Team

Blue talks at BSides

681 talks tagged Blue from 93 chapters of BSides events worldwide.

Closed For Business: Taking Down Darknet Markets

BSides London · 2019

War Stories Intro Blue Case Studies and Incidents Analysis Talk

Open →2019-06

Catching the Catchers: Open Source Stingray Detection in the Wild

Michael Raymond

Technical Cellular Security OSINT Intermediary Blue Talk

Open →2025-12

Deep Dive on the Dark Web

BSides London · 2018

Technical Intro Blue Talk

Open →2018-06

Open Source Malware Lab

BSides London · 2016

Technical DFIR Detection Engineering Malware Analysis Intermediary Blue Technical Deep-dives Talk

Open →2016-07

Exposing Malicious USB Cables: Hardware Detection of Embedded Implants

BSides PDX · 2022

Technical Intermediary Blue Technical Deep-dives Demo Talk

Open →2022-10

Microsoft EMET Overview and Demonstration

BSides Peru 2015

Technical Tooling Blue Demo Talk

Open →2015-06

PowerShell-Fu — Hunting on the Endpoint

BSides Las Vegas · 2016

Technical DFIR Malware Analysis Threat Intel Blue Technical Deep-dives Talk

Open →2016-08

Forensicating Windows Artifacts: Investigation Without Event Logs!

BSides London · 2019

Technical Blue Talk

Open →2019-06

Diamond Model for Intrusion Analysis: What You Need to Know

Andy Pendergast

BSides DC · 2014

Research Blue Methodology Talk

Open →2014-10

How to 10X Your Company's Security (Without a Series D)

BSidesSF · 2020

Technical Cloud IAM DevSecOps Threat Modeling Blue Talk

Open →2020-03

Confessions Of A Bug Bounty Triager

BSides Leeds · 2019

Community Blue Talk

Open →2019-01

Security Onion: Peeling Back the Layers of Your Network in Minutes

BSides Augusta · 2013

Technical Tooling DFIR Detection Engineering Network Security Blue Demo Talk

Open →2013-09

Hijacking .NET to Defend PowerShell

Amanda Rousseau

BSidesSF · 2017

Technical Blue Talk

Open →2017-03

PowerShell Security: Defending the Enterprise from the Latest Attack Platform

BSides DC · 2016

Technical Active Directory Blue Talk

Open →2016-10

ThreatPursuit VM

BSides Canberra · 2020

Tooling Malware Analysis Threat Intel Blue Demo Talk

Open →2020-05

Hunting for Credential Dumping Attacks in Modern Windows Environments

BSides Philly · 2023

Technical Active Directory DFIR Malware Analysis Blue Talk

Open →2024-01

David Bianco - The Secret Origins of the Pyramid of Pain

BSides Augusta · 2022

Technical Detection Engineering Threat Intel Intermediary Blue Case Studies and Incidents Analysis Methodology Talk

Open →2022-10

BSidesSF 2017 - Linux Monitoring at Scale with eBPF (Brendan Gregg & Alex Maestretti)

Brendan Gregg Alex Maestretti

BSidesSF · 2017

Technical Detection Engineering Network Security Blue Talk

Open →2017-03

Anti-forensics Techniques Used By Threat Actors In The Wild

BSides London · 2024

Technical DFIR Malware Analysis Blue Case Studies and Incidents Analysis Talk

Open →2024-02

IDS Configuration for Beginners

BSides SATX · 2018

Technical Intro Blue Demo Talk

Open →2018-07

Reverse Engineering Sherlock Holmes Style: Obfuscated APIs & The Art of Deduction

Katie Deakin-Sharpe

BSides Canberra

Technical Malware Analysis Reverse Engineering Advanced Blue Talk

Open →2025-11

PowerShell Is DEAD — Epic Learnings!

