Tool

BSides talks featuring Elasticsearch

132 talks mention this tool across 50 BSides chapters.

Talks featuring Elasticsearch

Syslog-ng: Getting Started, Parsing Messages, Storing In Elasticsearch

BSides Luxembourg · 2019

Technical Intro Workshop

Open →2019-11

Sweet Security: Deploying a Defensive Raspberry Pi

BSidesSF · 2016

Open →2016-04

Discover Analytic Gaps with Unfetter

Matt Davis Shaun McCullough

BSides DC · 2017

Technical Blue Talk

Open →2017-10

Open Source Approach: The Next Best Thing in Cyber Incidence Management

BSides DC · 2017

Open →2017-10

Improve Your Network Security With Opensource IDS/IPS

BSides Munich · 2017

Technical Network Security Tooling Talk

Open →2017-04

Logging Made Easy - Shane M and Adam B

Open →2019-07

Threat Hunting with RockNSM

BSides KC · 2018

Technical Blue Talk

Open →2018-06

Make Alerts Great Again

BSidesSF · 2017

Technical DevSecOps Talk

Open →2017-03

Automating Threat Hunting on the Dark Web

Apurv Singh Gautam

BSides Philly · 2020

Technical OSINT Threat Intel Technical Deep-dives Talk

Open →2020-12

Quick And Easy Forensic Timelines Via Sysmon, WEF, And ELK

BSides Munich · 2019

Technical DFIR Detection Engineering Blue Talk

Open →2019-03

Network Security: It Just Makes pfSense

BSides Knoxville · 2026

Technical Detection Engineering Network Security Talk

Open →2025-01

A year in the wild: fighting malware at the corporate level

BSidesSF · 2016

Technical Blue Talk

Open →2016-04

Scaling Detection And Response Teams: Enabling Efficient Investigations - James Dorgan

Open →2024-02

BSides Rochester 2018 - IoT Botnet Detection System using Machine Learning

Open →2018-04

Alex Kirk - Incident response and threat hunting using Bro/Zeek data

BSides Augusta · 2019

Technical DFIR Detection Engineering Threat Intel Intermediary Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2019-10

Focus On Your Malware, Not Infrastructure! - Omri Segev Moyal

BSides Liverpool

Open →2019-07

Bsides 2018 Track 2

BSides Vancouver

Open →2018-03

Team Threat Hunting with AI and Automation

Kenneth Peeples

BSides Charleston · 2024

Technical AI Security Container Security Detection Engineering Threat Intel Talk

Open →2024-11

Prioritising your security work using MITRE ATT&CK

BSides Tallinn · 2022

Technical Detection Engineering Threat Intel Threat Modeling Intermediary Blue Talk

Open →2022-10

Windows Event Forwarding and OSSEC — You can do this!

BSides Augusta · 2018

Technical DevSecOps Blue Talk

Open →2018-11

BSidesMCR 2018: Adventures In WAF by Michael Thompson

BSides Manchester

Open →2018-08

2017 - Repairing The Internet With Responsible Disclosures by Victor Gevers

BSides Manchester

Open →2017-08

"OSINT'ing at Scale", Ben Menzies, CSides July 2020

BSides Canberra · 2020

Open →2020-07

Velociraptor: Digging Deeper

BSides Sydney · 2019

Technical DFIR Threat Intel Blue Demo Talk

Open →2019-09

eBPF For Security Monitoring

BSides Leeds · 2019

Technical Detection Engineering Malware Analysis Network Security Demo Talk

Open →2019-01

Let's Start Over!

Craig Chamberlain

BSides DC · 2018

Open →2018-11

Pwning all the Internet of things for fun and profit

BSides Toronto · 2014

Open →2014-12

2015 - Kuba Sendor - Squashing Rotten Apples Automated forensics & analysis for Mac OS X..

BSides Manchester

Open →2015-09

BSidesSF 2022 - Practical Threat Hunting With Machine Learning (Omid Mirzaei)

BSidesSF · 2022

Technical Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2022-07

BSIDES CPT 2019 - Natural Language Processing & Anomaly detection in Sys call logs - Christo Goosen

BSides Cape Town

Open →2019-12

Phoenix: The Open Source malware analysis appliance

Justin Borland Greg Olmstead

BSides Augusta · 2019

Technical Tooling Talk

Open →2019-10

Fighting Email Phishing with a Custom Cloud IDS

BSidesSF · 2017

Technical Blue Talk

Open →2017-03

Automated Dorking for Fun and Pr^wSalary - Filip Reesalu

BSides Las Vegas

Open →2016-08

Got popcorn? What's on the Vuln Channel tonight?

