Tool

BSides talks featuring MITRE ATT&CK Framework

237 talks mention this tool across 69 BSides chapters.

Cybersecurity adversary tactics and techniques knowledge base used to model domestic abuse attack patterns

Talks featuring MITRE ATT&CK Framework

Post-Exploit Threat Modeling with ATT&CK

BSides Delaware · 2016

Open →2016-11

BG - ATT&CKing the Status Quo: Improving Threat Intel and Cyber Defense with MITRE ATT&CK - Katie Ni

BSides Las Vegas

Open →2018-09

MITRE ATT&CK Framework For Threat Hunting - Seth Brunt and Abby Warnes

Seth Brunt Abby Warnes

BSides Bristol · 2019

Open →2019-07

Keeping CTI on Track: An Easier Way to Map to MITRE ATT&CK

Jackie Lasky Sarah Yoder

BSides DC · 2019

Technical Purple Methodology Technical Deep-dives Talk

Open →2019-11

Discover Analytic Gaps with Unfetter

Matt Davis Shaun McCullough

BSides DC · 2017

Technical Blue Talk

Open →2017-10

Objectively Measuring Hunt Value

Justin Kohler Patrick Perry

BSides Augusta · 2018

Technical Detection Engineering Threat Intel Blue Talk

Open →2018-10

TL;DR: Applying AI to Security

BSidesSF · 2024

Technical AI Security Detection Engineering Threat Intel Intro Talk

Open →2024-07

BSides London · 2022

Technical Detection Engineering Threat Modeling Intro Blue Talk

Open →2022-01

Find, Fix, Finish: Generating Competitive Advantage With Threat Hunting

BSides Canberra · 2024

Technical Detection Engineering Threat Intel Blue Methodology Talk

Open →2024-10

Wykorzystanie ATT@CK MITRE Do Wykrywania Technik Stosowanych

BSides Warsaw · 2018

Open →2018-10

Fantastic AWS Attacks and Where to Find Them

Georgios Kapoglis

BSidesSF · 2020

Technical Cloud IAM Talk

Open →2020-03

Getting In: Initial Access In 2023 by Tony Gee

BSides Dublin · 2023

Open →2023-07

LSASS - What should we be doing?

BSides Augusta · 2021

Technical Active Directory Threat Modeling Intermediary Blue Talk

Open →2021-10

Finding Haystacks in Your Needles: Threat Hunting Problems in Real World Data - Miller

Open →2017-05

Keynote - Jeff Banner

Open →2019-09

Att&ck™ the Attacker

Christian Kollee

BSides Munich · 2018

Open →2018-04

Automating Threat Hunting on the Dark Web

Apurv Singh Gautam

BSides Philly · 2020

Technical OSINT Threat Intel Technical Deep-dives Talk

Open →2020-12

Threat hunting: Using MITRE ATT&CK against Carbanak malware

BSidesSF · 2022

Technical Detection Engineering Malware Analysis Threat Intel Intermediary Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2022-07

Threat Hunting by Dhruv Majumdar

BSides Edmonton · 2018

Open →2018-09

Don't Boil the Ocean: Using MITRE ATT&CK to Guide Hunting Activity

BSidesSF · 2019

Technical Blue Talk

Open →2019-03

Learning from AWS Customer Security Breaches

Bsides CT · 2020

Technical Cloud IAM DFIR Intermediary Case Studies and Incidents Analysis Talk

Open →2020-11

MITRE D3FEND and How to Master It

BSides Sydney · 2025

Technical Detection Engineering Threat Intel Threat Modeling Blue Case Studies and Incidents Analysis Methodology Talk

