Home
Talks
CFP Guide
What is BSides?
About
Contact
Light
← All talks
Tool
BSides talks featuring Endpoint Detection and Response
77
talks mention this tool across
46
BSides chapters.
Talks featuring Endpoint Detection and Response
24:56
BSidesMCR 2019: Offensive Development: How To DevOps Your Red Team - Dominic Chell
BSides Manchester
Open →
2019-09
50:28
PowerShell Is DEAD — Epic Learnings!
Ben Turner
Doug McLeod
Rob Maslen
BSides London
· 2019
Technical
Advanced
Blue
Red
Talk
Open →
2019-06
37:13
Phishing With Phineas (Again) Hack Recreation On Steroids
George Karantzas
Constantinos Patsakis
BSides Athens
· 2022
Technical
Advanced
Purple
Case Studies and Incidents Analysis
Technical Deep-dives
Talk
Open →
2022-06
45:19
Wykorzystanie ATT@CK MITRE Do Wykrywania Technik Stosowanych
Jacek Grymuza
BSides Warsaw
· 2018
Technical
Talk
Open →
2018-10
48:29
DUALITY – Advanced Red Team Persistence through Self-Reinfecting DLL Backdoors... - Faisal Tameesh
Faisal Tameesh
BSides KC
· 2023
Technical
Advanced
Red
Talk
Open →
2023-10
19:52
Using an mTLS Identity Provider to achieve Password-less auth, Device Health Attestation, and low Earth orbit
Armen Tashjian
BSidesSF
· 2023
Technical
Cloud IAM
Cryptography
Blue
Talk
Open →
2023-05
52:00
Metrics Mess: Why the Lack of Clear and Common KPIs Undermines SecOps
Eric Olson
BSides NYC
· 2023
Talk
Open →
2023-06
41:49
Prioritising your security work using MITRE ATT&CK
Floris Ladan
BSides Tallinn
· 2022
Technical
Detection Engineering
Threat Intel
Threat Modeling
Intermediary
Blue
Talk
Open →
2022-10
24:24
One Search To Rule Them All: Threat Modelling AI Search
Kane Narraway
BSidesSF
· 2025
Technical
AI Security
Cloud IAM
Threat Modeling
Talk
Open →
2025-06
45:41
Surfacing a Hydra: Unveiling a Multi-Headed Chinese State-Sponsored Campaign Against a Foreign Government
Mark Parsons
BSides Charleston
· 2024
Technical
Detection Engineering
Malware Analysis
Threat Intel
Blue
Case Studies and Incidents Analysis
Talk
Open →
2024-11
52:15
The Rise and Rise of Advanced eCrime Threat — Incident Response Edition
Anurag Khanna
BSides Canberra
Technical
Talk
Open →
2024-11
54:52
Protecting the Forest, Starting at the Roots: AD Hardening & Defence using Modern Techniques
James Spencer
BSides Canberra
· 2025
Technical
Active Directory
Kerberos
Intermediary
Blue
Talk
Open →
2025-11
54:10
Beautiful Basics
Rob Fuller
BSides Vancouver
· 2022
Career
Keynote
Open →
2022-07
40:55
Quando o Simples Vence: Anatomia Real dos Ataques que Continuam Funcionando
Ricardo Tavares
BSides São Paulo
· 2025
War Stories
Active Directory
Detection Engineering
Malware Analysis
Threat Intel
Blue
Purple
Case Studies and Incidents Analysis
+1
Open →
2025-06
55:33
Using MITRE D3FEND to Defend Against Cyber Threats
Jacek Grymuza
Kacper Zariczny
BSides Warsaw
· 2024
Technical
Detection Engineering
Network Security
Threat Modeling
Blue
Talk
Open →
2024-07
31:33
The Ticket To Adventure: A Security Analyst's Journey
B4nd1t0
BSides Basingstoke
Talk
Open →
2022-07
50:37
Terry D . Smith II - Threat Hunting and Hacking Questions which Get Increasingly Harder
Terry D. Smith II
BSides Augusta
Technical
Blue
Talk
Open →
2023-10
43:21
The Problem With Identity Security & How To Fix It
Sean Metcalf
BSides Dublin
Technical
Talk
Open →
2024-06
40:28
Slipping The Net: Qakbot, Emotet And Defense Evasion
Cian Heasley
BSides Cambridge
· 2024
Technical
Detection Engineering
Malware Analysis
Social Engineering
Blue
Talk
Open →
2024-01
45:25
How occult ransomware gangs will sacrifice your domain admin
Nikos Mantas
BSides Tallinn
· 2021
Technical