Rob Jerdonek Lily Chau

BSidesSF · 2022

Open →2022-07

Mark Baggett - Free tools for your threat hunting toolbox

BSides Augusta · 2021

Open →2021-10

Connecting the Dots: Building a Data-Dump Search Engine

Open →2017-06

Androzoo APK Search: A Search Service Of Meta-Data

Médéric Hurier

BSides Luxembourg · 2018

Open →2018-10

ELK: Not P.O.S.

BSides Toronto · 2014

Open →2014-12

DNS Hardening - Proactive Net Sec Using F5 iRules and Open Source Analysis Tools - Jim Nitterauer

BSides Las Vegas

Open →2016-08

Regipy: Automating registry forensics with python

Martin G. Korman

BSides TLV · 2020

Open →2020-07

DIY Patch Management

Florian Junge Ingo Bente

Technical DevSecOps Vulnerability Research Talk

Open →2018-04

Let's Talk About the AI Apocalypse

BSidesSF · 2025

Open →2025-06

BSides TLV · 2021

Technical Red Talk

Open →2021-08

Will Schroeder & Max Harley - Meet Your Nemesis: Fighting Data With Data

Will Schroeder Max Harley

BSides Augusta · 2023

Technical DFIR Threat Intel Advanced Red Talk

Open →2023-10

Code C.A.I.N – Keeping Your Source Code Under Control

BSides TLV · 2022

Technical Detection Engineering OSINT Supply Chain Security Talk

Open →2022-07

Applying Data Science to Identify Malicious Actors in Enterprise Logs

Balaji Balakrishnan

BSides DC · 2016

Technical Detection Engineering Malware Analysis Threat Intel Blue Talk

Open →2016-10

SOC Analyst's Arsenal: Essential Tools, Tips & Tricks For Effective Investigations

BSides Munich · 2023

Technical DFIR Detection Engineering Tooling Intermediary Blue Talk

Open →2023-10

Securing Fast and Furious DevOps Pipelines

Abdessamad Temmar

BSides Las Vegas · 2019

Technical DevSecOps Supply Chain Security Blue Talk

Open →2019-10

Unified Protection with The Elastic Stack

BSides Athens · 2020

Technical Blue Talk

Open →2020-06

Every Contact Leaves A Trace by Ken Westin

Open →2023-07

Logs don't lie, even if most of them are lost in L7 DDoS

BSides Tallinn · 2022

Open →2022-10

A Serverless SIEM: Detecting All Baddies

Chen Cao Daniel Stinson-Diess

BSides Las Vegas · 2021

Technical Cloud IAM Detection Engineering Blue Talk

Open →2021-08

Paravirtualized Honeypot Deployment for the Analysis of Malicious Activity

Andronikos Kyriakou

BSides Athens · 2018

Technical Malware Analysis Threat Intel Blue Talk

Open →2018-08

Immunizing vulnerable web applications with AppArmor

György Demarcsek

BSides Luxembourg · 2017

Technical Web AppSec Talk

Open →2017-10

Getting Better with Data - Steph Locke

BSides London · 2016

Open →2016-07

NoSQL Means No Security?

BSides Munich · 2017

Technical Vulnerability Research Web AppSec Red Talk

Open →2017-04

SMBeagle: SMB Share Hunter

Daniel Oates-Lee

BSides Cheltenham · 2022

Open →2022-07

PlagueScanner: An Open Source Multiple AV Scanner Framework

BSides SLC · 2015

Technical Tooling Detection Engineering Malware Analysis Intermediary Blue Demo Talk

Open →2015-04

Leveraging LLMs for Advanced AI Applications

BSides Athens · 2024

Technical AI Security Talk

Open →2024-06

Building a Practical AI Assistant for Security Operations

Vincent Ruijter

BSides Lisbon · 2025

Technical AI Security Detection Engineering Intermediary Talk

Open →2026-01

Zero Trust — Attack and Defend

BSides Frankfurt · 2024

Technical Cloud IAM Detection Engineering Purple Talk

Open →2025-05

Where's Wally? Hands-On Thread Hunting In Elasticsearch Using EE-Outliers

BSides Luxembourg · 2019

Technical Demo Talk

Open →2019-11

Malware Code Similarity Through Vector Search

BSides Belfast · 2025

Research Technical Malware Analysis Reverse Engineering Technical Deep-dives Talk