Open →2025-02

Leveraging Osquery for DFIR at Scale

Sohini Mukherjee

BSidesSF · 2020

Technical DFIR Detection Engineering Intermediary Talk

Open →2020-03

Keynote: David Kennedy

BSides Augusta · 2018

Open →2018-10

MITRE D3FEND by James Gibbins

BSides London · 2022

Open →2022-02

Using DeTT&CT and the MITRE ATT&CK Framework to Assess Your Security Posture

David Branscome

BSides Knoxville · 2022

Technical Detection Engineering Threat Modeling Intermediary Blue Demo Talk

Open →2022-05

Metrics Mess: Why the Lack of Clear and Common KPIs Undermines SecOps

BSides NYC · 2023

Open →2023-06

Prioritising your security work using MITRE ATT&CK

BSides Tallinn · 2022

Technical Detection Engineering Threat Intel Threat Modeling Intermediary Blue Talk

Open →2022-10

Open Source Adversary Simulation Toolset Review

BSides Peru · 2019

Technical Purple Talk

Open →2019-07

One Technique, Two Techniques, Red Technique, Blue Technique: Operationalizing MITRE ATT&CK

Jamie Williams Daniel Weiss

Technical Detection Engineering Threat Intel Threat Modeling Talk

Open →2018-11

PG - Unifying the Kill Chain - Paul Pols

BSides Las Vegas

Open →2018-09

MITRE ATLAS: Exploring AI Vulnerabilities

BSides London · 2025

Technical AI Security Threat Modeling Case Studies and Incidents Analysis Talk

Open →2025-02

GF - ATT&CKing Your Adversaries -- Operationalizing cyber intelligence in your own environment for b

BSides Las Vegas

Open →2019-10

Threat Intelligence In Numbers - Nir Yosha

Open →2017-05

Keeping CTI on Track: An Easier Way to Map to MITRE ATT&CK

BSides DC · 2019

Research Technical Blue Methodology Technical Deep-dives Demo Talk

Open →2019-10

Ross Wolf - The Hunter Games: How to find the adversary with EQL

BSides SATX · 2019

Technical Blue Talk

Open →2019-09

LoL-Bins Behaving Badly - Andrew Costis

BSides Liverpool

Open →2019-07

Chris Nickerson

BSides KC · 2017

Open →2017-07

BSides Rochester 2019 - Threat Hunting and Other Arcane Magic

Open →2019-03

How to Train Your Detection Dragon

BSidesSF · 2025

Technical Detection Engineering Blue Talk

Open →2025-10

Attacking Microsoft Exchange: Fusing LightNeuron with Cobalt Strike

BSides Cape Town · 2023

Technical Detection Engineering Malware Analysis Reverse Engineering Advanced Purple Red Talk

Open →2023-12

Billy Huang - Taking Back Control of Your SOC with Risk Based Alerting

Open →2022-10

Testing Security Solutions with Atomic Red Team

BSides Knoxville · 2018

Technical Detection Engineering Threat Intel Blue Talk

Open →2019-04

Build Your Own Threat Intel Platform (No Budget Required)

BSides SLC · 2026

Technical AI Security OSINT Threat Intel Intro Talk

Open →2026-04

So You Wanta Build a C2?

BSides Las Vegas · 2022

Technical Malware Analysis Reverse Engineering Red Talk

Open →2022-09

Using MITRE D3FEND to Defend Against Cyber Threats

Jacek Grymuza Kacper Zariczny

BSides Warsaw · 2024

Technical Detection Engineering Network Security Threat Modeling Blue Talk

Open →2024-07

Is the Power Grid a Huge Cybersecurity Risk?

BSides Vancouver · 2021

Technical Critical Infrastructure DFIR Network Security Talk

Open →2021-06

Eric Goldstrom - Interactive Threat Defense: Incident Response, Threat Intel, and Red Team (oh my!)