Active Directory
Case Studies and Incidents Analysis
Talk
Open →
2021-11
47:31
Fighting the Impossible: Supply Chain Attacks
Bojan Ždrnja
BSides Zagreb
Research
Technical
Malware Analysis
Supply Chain Security
Vulnerability Research
Talk
Open →
2025-03
36:01
The Cybersecurity State of the Union
Cris Thomas
BSides Philly
· 2023
Policy
Keynote
Open →
2024-01
44:59
Tony Lambert - Spotting Lateral Movement with Endpoint Data
Tony Lambert
BSides Augusta
· 2019
Technical
Talk
Open →
2019-10
35:18
Hunt the Stank
Melissa Bischoping
Nir Yosef
BSides Delaware
· 2021
Technical
Blue
Talk
Open →
2021-11
47:50
Passive and Active Defense by Jason Maynard
Jason Maynard
BSides Edmonton
Talk
Open →
2018-09
26:43
EDR Killers: Live Rootkit Demo That Blinds Security Tools
Scott Fuhriman
BSides SLC 2026
Technical
Detection Engineering
Malware Analysis
Reverse Engineering
Advanced
Red
Technical Deep-dives
Demo
Open →
2026-04
45:20
SocVel Live: Command The Breach
Jaco Swanepoel
BSides Joburg
Technical
DFIR
Detection Engineering
Threat Intel
Blue
Workshop
Open →
2025-09
46:34
Save the Env (Variable): Hijacking Legit Apps w/ Minimal Footprint
Wietze Beukema
BSides NYC
· 2023
Technical
Malware Analysis
Reverse Engineering
Red
Technical Deep-dives
Talk
Open →
2023-06
42:16
The Fellowship of the Ring0: Driver Risk Scoring for Vulnerability Detection
Dana Behling
BSides Charm
· 2024
Research
Technical
Detection Engineering
Malware Analysis
Vulnerability Research
Empirical Research
Technical Deep-dives
Talk
Open →
2024-06
35:33
06 - Tinker, Tailor, LLM Spy: Investigate & Respond To Attacks On GenAI Chatbots
BSides Toronto
Open →
2025-10
45:14
The Art of Infiltration: Leveraging Trusted Relationships
Vladimir Ožura
BSides Zagreb
Technical
Active Directory
DFIR
Threat Intel
Blue
Case Studies and Incidents Analysis
Talk
Open →
2025-03
24:33
Testing Defensive Controls w/ atomic-operator - Josh Rickard
Josh Rickard
BSides KC
· 2022
Technical
DevSecOps
Blue
Talk
Open →
2022-10
18:07
Ransomware incidents demystified
Thanassis Diogos
BSides Athens
· 2021
War Stories
DFIR
Malware Analysis
Threat Intel
Case Studies and Incidents Analysis
Talk
Open →
2021-07
49:35
BSidesROC 2025 - Investigating a Malicious Script in Microsoft Intune - Dennis Labossiere
BSidesROC
Open →
2025-03
3:20:23
Live BSides Amsterdam 2025 - Tech Track
BSides Amsterdam
· 2025
Technical
Detection Engineering
Malware Analysis
Talk
Open →
2025-11
30:30
Attacking Zero Trust Designs in 2021
Michael Cavallin
BSides Vancouver
· 2021
Technical
Technical Deep-dives
Talk
Open →
2021-06
19:03
Lessons learned in automating the incident Life Cycle
Alexander Sinno
Walter Stinkens
BSides Athens
· 2022
Technical
Demo
Talk
Open →
2022-06
33:48
Demystifying Cloud Infrastructure Attacks
BSides Munich
Technical
Cloud IAM
Red
Talk
Open →
2024-11
40:52
Matija Kos | Hackers Don’t Hack, They Log In: The Threat of Stolen Credentials
Matija Kos
BSides Zagreb
Technical
Detection Engineering
Malware Analysis
Threat Intel
Talk
Open →
2025-03
24:35
Press F to MOVEit: A quest to discover how a web shell appeared
Peter Ukhanov
BSides Charlotte
· 2023
Technical
DFIR
Malware Analysis
Web AppSec
Intermediary
Blue
Case Studies and Incidents Analysis
Technical Deep-dives
+1
Open →
2023-09
26:56
Malicious Packages: Supply Chain Threats and Defense Strategies
Megg Sage
Allan Friedman
BSides Las Vegas
· 2025
Technical
Supply Chain Security
Blue
Case Studies and Incidents Analysis
Talk
Open →
2025-12
24:20
Rogue - Neil Lines
Neil Lines
BSides Leeds
Technical
Red
Talk
Open →
2020-07
43:54
Você sabe de onde veio sua IA?