Open →2025-02

Full Packet Capture for the Masses

BSides Athens · 2018

Technical Blue Talk

Open →2018-08

CG - Hadoop Safari : Hunting For Vulnerabilities - Mahdi Braik & Thomas Debize

BSides Las Vegas

Open →2017-08

Applied Machine Learning in Cyber Security

Saw Winn Naung Aung Myint Myat

BSides Myanmar · 2023

Open →2023-04

Testing Defensive Controls w/ atomic-operator - Josh Rickard

BSides KC · 2022

Technical DevSecOps Blue Talk

Open →2022-10

Build Yourself an Elastic Threat Hunting and Monitoring SIEM

BSides Huntsville · 2021

Open →2021-02

Live BSides Amsterdam 2025 - Tech Track

BSides Amsterdam · 2025

Technical Detection Engineering Malware Analysis Talk

Open →2025-11

Building a Secure Environment for Operations Using Docker

BSides Augusta · 2017

Technical DevSecOps Demo Talk

Open →2017-09

Domain Takeovers For Fun And Profit

Daniel Oates-Lee

BSides Lancashire · 2023

Technical DNS Security DevSecOps Web AppSec Intermediary Red Demo Talk

Open →2023-04

Unmasking Data Leaks: A Guide to Finding, Fixing, and Prevention

BSides SATX · 2019

Technical Cloud IAM Demo Talk

Open →2019-09

Matija Kos | Hackers Don’t Hack, They Log In: The Threat of Stolen Credentials

Technical Detection Engineering Malware Analysis Threat Intel Talk

Open →2025-03

What You Most Likely Did Not Know About Sudo - Peter Czanik

BSides Luxembourg · 2019

Open →2019-11

Blackbox Containers: Container Security in the Enterprise

BSides Charm · 2023

Technical Container Security DevSecOps Supply Chain Security Intermediary Talk

Open →2023-06

Dale Lakes - Home Defense for an IoT Infested World

BSides Augusta · 2019

Open →2019-10

Sudo For Defense: How Can New/Lesser-Known Features Help You?

BSides Budabest · 2021

Open →2021-05

Security Tradeoffs In Elasticsearch - Philipp Krenn

BSides Luxembourg · 2019

Technical Intermediary Talk

Open →2019-11

Wes Lambert - Endpoint Excavation: Digging Through Host Artifacts with Velociraptor

BSides Augusta · 2021

Technical Blue Talk

Open →2021-10

NoSQL Means No Security?

BSides Athens · 2020

Technical Demo Talk

Open →2020-06

BSidesAugusta 2018 - Martin Holste - An Anatomy Of A Cloud Hack

Open →2018-11

Security at Speed: Securing Code in your DevOps Pipeline

Daniel Byrnside

BSides Charleston · 2019

Technical DevSecOps Talk

Open →2019-11

Matt Jones - Trumping Musky Infosec Noise with Talkback sh

BSides Perth · 2025

Open →2025-10

From Noise To Insight: Supercharge Your SOC With Automated Alert Correlation

Anicet Fopa Tchoffo

Open →2024-07

Next Level SOC Automation You Never Thought Of

BSides SLC · 2022

Open →2023-01

Threat Hunting in Kubernetes

BSides Budabest · 2020

Open →2021-01

Hack in Your Sleep

BSides Huntsville · 2021

Technical Red Talk

Open →2021-02

Fe-fi-fo-FIM, I Smell The Monitoring Of An Elastic Stack!

Brett Calderbank

BSides Manchester · 2019

Technical Detection Engineering GRC Talk

Open →2019-09

Everybody Loves TAXII by Alexander Darby

Alexander Darby

Open →2023-05

DCO and Data Science: Best Friends Forever

BSides Augusta · 2022

Technical Blue Demo Talk

Open →2022-10

Secure(r) Cloud Development

Christo Goosen Toufeeq Ockards

BSides Cape Town · 2017

Technical Cloud IAM Detection Engineering DevSecOps Talk

Open →2017-12

Waging War on an Entire City

BSides Charleston · 2013

Open →2014-11

Hunting from APT to *QL Queries: From approach to tool

Eddy Mota Edu Vivi

BSides São Paulo · 2025

Technical Detection Engineering Threat Intel Threat Modeling Blue Demo Talk

Open →2025-06

BSidesSF 2025 - Resilience in the Uncharted AI Landscape (Ranita Bhattacharyya)

Ranita Bhattacharyya

BSidesSF · 2025

Open →2025-06

Stop Paying for Domain Feeds: Build Your Own Threat Intel

BSides Belfast · 2025

Technical OSINT Threat Intel Tooling Talk

Open →2025-12

Building the Panopticon: Centralized Logging and Alerting With Free Tools

BSidesROC · 2018

Technical Blue Talk

Open →2018-04

A pain in the SaaS: Scalable Detection in the Age of Data Sprawl

Alan Braithwaite

Open →2025-06

Building a Security Audit Logging System on a Shoestring Budget

BSides Las Vegas

Technical Detection Engineering DevSecOps Talk

Open →2024-09

Considering Cloud Coverage in SIEM/XDR Design

BSides SLC · 2025

Technical Cloud IAM Detection Engineering Threat Modeling Blue Talk

Open →2025-06

Wes Lambert - Augmenting the (Security) Onion: Facilitating Enhanced Detection and Response