Open →2019-11

BSidesSF 2024 - Effective Detection in Kubernetes Clusters (Shay Berkovich, Oren Ofer)

Shay Berkovich Oren Ofer

BSidesSF · 2024

Open →2024-07

Skynet the CTI Intern: Building Effective Machine Augmented Intelligence

Scott J Roberts

BSidesSF · 2024

Open →2024-07

Forecasting Cyber Attacks

Charlene Deaver-Vazquez

BSides Charm · 2022

Technical Threat Intel Threat Modeling Methodology Technical Deep-dives Talk

Open →2022-07

BSidesCharm 2023 - It’s all Magic(RAT) – A look into recent North Korean nation-state attacks

Open →2023-05

Red + Blue = Purple: How to execute purple team exercises even if you think you can't

Isidoros Monogioudis

BSides Athens · 2018

Technical Purple Talk

Open →2018-08

The Process of Detection Engineering1

Technical Intermediary Blue Talk

Open →2023-03

Learning Security by ATT&CK'ing Yourself

BSides PDX · 2018

Career Community Talk

Open →2019-02

Cyber EMTs: Emergency Malware Technicians

BSides Canberra · 2024

Open →2024-11

Understanding the Latest MITRE ATT&CK Evaluation Data

BSides Vancouver · 2021

Technical Detection Engineering Threat Intel Blue Talk

Open →2021-06

Testing Endpoint Security Solutions with Atomic Red Team

BSides Asheville · 2018

Technical Detection Engineering Threat Modeling Intermediary Blue Purple Methodology Demo

Open →2019-03

BG - The Fault in Our Metrics: Rethinking How We Measure Detection & Response

BSides Las Vegas

Technical Detection Engineering Blue Talk

Open →2024-09

How to take cookies from the Cookie Monster: Genesis Market Takedown

BSides TLV · 2023

War Stories DFIR Malware Analysis Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2023-07

Offense for Everyone by Bryson Bort

BSides Tampa · 2025

Technical Red Talk

Open →2025-07

Red Teaming On Critical Infrastructure

BSides London · 2025

Technical Critical Infrastructure Threat Modeling Red Talk

Open →2024-02

Red and Blue Ping Pong: Living Off the Land in Windows Attack and Defense

Lee Kagan Anton Ovrutsky

BSides Toronto · 2017

Technical Active Directory Malware Analysis Purple Demo Talk

Open →2018-01

How occult ransomware gangs will sacrifice your domain admin

BSides Tallinn · 2021

Technical Active Directory Case Studies and Incidents Analysis Talk

Open →2021-11

BSides PDX 2023 - Using Sigma as a Gateway to Detection Engineering (Micah Babinski)

BSides PDX · 2023

Open →2023-10

Detection-as-Code: Scaling SOC Operations

Aaron Wilkinson

Technical Blue Talk

Open →2025-02

Enemy Within: Leveraging Purple Teams for Advanced Threat Detection & Prevention

Jayson Grace Adam Bradbury

BSides Las Vegas · 2023

Technical Detection Engineering Threat Intel Threat Modeling Purple Case Studies and Incidents Analysis Methodology Talk

Open →2023-10

PG - The SOC Counter ATT&CK - Mathieu Saulnier

BSides Las Vegas

Open →2019-10

Threat Hunting: Out of the Gate with Windows Logs

Greg Longo Brian Gardiner

BSides Peru · 2019

Technical Detection Engineering Malware Analysis Threat Intel Intro Blue Technical Deep-dives Talk

Open →2019-07

Mystical Vulnerabilities: Exploring Oddities in Cybersecurity

Massimo Morello

BSides Munich · 2025

Research Threat Intel Vulnerability Research Talk

Open →2024-11

Threat Landscape: Greece

Anastasios Pingios

BSides Athens · 2020

Open →2020-06

BSidesCharm 2025 - What’s in the Cloud? - Kai Iyer

Open →2025-05

Cloudy With a Chance of Purple Rain: Leveraging Stratus Red Team to Secure Your Clouds