Larissa Fabião da Fonseca
BSides São Paulo
· 2025
Technical
AI Security
Supply Chain Security
Case Studies and Incidents Analysis
Technical Deep-dives
Talk
Open →
2025-06
36:47
Tim Crothers - Living off the (land)cloud: Scattered Spider and the cloud control plane
Tim Crothers
BSides Augusta
· 2025
Technical
Cloud IAM
Blue
Red
Demo
Talk
Open →
2025-10
23:08
AI Agents Could Be Running Your SOC To Prevent Cyber Attacks
Keyur Rajyaguru
BSides Charm
· 2025
Technical
AI Security
Detection Engineering
Talk
Open →
2025-05
30:08
Before the Breach: The Security Essentials
Peter Ukanov
BSides Charlotte
· 2025
Technical
DFIR
Detection Engineering
Intermediary
Blue
Case Studies and Incidents Analysis
Talk
Open →
2025-05
34:18
Your SOC is doomed to Fail - collapse it and automate
Garry Coldwells
BSides Cayman Islands
· 2022
Technical
Talk
Open →
2022-07
57:06
Overt Operations: When the Red Team Gets in Your Face
Matthew Toussain
BSides SATX
· 2020
Technical
Advanced
Red
Talk
Open →
2020-08
28:24
Fantastic Clear-Text Passwords And Where To Collect Them
Stephan Berger
BSides Munich
· 2025
Technical
Active Directory
Malware Analysis
Threat Intel
Blue
Case Studies and Incidents Analysis
Talk
Open →
2026-02
28:26
Chasing Whispers: A Pragmatic Review of Adversary Emulation Processes
Kyle Smith
BSides Charleston
· 2024
Technical
Detection Engineering
Threat Intel
Threat Modeling
Purple
Talk
Open →
2024-11
30:46
Defending Your Organization Against Ransomware Sean Heffley TRISS 2017
BSides Peru
Open →
2017-10
50:26
Shelly Giesbrecht: The Trouble With Ransomware
Shelly Giesbrecht
BSides Calgary
· 2020
Technical
Talk
Open →
2020-12
43:50
Considering Cloud Coverage in SIEM/XDR Design
Chris Beckman
BSides SLC
· 2025
Technical
Cloud IAM
Detection Engineering
Threat Modeling
Blue
Talk
Open →
2025-06
1:00:02
Hunting Threats like a Cybersecurity Ninjas
Roberto Martínez
BSides Colombia
Technical
Detection Engineering
Threat Intel
Threat Modeling
Blue
Talk
Open →
2025-04
58:20
Hackers on the Move: Tools of the Trade
Hank Fordham
BSides Calgary
Technical
Hardware Hacking
Network Security
Social Engineering
Wireless Security
Red
Demo
Talk
Open →
2024-03
46:03
Defending Beyond Defense
Dr. Catherine J. Ullman
BSides 312
· 2025
Career
Technical
Detection Engineering
Malware Analysis
Threat Intel
Talk
Open →
2025-11
20:36
Essential Logs Pyramid SIEM
Eric Goldstrom
BSides PDX
· 2023
Technical
Detection Engineering
Threat Intel
Blue
Talk
Open →
2023-10
24:13
The Dark Playground of CI/CD: Attack Delivery by GitHub Actions
Yusuke Kubo
Kiyohito Yamamoto
BSides Las Vegas
· 2023
Research
DevSecOps
Supply Chain Security
Vulnerability Research
Advanced
Red
Case Studies and Incidents Analysis
Technical Deep-dives
+1
Open →
2023-10
59:08
