecting digital privacy when interacting with law enforcement, including legal rights, threat modeling, and best practices for device security at borders.
Salesforce Data Governance - What 'Dark Secrets' Lurk in Your Instance
Uncover hidden data access issues in Salesforce instances and learn strategies for effective data governance, security, and management to protect sensitive information.
My Quest for Privileged Identity to Own Your Domain
Explore Active Directory vulnerabilities, attack techniques, and mitigation strategies in this comprehensive cybersecurity talk. Learn about reconnaissance, NTLM, Kerberos, and privilege escalation methods.
Six Degrees of Domain Admin - Using Bloodhound to Automate Active Directory Domain Privilege Escalation Analysis
Automate Active Directory privilege escalation analysis using Bloodhound. Learn techniques for identifying and exploiting paths to Domain Admin access efficiently.
Powershell-Fu - Hunting on the Endpoint
Learn advanced PowerShell techniques for endpoint threat hunting, including methodologies, tools, and analysis modules for detecting and investigating malware and suspicious activities.
IOMMU and DMA Attacks
Exploring IOMMU and DMA attacks, focusing on security implications, operating system integration, and techniques to bypass protections, particularly on macOS up to version 10.12.4.
Kill MD5 - Demystifying Hash Collisions
Demystify hash collisions and explore the vulnerabilities of MD5 in this engaging talk. Learn about identical prefixes and gain insights into cryptographic security.
Digital Safety for Politically Vulnerable Organizations
Learn strategies for protecting politically vulnerable organizations from digital threats, covering physical and psychological security, incident response, and data retention policies.
Threat Hunting in the Cloud
Explore cloud security challenges, attacker strategies, and effective threat hunting techniques in AWS and Azure environments. Learn to protect against and detect sophisticated cloud-based attacks.
Don't Kill My Cat
Evade antivirus and security layers with polyglot files and assembly obfuscation. Learn to create undetectable payloads for penetration testing using a versatile tool.
Inter VM Data Exfiltration - The Art of Cache Timing Covert Channel on x86 Multi-Core
Explore cache timing covert channels in x86 multi-core systems, learning techniques for inter-VM data exfiltration and reverse shell establishment using shared resources and architecture imperfections.
Bypassing Antivirus Engines Using Open Sourced Malleable C2 Software, MSFVenom, Powershell and a Bit of Guile
Learn techniques to bypass antivirus using open source tools like Malleable C2, MSFVenom, and PowerShell. Explore examples and scripts for more effective penetration testing and security assessments.
Active Directory Password Blacklisting
Explore Active Directory password blacklisting techniques, implementation challenges, and testing frameworks for enhanced security in Windows environments.
CheckPlease - Payload-Agnostic Sandbox Detection
Explore payload-agnostic sandbox detection techniques, including sleep evasion, encryption, and user activity analysis. Learn to build profiles and implement various detection methods across languages.
Where We're Going, We Won't Need Passwords
Explore enterprise-wide multifactor authentication deployment, addressing technical challenges, user experience, and lessons learned for seamless workforce authentication across devices and legacy systems.
DevOops - Redux
Comprehensive guide to securing DevOps environments, covering AWS hardening, monitoring, disaster recovery, GitHub security, and best practices for CI/CD tools and developer workstations.
Oracle Cloud VMware Solution - Sizing and Scaling
Explore Oracle Cloud VMware Solution sizing, scaling, and performance factors. Learn how OCVS differentiates from on-premises solutions and discover sizing strategies for various workloads.
Enterprise-Grade Analytics Solutions with Oracle Analytics Cloud
Discover enterprise-grade analytics solutions with Oracle Analytics Cloud, offering performance, governance, and flexibility. Learn about scaling capacity, managing access, and monitoring usage for mission-critical deployments.