Luciano Avendano

BSides PDX · 2022

Technical Cloud IAM Detection Engineering Threat Modeling Purple Demo Talk

Open →2022-10

Threat Modeling: Intro for Security Architecture

BSides Dallas/Fort Worth · 2024

Technical Threat Modeling Intro Purple Talk

Open →2025-01

Melissa Bischoping Nir Yosef

BSides Delaware · 2021

Technical Blue Talk

Open →2021-11

Threat Intelligence: How to Focus Fire on the Bad Guys Coming for Your Network

BSides SATX · 2020

Technical Blue Talk

Open →2020-08

PG - Intel-Driven Adversary Simulation for A Holistic Approach to Cybersecurity

Carlos Gonçalves

BSides Las Vegas · 2024

Technical Threat Intel Threat Modeling Purple Case Studies and Incidents Analysis Talk

Open →2024-09

Tactics, Techniques and Procedures - Building and Running a Blue Team from Scratch

Abhishek Tripathi

BSides SATX · 2018

Technical Detection Engineering Threat Intel Blue Talk

Open →2018-10

What if we really assumed breach?

BSides Amsterdam · 2017

Technical Case Studies and Incidents Analysis Talk

Open →2017-09

Paul Melson - Automating Malware Analysis for Threat Intelligence

BSides Augusta · 2016

Open →2016-09

Securing AI - Seth

Open →2024-01

ATT&CK Yourself: Using Discrete Adversary TTPs to Make Your Network and Systems More Defendable

BSides Springfield · 2017

Open →2018-02

Becoming a Dark Knight: Adversary Emulation Demonstration for ATT&CK Evaluations

Cat Self Kate Esprit

BSides Las Vegas · 2023

Research Technical Malware Analysis Reverse Engineering Threat Intel Red Case Studies and Incidents Analysis Technical Deep-dives+2

Open →2023-10

Shall We Play a Game?

J Wolfgang Goerlich

BSidesSF · 2019

Open →2019-03

Making Sense of Unstructured Threat Data

Zainab Danish Nicolas Kseib

BSidesSF · 2019

Open →2019-03

28 Seconds Later: The Epidemiological Triangle & Other Models for Influence Ops

BSides DC · 2019

Open →2019-10

Attack Simulations and Hunting Made Easy

Nathi Mogomotsi

BSides Cape Town · 2017

Open →2017-12

Malware Behavior Catalog

BSides DC · 2019

Technical Technical Deep-dives Talk

Open →2019-10

Vivek Ponnada: Top 20 Secure PLC Coding Practices

BSides Calgary · 2021

Technical Technical Deep-dives Talk

Open →2021-12

BSidesSF 2024 - Faux Data, Real Defense: ML advancements in data synthesis (Arjun Chakraborty)

Arjun Chakraborty

BSidesSF · 2024

Open →2024-07

Making Consistent STRIDEs With Threat Modeling Templates

Open →2024-01

Applying Sysmon-type Filtering to Elastic Agent Process Auditing

BSides Augusta · 2023

Technical DFIR Detection Engineering Blue Demo Talk

Open →2023-10

Winning by deception: tactics, techniques, and procedures of adversarial A.I.

Michael Mallen Jeremy Rasmussen

Open →2024-05

Kubernetes Security: Attacking and Defending K8s Clusters

BSides Vancouver · 2021

Technical Container Security Purple Talk

Open →2021-06

Social Engineering The Kill Chain by Tom Harrison

BSides Leeds · 2023

Open →2023-07

Testing Defensive Controls w/ atomic-operator - Josh Rickard

BSides KC · 2022

Technical DevSecOps Blue Talk

Open →2022-10

De Dados a Decisões: O Papel da CTI na Mitigação de Riscos de Vulnerabilidades

Álvaro Farias Jr

BSides São Paulo · 2025

Technical Threat Intel Vulnerability Research Blue Talk

Open →2025-06

BSidesAugusta 2018 - Joseph Pilkington - Purple Reign: Elevate Your Analysts, Build Your Playbook