Alexander Andersson - Demystifying Cloud Infrastructure Attacks (BSidesFrankfurt 2024)
BSides Frankfurt
Open →
2025-04
54:16
PurpleTeam 101 by Chris Peacock
Chris Peacock
BSides Tampa
· 2023
Purple
Talk
Open →
2023-09
47:26
I Make Them Good Processes Go Bad: Deep Dive on LOLbins & GTFObins
Taylor Kaufman
BSides Buffalo
· 2023
Technical
Blue
Red
Talk
Open →
2023-06
24:50
PG - Enemy at the Gate, and Beyond: Detecting and Stopping Account Takeover
Yuval Zacharia
BSides Las Vegas
· 2023
Technical
Cloud IAM
Detection Engineering
Threat Intel
Blue
Talk
Open →
2023-10
47:06
The Cat and Mouse Game! EDR and XDR
Jason Maynard
BSides Calgary
· 2021
Technical
Talk
Open →
2021-12
53:38
Russell Eubanks - Beyond Compliance: How to Build a Cybersecurity Program That Actually Works
Russell Eubanks
BSides Knoxville
· 2026
Career
Policy
Talk
Open →
2025-07
47:39
PCI DSS 4.0: What's Changed and What It Means
Justin Leapline
BSides Peru
Technical
GRC
Talk
Open →
2022-09
35:25
Defense-in-Depth for Industrial Controls
Brad Hamlett
BSides Greenville
· 2020
Technical
Industrial Control Systems
Supply Chain Security
Intermediary
Blue
Case Studies and Incidents Analysis
Talk
Open →
2020-06
48:51
Stories from the trenches - How a red team exercise gained full control of a client network
Cristian Cordeiro
BSides Edmonton
· 2024
War Stories
Red
Talk
Open →
2025-05
40:25
Catching More Files - Spotting the Adversary with Honey Techniques
Matthew Gracie
BSidesROC
· 2023
Technical
Talk
Open →
2024-09
33:29
Rips, Reps and Revelations: Creating Cyber Fire Drills with Atomic Red Team
Paul Michaud
BSidesROC
· 2023
Technical
Detection Engineering
Threat Intel
Purple
Talk
Open →
2024-09
16:15
What the DLL is happening? A practical approach to identifying SOH.
BSides Dallas/Fort Worth
Open →
2020-11
25:38
A Winning Competition
Wasabi
BSides Las Vegas
· 2025
Community
Talk
Open →
2025-12
29:40
Deploying Honeypots for High-Fidelity Threat Detection and Intelligence
Anicet Fopa Tchoffo
BSides Leeds
· 2026
Technical
Detection Engineering
Threat Intel
Blue
Talk
Open →
2025-08
25:05
Rob Truesdell - How do you find the needle in the haystack? Burn all the hay!
BSides FloodCity
Open →
2019-05
40:05
Shedding Light on Web Isolation Technologies and Their Bypass Techniques: C2 Communication via Outlook Using SMTP and IMAP
Terada Yu
BSides Las Vegas
· 2025
Technical
Malware Analysis
Web AppSec
Talk
Open →
2025-12
15:11
The Prevalence of PlugX and Hardening Against It
Will Bailey
BSides Bristol
· 2025
Technical
Malware Analysis
Threat Intel
Talk
Open →
2025-01
39:03
Demand More from Your Endpoint
Sean Weiss
BSides St. John's
Technical
Talk
Open →
2025-05
45:47
Stephane Asselin - Security Frameworks and Zero Trust
BSides St. John's
Open →
2025-05