Topic

DFIR talks at BSides

229 talks tagged DFIR from 72 chapters of BSides events worldwide.

Open Source Malware Lab

BSides London · 2016

Technical DFIR Detection Engineering Malware Analysis Intermediary Blue Technical Deep-dives Talk

Open →2016-07

The Road to Hell is Paved with Bad Passwords

BSides Las Vegas · 2019

War Stories DFIR Threat Intel Case Studies and Incidents Analysis Talk

Open →2019-10

PowerShell-Fu — Hunting on the Endpoint

BSides Las Vegas · 2016

Technical DFIR Malware Analysis Threat Intel Blue Technical Deep-dives Talk

Open →2016-08

OSTrICa – Open Source Threat Intelligence Collector

Roberto Sponchioni

BSides London · 2016

Technical DFIR Threat Intel Tooling Demo Talk

Open →2016-07

Command-Line Obfuscation: You Can Run, _and_ You Can Hide

BSides Dublin · 2024

Technical DFIR Detection Engineering Talk

Open →2024-06

Windows Forensics Workshop

BSides Amman · 2021

Technical DFIR Intermediary Workshop

Open →2021-07

Security Onion: Peeling Back the Layers of Your Network in Minutes

BSides Augusta · 2013

Technical Tooling DFIR Detection Engineering Network Security Blue Demo Talk

Open →2013-09

Hunting for Credential Dumping Attacks in Modern Windows Environments

BSides Philly · 2023

Technical Active Directory DFIR Malware Analysis Blue Talk

Open →2024-01

Anti-forensics Techniques Used By Threat Actors In The Wild

BSides London · 2024

Technical DFIR Malware Analysis Blue Case Studies and Incidents Analysis Talk

Open →2024-02

Let's Get Cooking with CyberChef

BSides Charm · 2022

Technical DFIR Malware Analysis Threat Intel Talk

Open →2022-07

The Woman Who Squashed Terrorists When an Embassy Gets Hacked

BSides Cape Town · 2019

War Stories DFIR Threat Intel Blue Case Studies and Incidents Analysis Keynote

Open →2019-12

Threat Hunting On Linux And Mac With Auditbeat System Module

BSides Luxembourg · 2019

Technical DFIR Detection Engineering Blue Talk

Open →2019-11

Kevin Breen: RATs and IOC's - The Easy Way

BSides London · 2014

Technical DFIR Malware Analysis Threat Intel Talk

Open →2014-05

IoT 4n6: The Growing Impact of the Internet of Things on Digital Forensics

BSidesROC · 2018

Technical DFIR IoT Talk

Open →2018-08

Using JA3: Asking for a Friend?

Justin Warner Ed Miles

BSides DC · 2019

Technical Cryptography DFIR Detection Engineering Network Security Blue Red Talk

Open →2019-11

Macabre Stories of a Hacker in the Public Health Sector (Chile)

Philippe Delteil

BSides Cape Town · 2019

War Stories DFIR Privacy Vulnerability Research Blue Case Studies and Incidents Analysis Talk

Open →2019-12

Honeydocs and Offensive Countermeasures

BSides Toronto · 2014

Technical DFIR Threat Intel Blue Demo Talk

Open →2014-12

Flash Memory, NAND, ECC, Oh My! Practical Techniques for Acquiring and Processing Raw NAND Images

BSides Charleston · 2022

Technical DFIR Hardware Hacking IoT Reverse Engineering Technical Deep-dives Talk

Open →2023-01

GSuite Digital Forensics and Incident Response

BSides SATX · 2018

Technical Cloud IAM DFIR Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2018-07

Incident Management with PowerShell

BSides Detroit · 2013

Technical DFIR Blue Talk

Open →2013-06

Cold Case — Catch a Killer in 16 Bytes

BSides Canberra · 2021

Technical War Stories DFIR Hardware Hacking Reverse Engineering Advanced Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2021-04

Building an Effective Intrusion Detection Program

BSidesSF · 2017

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2017-03

Maersk: The Ransomware Survivors

BSides Prishtina · 2017

Technical DFIR Malware Analysis Supply Chain Security Intermediary Case Studies and Incidents Analysis Talk

Open →2023-05

Quick And Easy Forensic Timelines Via Sysmon, WEF, And ELK

BSides Munich · 2019

Technical DFIR Detection Engineering Blue Talk

Open →2019-03

Pensieve: Finding Malicious Artifacts in Container Environments

BSidesSF · 2018

Technical Container Security DFIR Malware Analysis Intermediary Blue Technical Deep-dives Talk