Ben Turner Doug McLeod Rob Maslen

BSides London · 2019

Technical Advanced Blue Red Talk

Open →2019-06

John Heasman - Doing More in AppSec by Doing Less

BSides Knoxville

Technical Threat Modeling Web AppSec Blue Methodology Talk

Open →2024-09

Misbehaving Binaries: Methods to Detect LOLBin Abuse

BSides KC · 2023

Technical Blue Talk

Open →2023-10

The Woman Who Squashed Terrorists When an Embassy Gets Hacked

BSides Cape Town · 2019

War Stories DFIR Threat Intel Blue Case Studies and Incidents Analysis Keynote

Open →2019-12

Discover Analytic Gaps with Unfetter

Matt Davis Shaun McCullough

BSides DC · 2017

Technical Blue Talk

Open →2017-10

Threat Hunting On Linux And Mac With Auditbeat System Module

BSides Luxembourg · 2019

Technical DFIR Detection Engineering Blue Talk

Open →2019-11

Objectively Measuring Hunt Value

Justin Kohler Patrick Perry

BSides Augusta · 2018

Technical Detection Engineering Threat Intel Blue Talk

Open →2018-10

Active Directory Password Blacklisting

BSides Las Vegas · 2018

Technical Active Directory Blue Demo Talk

Open →2018-09

Implementing a Kick-Butt Training Program: BLUE TEAM GO!

BSidesSF · 2019

Career Blue Talk

Open →2019-03

Defense In Depth: Designing Networks That Survive First Contact

BSides Delaware · 2012

Technical Network Security Blue Talk

Open →2012-11

Gollum: One Anti-Phish Bot to Rule Them All

BSides Cape Town · 2019

Technical Detection Engineering Threat Intel Tooling Blue Talk

Open →2019-12

Polowanie na czerwony październik

Dawid Golak Jarosław Pukacki

BSides Warsaw · 2019

Open →2019-10

Polowanie na wewnętrznego wroga

Mateusz Pawłowski

BSides Warsaw · 2019

Technical Blue Talk

Open →2019-10

Using JA3: Asking for a Friend?

Justin Warner Ed Miles

BSides DC · 2019

Technical Cryptography DFIR Detection Engineering Network Security Blue Red Talk

Open →2019-11

BSides London · 2022

Technical Detection Engineering Threat Modeling Intro Blue Talk

Open →2022-01

It, Do it Live (PowerShell Digital Forensics)

BSides DC · 2015

Technical Blue Demo Talk

Open →2015-11

Macabre Stories of a Hacker in the Public Health Sector (Chile)

Philippe Delteil

BSides Cape Town · 2019

War Stories DFIR Privacy Vulnerability Research Blue Case Studies and Incidents Analysis Talk

Open →2019-12

Hunt Or Be Hunted

BSides London · 2017

Technical Blue Talk

Open →2017-06

Detection as Code: The Engineering-Focused Future of Detection and Response

Jackie Bow Julie Agnes Sparks Jessica Rozhin Louis Barrett

BSidesSF · 2023

Technical Detection Engineering DevSecOps Threat Intel Blue Panel

Open →2023-05

Find, Fix, Finish: Generating Competitive Advantage With Threat Hunting

BSides Canberra · 2024

Technical Detection Engineering Threat Intel Blue Methodology Talk

Open →2024-10

Using Network Miner To Reconstruct Network Traffic

BSides London · 2019

Technical Intro Blue Demo Talk

Open →2019-06

Honeydocs and Offensive Countermeasures

BSides Toronto · 2014

Technical DFIR Threat Intel Blue Demo Talk

Open →2014-12

Confidently Measuring Attack Technique Coverage by Asking Better Questions

Technical Detection Engineering Malware Analysis Reverse Engineering Blue Talk

Open →2021-10

Cyberhydraulik w akcji - czyli skąd i jak cieknie!

BSides Warsaw · 2019

Open →2019-10

Back to the SOCless Future

BSidesSF · 2019

Technical Blue Talk

Open →2019-03

Inside The Ransomware Toolbox: How To Beat Cybercriminals At Their Own Game

BSides London · 2025

Technical Blue Talk

Open →2025-02

GSuite Digital Forensics and Incident Response

BSides SATX · 2018

Technical Cloud IAM DFIR Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2018-07

Incident Management with PowerShell

BSides Detroit · 2013

Technical DFIR Blue Talk

Open →2013-06

Threat Hunting with RockNSM

BSides KC · 2018

Technical Blue Talk

Open →2018-06

Attacking Malware with AI

Dimitris Prasakis

BSides Munich · 2022

Technical AI Security Malware Analysis Blue Talk

Open →2022-05

Building an Effective Intrusion Detection Program

BSidesSF · 2017

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2017-03

Application Fingerprinting with Kitsune

BSides Toronto · 2015

Technical Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2015-11

SOC It Up! Common Frustrations and Solutions in SOC Teams Today

BSides London · 2019

Community Technical Blue Talk

Open →2019-06

Bye-Bye False Positives: Using AI to Improve Detection

BSidesSF · 2019

Technical Web AppSec Blue Talk

Open →2019-03

LSASS - What should we be doing?