Open →2018-11

Measuring Cyber Defense With The MITRE Framework

Marcus Osterloh

BSides Munich · 2022

Technical Detection Engineering Threat Modeling Talk

Open →2022-05

Honeypots, I Shrunk The Data by Oscar Williamson

Oscar Williamson

BSides London · 2023

Open →2023-05

Technical Deep-Dive: SentinelOne

Open →2021-12

Mitigating Lateral Movement: Quick Wins

BSides Augusta · 2019

Open →2019-10

Threat Actors' Interest in AI — Separating Hype from Reality

BSides PDX · 2024

Research AI Security Threat Intel Case Studies and Incidents Analysis Empirical Research Talk

Open →2024-11

28 Seconds Later: The Epidemiologic Triangle and Other Models

BSides DC · 2019

Open →2019-10

Ransomware: The Real Pandemic

Jeremy Rasmussen

BSides Tampa · 2021

Technical Case Studies and Incidents Analysis Talk

Open →2021-04

A Journey Through MITRE Evaluation - Alex Davies

BSides Cymru Wales · 2019

Open →2019-10

What Should a Mobile Security Program Look Like? YMMV

BSides Delaware · 2019

Open →2019-11

A Better Way to Threat Matrix

BSides Augusta · 2021

Technical Threat Intel Threat Modeling Demo Talk

Open →2021-10

Adversary Emulation for Everyone!

Cristian Di Bartolomeo Todd Brecher

BSides Toronto · 2023

Technical Detection Engineering Threat Intel Threat Modeling Intro Purple Demo Talk

Open →2023-11

Calling from Inside the House: How Nation States Use Your Domain to Compromise Your Cloud Infrastructure

BSides Vancouver · 2021

Technical Cloud IAM DFIR Threat Intel Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2021-06

Lessons Learned From The Verizon Data Breach Investigation Report

BSides Luxembourg · 2018

Research DFIR Threat Intel Case Studies and Incidents Analysis Talk

Open →2018-10

Screaming About Detection Coverage in ALLCAPS

BSides Philly · 2025

Technical Detection Engineering Threat Modeling Purple Empirical Research Methodology Talk

Open →2026-02

Ransomware Protection Full Of Holes

BSides Tallinn · 2023

Technical Red Talk

Open →2023-10

IOC What You Mean - Darren Kingsnorth

Darren Kingsnorth

BSides Cymru Wales · 2023

Open →2023-04

Cryptocurrency and the Evolving Threat of Ransomware

Bsides CT · 2020

Open →2020-11

Decision Analysis Applications in Threat Analysis Frameworks

BSides Las Vegas · 2018

Research Threat Intel Threat Modeling Intermediary Talk

Open →2018-09

Emulating the Adversary While Training the Defenders: Purple Teaming with MITRE ATT&CK

BSides KC · 2021

Technical Purple Talk

Open →2021-11

AI Cyberoperations: Boosting SOC Efficiency with Artificial Intelligence

BSides Colombia

Technical AI Security Detection Engineering Blue Talk

Open →2025-03

Threat Modeling Intro for Security Architecture - Brennan Crowe

BSides SATX · 2024

Technical Intro Talk

Open →2024-06

2024 Security BSides // Mick Baccio

BSides Cayman Islands · 2024

Open →2025-01

Understanding the Modern Attack: A Review of the Adversary's Operational Lifecycle

BSides Vancouver · 2022

Technical Detection Engineering Threat Intel Threat Modeling Case Studies and Incidents Analysis Methodology Talk

Open →2022-07

OWASP Won't Save You Here Tale Of A Modern Web App Challenge by Tas Tondang

Open →2024-10

AI+CTI=(Open)UEBA - An Equation That Works

Nil Ortiz Rabella Albert Calvo

BSides Barcelona · 2021

Open →2022-01

SaaSquatch Hunters: Threat Detection In The Wild Of SaaS

Julie Agnes Sparks

BSides Dublin · 2026

Technical Cloud IAM Detection Engineering Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2025-10

AMSI: O cão de guarda que late mas não morde?