Open →2018-04

Learning from AWS Customer Security Breaches

Bsides CT · 2020

Technical Cloud IAM DFIR Intermediary Case Studies and Incidents Analysis Talk

Open →2020-11

Estonian Electronic Identity Card and its Security Challenges

BSides Tallinn · 2021

Research Cryptography DFIR Advanced Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2021-10

The Dangers of Working in Cyber Security

Simon Whittaker

BSides Belfast · 2017

War Stories Career & Soft Skills DFIR Threat Intel Case Studies and Incidents Analysis Talk

Open →2017-10

Digital Forensics: The Missing Piece of Internet of Things Promise

Ali Dehghantanha

BSides Manchester · 2017

Research DFIR IoT Talk

Open →2017-08

Leveraging Osquery for DFIR at Scale

Sohini Mukherjee

BSidesSF · 2020

Technical DFIR Detection Engineering Intermediary Talk

Open →2020-03

Alex Kirk - Incident response and threat hunting using Bro/Zeek data

BSides Augusta · 2019

Technical DFIR Detection Engineering Threat Intel Intermediary Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2019-10

Incident Response Evidence Collection & Triage

BSides Peru · 2017

Technical DFIR Malware Analysis Blue Demo Talk

Open →2017-06

Exposed Secrets — How Public Git Repositories and Docker Images Expose Millions of Secrets

Mackenzie Jackson

BSidesSF · 2022

Research DFIR Supply Chain Security Threat Intel Case Studies and Incidents Analysis Empirical Research Talk

Open →2022-07

BSides Perth Day 1 (Part 2)

BSides Perth · 2021

Technical DFIR Detection Engineering Malware Analysis Talk

Open →2021-09

Unbreaking the iPhone: Bootchain Reversal, SEP Sabotage, and the iOS Kernel Frontier

BSides Canberra · 2025

Technical DFIR Mobile Security Reverse Engineering Advanced Red Technical Deep-dives Demo

Open →2025-11

Analyzing volatile memory on a Google Kubernetes Engine node

Marcus Hallberg

BSides NYC · 2023

Technical Cloud IAM Container Security DFIR Demo Talk

Open →2023-06

Thinking Outside the SOC: Structured Analytical Techniques for the Overloaded Cyber Analyst

Haley Beam Alina Thai

BSides Las Vegas · 2025

Technical DFIR Detection Engineering Threat Intel Talk

Open →2025-08

Don't Google 'PowerShell Hunting'

Josh Rykowski Sean Eyre

BSides Augusta · 2017

Technical DFIR Detection Engineering Malware Analysis Talk

Open →2017-09

Velociraptor: Digging Deeper

BSides Sydney · 2019

Technical DFIR Threat Intel Blue Demo Talk

Open →2019-09

Forensics Impossible: Self-Destructing Thumb Drives

BSides Knoxville · 2016

Technical DFIR Hardware Hacking Reverse Engineering Advanced Red Talk

Open →2016-06

Matriux Leandros: An Open Source Penetration Testing and Forensic Distribution

Prajwal Panchmahalkar

BSides Las Vegas · 2013

Technical DFIR Tooling Talk

Open →2017-01

Threat Hunting In Practice - Michael-Angelo Zummo

Michael-Angelo Zummo

BSides KC · 2022

Technical DFIR Threat Intel Blue Talk

Open →2022-10

Malware Analysis for the Masses

BSides Charm · 2022

Technical DFIR Malware Analysis Intro Blue Demo Talk

Open →2022-07

Living on the Edge: Evicting Threat Actors from Perimeter Appliances

Evgen Blohm Marius Genheimer

BSides Frankfurt · 2025

Technical DFIR Network Security Vulnerability Research Advanced Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2025-12

Tracking Malicious Logon: Visualize and Analyze Active Directory Event Logs

Shusei Tomonaga Tomoaki Tani

BSides Las Vegas · 2018

Technical Active Directory DFIR Threat Intel Blue Talk

Open →2018-09

Rosetta 2: Keeping Mac Malware Alive for Years to Come

Raphaela Mettig Charles Glass

BSides Dallas/Fort Worth · 2022

Research Technical DFIR Malware Analysis Reverse Engineering Advanced Empirical Research Technical Deep-dives+1

Open →2022-11

Modifying WhatsApp Messages

BSides TLV · 2021

Technical DFIR Mobile Security Technical Deep-dives Demo

Open →2021-08

Unpacking Impacket: Detect remote execution of offensive tools

BSides SLC · 2022

Technical Active Directory DFIR Detection Engineering Blue Talk

Open →2023-01

Is the Power Grid a Huge Cybersecurity Risk?