BSides Augusta · 2021

Technical Active Directory Threat Modeling Intermediary Blue Talk

Open →2021-10

macOS Endpoint Security Framework: What It Can Do And How To Use It

BSides Munich · 2022

Technical Detection Engineering Malware Analysis Blue Talk

Open →2022-05

A Quick, Efficient Yet Not Entirely Sane Introduction to Deception

BSides Frankfurt

Technical Active Directory Detection Engineering Intermediary Blue Demo Talk

Open →2025-03

How to Stop Worrying & Build a Modern Detection & Response Program

BSides Berlin · 2023

Technical Detection Engineering Threat Intel Threat Modeling Blue Methodology Talk

Open →2024-01

Analyzing AutoIt Malware: Tools and Techniques

Chris Neal Jerome Radcliffe

BSides Las Vegas · 2021

Technical Malware Analysis Reverse Engineering Intermediary Blue Talk

Open →2021-08

Blue Team Fundamentals

Benjamin Hering

BSidesSF · 2018

Technical Intro Blue Talk

Open →2018-04

Hiding in the clouds: How attackers can use applications for sustained persistence and how to find it

Mark Morowczynski Michael Epping

Bsides CT · 2020

Technical Cloud IAM Blue Talk

Open →2020-11

Threat hunting: Using MITRE ATT&CK against Carbanak malware

BSidesSF · 2022

Technical Detection Engineering Malware Analysis Threat Intel Intermediary Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2022-07

Maltego In The Enterprise

BSides Boston · 2013

Technical OSINT Threat Intel Blue Demo Talk

Open →2013-06

How to Kill an AWS Access Key

Benjamin Hering

BSidesSF · 2020

Technical Cloud IAM Blue Talk

Open →2020-03

Don't Boil the Ocean: Using MITRE ATT&CK to Guide Hunting Activity

BSidesSF · 2019

Technical Blue Talk

Open →2019-03

PowerShell post-exploitation, the Empire has fallen

BSides SATX · 2018

Technical Blue Red Talk

Open →2018-07

Quick And Easy Forensic Timelines Via Sysmon, WEF, And ELK

BSides Munich · 2019

Technical DFIR Detection Engineering Blue Talk

Open →2019-03

Pensieve: Finding Malicious Artifacts in Container Environments

BSidesSF · 2018

Technical Container Security DFIR Malware Analysis Intermediary Blue Technical Deep-dives Talk

Open →2018-04

Making Malware Analysis Less Scary

BSides London · 2025

Technical Malware Analysis Reverse Engineering Intro Blue Demo Talk

Open →2026-03

Honeypot Boo Boo: Better Breach Detection With Deception Inception

Technical Detection Engineering Threat Intel Blue Talk

Open →2023-10

Eyeing the Onion

Brad Shoop Chris Rimondi

BSides Augusta · 2013

Technical Detection Engineering Network Security Blue Demo Talk

Open →2013-09

MITRE D3FEND and How to Master It

BSides Sydney · 2025

Technical Detection Engineering Threat Intel Threat Modeling Blue Case Studies and Incidents Analysis Methodology Talk

Open →2025-02

Diaphora: a new FOSS program diffing tool

BSides Lisbon · 2015

Technical Reverse Engineering Vulnerability Research Intermediary Blue Technical Deep-dives Talk

Open →2015-07

A year in the wild: fighting malware at the corporate level

BSidesSF · 2016

Technical Blue Talk

Open →2016-04

Connecting the dots: A beginner's experience of threat actor tracking - Keith Short