Mario Lobo Romero

BSides São Paulo · 2025

Technical Detection Engineering Malware Analysis Technical Deep-dives Talk

Open →2025-06

Intel-Driven Red Teaming - Carlos Gonçalves

Carlos Gonçalves

BSides Lancashire · 2024

Technical Red Talk

Open →2024-05

Becoming Cybersecurity Bilingual to Build an Effective Detection Program

BSides Peru · 2024

Career Technical Detection Engineering Threat Intel Threat Modeling Talk

Open →2024-08

The Million Dollar CEO Fraud: Anatomy of a Business Email Compromise: Damien Miller-McAndrews

Damien Miller-McAndrews

BSides Edmonton · 2023

Technical Blue Case Studies and Incidents Analysis Talk

Open →2023-10

Bringing Intelligence into Cyber Deception with MITRE ATT&CK

Adam Pennington

BSides Cayman Islands · 2022

Open →2022-06

Detection Mastery: War Stories From The Hunters Side

Ilya Kolmanovich Felix Kurmisch

BSides Toronto · 2020

Technical Detection Engineering Malware Analysis Threat Intel Blue Talk

Open →2021-11

BSides RDU · 2019

Open →2019-10

BSidesCharm 2024 - Defenders can use ATT&CK! Oh really? - Lex Crumpton

Open →2024-06

Abigail Soto Seguridad en infraestructura crítica, en defensa de los ICS

Open →2021-04

Red Team Engagements: How to Train Your Blue Team to Hunt Adversaries

Brad Richardson Madhav Bhatt

BSides RDU · 2021

Technical Purple Red Talk

Open →2021-10

What the Log?! So Many Events, So Little Time...

BSides Luxembourg · 2019

Open →2019-11

Pi$$ing Off An APT - Ed Williams

BSides Bristol · 2019

Open →2019-07

Purple Teaming 301 – Free Attack Simulation and Control Validation via Atomic Red Team

BSides Charm · 2024

Technical Detection Engineering Threat Modeling Purple Talk

Open →2024-06

Visualize Windows Events using Python3 & Neo4j

Tasos Chatziefstratiou

BSides Athens · 2020

Technical Blue Demo Talk

Open →2020-06

How to Prepare for the SEC Cybersecurity Rules Before December 2023

Bsides CT · 2023

Policy GRC Supply Chain Security Talk

Open →2023-10

Risk is Not Axiomatic

Methodology Keynote

Open →2025-06

How To Introduce Proactive Security In Your Team by Wiktor Wielento

Wiktor Wielento

BSides London · 2023

Open →2023-05

Your SOC is doomed to Fail - collapse it and automate

Garry Coldwells

BSides Cayman Islands · 2022

Open →2022-07

Chasing Whispers: A Pragmatic Review of Adversary Emulation Processes

BSides Charleston · 2024

Technical Detection Engineering Threat Intel Threat Modeling Purple Talk

Open →2024-11

BSidesCharm 2022 - Three Bridges & a Compass: Navigating Risk Landscapes with Intelligence

Open →2022-07

DCO and Data Science: Best Friends Forever

BSides Augusta · 2022

Technical Blue Demo Talk

Open →2022-10

Building The ATT&CK Pipeline For Linux - Tim Wadhwa-Brown

Tim Wadhwa-Brown

BSides London · 2025

Research Technical Blue Purple Case Studies and Incidents Analysis Empirical Research Talk

Open →2025-02

The Fault in Our Metrics: Rethinking How We Measure Detection & Response

BSides SATX · 2024

Technical Detection Engineering Threat Intel Talk

Open →2024-06

Adversarial AI Attacks In Cyber Security

BSides Lancashire

Open →2024-04

Operationalizing Purple Team

Jorge Orchilles

BSides SATX · 2021

Technical Purple Talk

Open →2021-06

Threat Modeling 101: ATT&CK, D3FEND, and the Security/Convenience Spectrum

BSides Peru · 2022

Technical Threat Modeling Intro Talk

Open →2022-09

Convergence: An Analytical Deep Dive into Foreign Intelligence Activity in US-Based Critical Infrastructure