BSides Vancouver · 2021

Technical Critical Infrastructure DFIR Network Security Talk

Open →2021-06

Behind the Curtain of Dark Web and Cybercrime Operations

Alexander Wilczek

BSides Canberra · 2025

Research Technical Cryptography DFIR Threat Intel Talk

Open →2025-12

Unraveling the Russian Snake: Turla

BSides Dallas/Fort Worth · 2022

Technical DFIR Malware Analysis Threat Intel Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2022-11

Closed For Business: Taking Down Darknet Markets

BSides Cymru Wales · 2019

Technical DFIR OSINT Threat Intel Talk

Open →2019-10

No Disassembly Required

BSides Peru · 2018

Technical DFIR Malware Analysis Reverse Engineering Blue Talk

Open →2018-06

Think You're Stealthy? How to Detect Attacks in AD

Rachit Arora Sai Sathvik Ruppa Aakash Raman

BSides Charm · 2025

Technical Active Directory DFIR Detection Engineering Intermediary Blue Talk

Open →2025-05

Characteristics of Emotet Infections

BSides Augusta · 2022

Technical DFIR Malware Analysis Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2022-10

Windows 10 DFIR and InfoSec Challenges

BSides Las Vegas · 2019

Technical DFIR Malware Analysis Blue Technical Deep-dives Talk

Open →2019-10

Fernando Tomlinson - Gaining 20/20 vision during an incident with PowerShell

Fernando Tomlinson

BSides Augusta · 2019

Technical DFIR Detection Engineering Malware Analysis Blue Talk

Open →2019-10

10 Things I Wish Every CISO Knew Before an Incident: A View from the IR Trenches

BSides Knoxville · 2023

Technical DFIR GRC Talk

Open →2023-05

How to take cookies from the Cookie Monster: Genesis Market Takedown

BSides TLV · 2023

War Stories DFIR Malware Analysis Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2023-07

Analyzing Maldocs: Macro-soft Edition

BSides Pakistan · 2021

Technical DFIR Malware Analysis Reverse Engineering Blue Talk

Open →2021-11

The Little Phone That Could Ch-ch-chroot

Mathew Evans Jack Whitter-Jones

BSides London · 2019

Technical DFIR Mobile Security Threat Modeling Advanced Red Talk

Open →2019-06

Will Schroeder & Max Harley - Meet Your Nemesis: Fighting Data With Data

Will Schroeder Max Harley

BSides Augusta · 2023

Technical DFIR Threat Intel Advanced Red Talk

Open →2023-10

Why should I care about my Metadata?

BSides Perth · 2023

Technical DFIR Threat Intel Talk

Open →2023-08

Choose Your Own Adventure: Group Interactive IR Scenario

BSides Tampa · 2024

Technical DFIR Threat Intel Intro Blue Workshop

Open →2024-04

Disabling Drones: Disruption and Forensic Data Analysis

BSides London · 2025

Technical DFIR Vulnerability Research Wireless Security Red Case Studies and Incidents Analysis Technical Deep-dives Demo+1

Open →2025-02

Grapl — A Graph Platform for Detection and Response

BSides Las Vegas · 2019

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2019-10

SOC Analyst's Arsenal: Essential Tools, Tips & Tricks For Effective Investigations

BSides Munich · 2023

Technical DFIR Detection Engineering Tooling Intermediary Blue Talk

Open →2023-10

Maximising the Impact of OSINT in Investigations

BSides Belfast · 2023

Research Technical DFIR OSINT Threat Intel Case Studies and Incidents Analysis Empirical Research Talk

Open →2023-11

Closing the Visibility Gap: Threat Hunting with Hawk in the Microsoft Cloud

Jonathan Butler Lorenzo Paul Navarro

BSides Charm · 2025

Technical Tooling Cloud IAM DFIR Detection Engineering Blue Demo Talk

Open →2025-05

Google Workspace Forensics – Insights from Real-World Hunts & IR

Ariel Szarf Doron Karmi

BSides TLV · 2023

Technical Cloud IAM DFIR Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2023-07

From Hours To Minutes: Automating Incident Response Triage With Open-Source Tools

Markus Einarsson

BSides Munich · 2025

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2026-02

Blue Team Keynote by Lisa Forte

BSides Leeds · 2023

Technical DFIR Threat Intel Blue Keynote

Open →2023-07

From Panic To Protocol: Digital Forensics & Incident Response

Technical DFIR Intro Blue Talk

Open →2024-08

Georgios Karantzas - It's Duck Season: Forensic Detection of BadUsb Attacks

Georgios Karantzas

BSides TLV · 2023

Technical DFIR Detection Engineering Hardware Hacking Talk

Open →2023-07

Intel AMT: Using & Abusing the Ghost in the Machine

BSides Lisbon · 2017

Technical DFIR Hardware Hacking Advanced Talk

Open →2017-11

We Take Your Security Seriously (Or Do We?) — The Beer Farmers

BSides Scotland · 2019

Community War Stories DFIR Privacy Threat Intel Intro Case Studies and Incidents Analysis Talk