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2019-10

DIY Cyber Threat Intelligence

Mark Hahn Thomas Hahn

BSides Seattle · 2025

Technical Cloud IAM DevSecOps Threat Intel Demo

Open →2025-06

Hunting Threats like a Cybersecurity Ninjas

Roberto Martínez

BSides Colombia

Technical Detection Engineering Threat Intel Threat Modeling Blue Talk

Open →2025-04

Blue teaming Incident Response for the Win

Bsides CT · 2019

Technical Blue Talk

Open →2019-11

Show Me The Honey: Creating Elasticsearch Honeypots Powered By LLMs

BSides Belfast · 2025

Research Technical AI Security Detection Engineering Threat Intel Talk

Open →2025-12

BSidesSF 2015 - OSXCollector: Forensic Collection and Automated Analysis for OS X (Ivan Leichtling)

Ivan Leichtling

BSidesSF · 2015

Technical Blue Talk

Open →2023-12

Vector Search for Security Operations Centers: Yay or Nay?

BSides Zagreb · 2025

Technical Detection Engineering Threat Intel Talk

Open →2025-03

Threats Versus Capabilities: Building Better Detect and Respond Capabilities

BSides Dublin · 2022

Technical Detection Engineering Threat Intel Blue Talk

Open →2022-05

The Role of Data Visualization in Improving Machine Learning Models

BSides Las Vegas · 2017

Technical Malware Analysis Talk

Open →2017-08

BSidesBoulder 2023 - Ryan Thompson - Ecosystem of Insights Building Operation Dashboards That Enable

BSides Boulder · 2023

Technical Detection Engineering Tooling Talk

Open →2024-02

My Cyber Sense Is Tingling! Detection Engineering With Free Tools

BSides SATX · 2025

Open →2025-09

Log4Shell If You Don't Know Any Java

BSides Cheltenham · 2022

Technical Vulnerability Research Web AppSec Intro Talk

Open →2022-07

Breaking NBAD and UEBA Detection

Charles Herring

BSides NoVa · 2021

Technical Detection Engineering Threat Intel Advanced Red Technical Deep-dives Talk

Open →2021-07

Building a Sawmill: Processing Logs with Security Onion

BSides Peru · 2024

Technical DFIR Detection Engineering Threat Intel Blue Demo Talk

Open →2024-08

One Stop Anomaly Shop

Vivek Malik Kumar Vikramjeet

BSides Budabest · 2021

Technical Demo Talk

Open →2022-03

Threat Hunting: Defining the Process While Circumventing Corporate Obstacles

BSides Philly · 2018

Technical Blue Talk

Open →2018-11

JOINing Across the Stack: Structured Security Analytics for the Modern Attack Surface

BSides Las Vegas · 2021

Technical Cloud IAM Container Security Detection Engineering Blue Talk

Open →2021-08

Log Management and Log Aggregation

BSides KC · 2017

Open →2017-07

Security Tradeoffs in Elasticsearch

BSides Budabest · 2020

Open →2021-01

Michael Banks - You TOO can defend against MILLIONS of cyber attacks

Open →2016-09

Yeet the Leet with Osquery

Sebastiaan Provost

BSides Newcastle · 2021

Technical Detection Engineering Malware Analysis Threat Intel Talk

Open →2021-10

Forensics: We're Not Just Byte-Sized

BSides Basingstoke · 2025

Open →2025-09

What the deuce: Strategies for splitting your alerts

Open →2017-08

Lessons Learned from Building & Running MHN, a Crowd-sourced Honeynet

BSidesSF · 2015

Research Case Studies and Incidents Analysis Empirical Research Talk

Open →2023-12

Pwning Slack with PowerShell

Carrie Roberts Tony Hamburger

BSides Boise · 2020

Technical Red Demo Talk

Open →2020-01

Automating Detection And Response With Tines - Cameron Higgs & Pat Meehan

Cameron Higgs Pat Meehan

BSides Bristol · 2025

Open →2025-01

The Contemplator Approach: A Tale of Data Enrichment

Rodrigo Brenes Pedro Rodriguez

BSides Las Vegas · 2019

Open →2019-10

GT - Advancing Internet Security Research with Big Data and Graph Databases - Andrew Hess

BSides Las Vegas

Open →2016-12

Indexing the Chaos: Extract PII from Ransomware Leaks

BSides Las Vegas

Open →2025-12

The Declarative Future

Technical Container Security Detection Engineering Web AppSec Keynote

Open →2021-05

Life's a Breach: Modern Data Breach Reporting with Sencode Breaches

BSides Newcastle · 2020

Research Tooling Talk

Open →2020-11

Introducing LMDA: Enhancing Lateral Movement and Data Access Identification on Windows Systems

Kostya Ilioukevitch Phalgun Kulkarni

BSides Edmonton · 2025

Open →2025-10

Current State of Virtualizing Network Monitoring

Ed Sealing Daniel Lohin

BSides Charm · 2017

Technical Detection Engineering Network Security Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2021-05