BSides London · 2018

Technical Malware Analysis Threat Intel Intro Blue Talk

Open →2018-06

Switching Sides: The Practical Benefits of Switching from Red to Blue to Purple

BSides Charleston · 2019

Career Blue Purple Red Keynote

Open →2019-11

Logs and Tactical Defence

Allan Stojanovic

BSides Toronto · 2014

Technical Detection Engineering Network Security Threat Intel Blue Talk

Open →2014-12

WiFi Pineapple Active Detection via a Raspberry Pi Zero

BSides SLC · 2020

Technical Wireless Security Blue Talk

Open →2020-03

I've seen you get hacked! (AI Real-Time Attack Simulation)

Technical Intermediary Blue Technical Deep-dives Demo

Open →2024-12

The No BS SOC Story

BSides Tampa · 2024

Career Detection Engineering Blue Talk

Open →2024-05

Modern Linux Kernel Mitigations

Ray Veldkamp Matthew Kurz

BSides Canberra · 2023

Technical Vulnerability Research Blue Technical Deep-dives Talk

Open →2023-10

BSidesSF · 2023

Technical DevSecOps Supply Chain Security Intro Blue Talk

Open →2023-05

Red Blue Purple AI

BSides Boulder · 2024

Technical AI Security OSINT Blue Purple Red Keynote

Open →2024-09

Alex Kirk - Incident response and threat hunting using Bro/Zeek data

BSides Augusta · 2019

Technical DFIR Detection Engineering Threat Intel Intermediary Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2019-10

Using DeTT&CT and the MITRE ATT&CK Framework to Assess Your Security Posture

David Branscome

BSides Knoxville · 2022

Technical Detection Engineering Threat Modeling Intermediary Blue Demo Talk

Open →2022-05

Canary Tokens - why and how to implement them and related gotchas

BSides PDX · 2024

Technical Blue Talk

Open →2024-11

Incident Response Evidence Collection & Triage

BSides Peru · 2017

Technical DFIR Malware Analysis Blue Demo Talk

Open →2017-06

Life of a Bug: An Insight on the GitHub Bounty Program

Jeffrey Guerra Caitlin Buckshaw

BSidesSF · 2023

Technical Vulnerability Research Blue Case Studies and Incidents Analysis Talk

Open →2023-05

Tales from the trenches: Cyber brawl with an Advanced Threat Actor

Ishaq Zafar Ahmed Muneeb

BSides Islamabad · 2020

War Stories Blue Talk

Open →2020-11

Social Engineerios: How AI Changes (and Doesn't Change) Social Engineering

BSides Tampa · 2026

Technical AI Security Social Engineering Intro Blue Talk

Open →2026-02

Using an mTLS Identity Provider to achieve Password-less auth, Device Health Attestation, and low Earth orbit

BSidesSF · 2023

Technical Cloud IAM Cryptography Blue Talk

Open →2023-05

A Case Study of MacOS Supply Chain Compromise

Jason Craig Michael George

BSidesSF · 2018

Technical Detection Engineering Malware Analysis Supply Chain Security Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2018-04

Ethical Hacking: DIY Mobile Security Workstation (For Cheap)

BSidesSF · 2019

Tooling Blue Red Demo

Open →2019-03

X-Ray of Malware Evasion Techniques: Analysis, Dissection, Cure

BSides Sydney · 2023

Technical Malware Analysis Reverse Engineering Blue Technical Deep-dives Talk

Open →2023-05

Prioritising your security work using MITRE ATT&CK

BSides Tallinn · 2022

Technical Detection Engineering Threat Intel Threat Modeling Intermediary Blue Talk

Open →2022-10

Facing the Kobayashi Maru: Incident Response Tabletop Exercises

BSides SLC · 2017

Technical Threat Modeling Blue Talk

Open →2017-06

Logging, Monitoring, and Alerting in AWS (The TL;DR)

Jonathon Poling

BSidesSF · 2018

Technical Blue Talk

Open →2018-04

Non-Human Identity Attack Surface: A Live Hacking Demo and Defense Strategies

BSides Toronto · 2024

Technical Cloud IAM Supply Chain Security Blue Red Demo

Open →2024-10

Surfacing a Hydra: Unveiling a Multi-Headed Chinese State-Sponsored Campaign Against a Foreign Government

BSides Charleston · 2024

Technical Detection Engineering Malware Analysis Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2024-11

View all 681 talks tagged Blue →