Open →2019-04

Unparalleled Remote Desktop Monitoring: Revealing Attackers' Tradecraft

Olivier Bilodeau Adrian Beron

BSides Augusta · 2023

Research DFIR Malware Analysis Network Security Threat Intel Blue Case Studies and Incidents Analysis Empirical Research+1

Open →2023-10

Navigating the Shadows: KYC, AML, and Cyber Threat Intelligence

Jonathan Gonzalez

BSides SATX · 2024

Technical DFIR Threat Intel Talk

Open →2024-06

Not BigData, AnyData

BSides Augusta · 2013

Technical DFIR Detection Engineering Threat Intel Intermediary Blue Talk

Open →2013-09

DFIR in 2022: The Wild Wild East

Jack Rutherford Richard Grainger

BSides Sydney · 2022

Technical DFIR Malware Analysis Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2023-03

The Evolution of Cyber Security and What to Expect Next

BSides Athens · 2026

Career DFIR Threat Intel Case Studies and Incidents Analysis Keynote

Open →2024-03

Rastrea2r: Multi-Platform Threat Hunting and Incident Response

Sudheendra S Bhat

BSides PDX · 2018

Technical DFIR Threat Intel Talk

Open →2019-02

SocVel Live: Command The Breach

Technical DFIR Detection Engineering Threat Intel Blue Workshop

Open →2025-09

DanderSpritz: A case study in Nation State Post-Exploitation Framework Capabilities & Defense Strategies

Francisco Donoso

BSides KC · 2018

Technical DFIR Malware Analysis Threat Intel Advanced Red Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2018-06

Digital Forensics: Myths, Legends and Reality

BSides Newcastle · 2025

Technical War Stories DFIR Blue Case Studies and Incidents Analysis Talk

Open →2025-01

DarkEngine: Conducting Research into a Highly Orchestrated Phishing Campaign

BSides Canberra · 2025

Research DFIR Malware Analysis Social Engineering Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2025-12

USB Device Analysis

BSides SLC · 2017

Technical DFIR Hardware Hacking Malware Analysis Intermediary Blue Case Studies and Incidents Analysis Methodology+1

Open →2017-06

Deductive Reasoning: File Analysis Techniques

John Laycock Chris Rogers

BSides DC · 2015

Technical DFIR Malware Analysis Intro Talk

Open →2015-11

BSides Charm · 2022

Career DFIR Detection Engineering Blue Talk

Open →2022-07

True Story: I Saw Phishing Done by a Panda(Doc)

Fernando Tomlinson

BSides Augusta · 2022

Technical DFIR Social Engineering Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2022-10

How Digital Forensics And A Batch Script Helped Me Understand The Infection Chain - Ataur Rahman

BSides London · 2025

Technical DFIR Malware Analysis Intermediary Case Studies and Incidents Analysis Talk

Open →2026-03

Applying Sysmon-type Filtering to Elastic Agent Process Auditing

BSides Augusta · 2023

Technical DFIR Detection Engineering Blue Demo Talk

Open →2023-10

OSINT for Incident Investigations

BSides Knoxville · 2024

Technical DFIR OSINT Threat Intel Case Studies and Incidents Analysis Talk

Open →2024-12

The Art of Infiltration: Leveraging Trusted Relationships

Vladimir Ožura

Technical Active Directory DFIR Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2025-03

Ransomware incidents demystified

Thanassis Diogos

BSides Athens · 2021

War Stories DFIR Malware Analysis Threat Intel Case Studies and Incidents Analysis Talk

Open →2021-07

Victim of Your Own Cyberattack

Henrik Noben Stephan Van Dyck

BSides Tallinn · 2025

Technical DFIR Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2025-10

Google Workspace Forensics – Insights from Real-World Hunts & IR

Doron Karmi Ariel Szarf

BSides Las Vegas · 2023

Technical Cloud IAM DFIR Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2023-10

Live Interrogation With Osquery

BSides Augusta · 2018

Technical DFIR Detection Engineering Threat Intel Blue Demo Talk

Open →2018-10

Jason Smart & APTs vs the world

BSides Perth · 2023

Technical DFIR Malware Analysis Threat Intel Talk

Open →2023-08

When Diplomats Send Beacon — A Retrospective of APT29 Malicious Phishing Campaigns

BSides Cymru Wales · 2023

Technical War Stories DFIR Malware Analysis Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2023-04

View all 229 talks tagged DFIR →