BSides SATX · 2019

Technical Threat Intel Advanced Blue Talk

Open →2019-09

Jason Keirstead - A Gentle Introduction to MITRE ATT&CK

Jason Keirstead

BSides Fredericton · 2018

Community Technical Detection Engineering Threat Intel Intro Blue Talk

Open →2018-12

Under the Hood of Ransomware.live: Building an Open-Source Ransomware Observatory

Julien Mousqueton

BSides Bournemouth · 2025

Research Technical Malware Analysis OSINT Threat Intel Intermediary Case Studies and Incidents Analysis Empirical Research+1

Open →2025-09

Keynote: Knowledge is Power

BSides Charm · 2018

Community Intro Keynote

Open →2021-05

Better Way to Threat Matrix

BSides Greenville · 2021

Technical Blue Talk

Open →2021-10

Hunting from APT to *QL Queries: From approach to tool

Eddy Mota Edu Vivi

BSides São Paulo · 2025

Technical Detection Engineering Threat Intel Threat Modeling Blue Demo Talk

Open →2025-06

MITRE ATT&CK – Combining APTs, TTPs, & GRC to build realistic security programs

Alex Martirosyan

BSides Buffalo · 2022

Open →2022-06

Linux Monitoring with Elastic Security

BSides Augusta · 2022

Open →2022-10

BSidesGVL 2021 - Nick Sweet - "Pretty Easy Threat Hunting"

BSides Greenville · 2021

Open →2021-10

SIEMplifying Your IR Playbook

BSides Knoxville · 2022

Technical Detection Engineering Threat Modeling Talk

Open →2022-05

Tim Schulz - Automating Adaptive Adversaries

BSides Knoxville

Open →2022-05

Every Breath You Take: A CTI Review of Stalkerware

BSides Porto · 2020

Research Technical Malware Analysis Mobile Security Threat Intel Talk

Open →2020-11

Revenge on the Worms! Towards Deception Against Automated Adversaries

Andy Applebaum Ron Alford

BSides Las Vegas · 2021

Research Technical AI Security Detection Engineering Threat Modeling Advanced Talk

Open →2021-08

BSides Iowa 2018: "Drug Dealing in IOC’s: a retrospective on threat intel & threat hunting..."

Open →2018-04

Greg Foss - The Future of Destructive Malware

BSides Boulder · 2020

Research Technical Talk

Open →2020-11

Every Step Counts: Strategic Defense for the Modern Blue Team

Jarkko Kinnunen

BSides Tallinn · 2025

Technical Blue Talk

Open →2025-10

BSidesCharm 2025 - Fight Stealth with Stealth: Detecting post-breach activity in the Cloud - Jenko H

Open →2025-05

Human Fingerprints: Building Better Tabletop Exercises with Realistic Adversary Tradecraft

Open →2025-06

Hunting Threats like a Cybersecurity Ninjas

Roberto Martínez

BSides Colombia

Technical Detection Engineering Threat Intel Threat Modeling Blue Talk

Open →2025-04

Defending Beyond Defense

Dr. Catherine J. Ullman

BSides 312 · 2025

Career Technical Detection Engineering Malware Analysis Threat Intel Talk

Open →2025-11

How to Prioritize Red Team Findings: Presenting CRTFSS (Common Red Team Findings Score System)

Guillermo Buendia

BSides Las Vegas · 2023

Technical Threat Intel Threat Modeling Red Methodology Talk

Open →2023-10

I Thought I Saw a HAXOR

Thomas V. Fischer

BSides Amsterdam · 2017

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2017-09

Essential Logs Pyramid SIEM

BSides PDX · 2023

Technical Detection Engineering Threat Intel Blue Talk

Open →2023-10

Closing the Gap vs Adversaries With Community Resources

BSides NYC · 2023

Technical Detection Engineering Threat Intel Threat Modeling Blue Demo Talk

Open →2023-06

DevSecOps: When It's Not a Buzzword

BSides Calgary · 2022

Technical Container Security Detection Engineering DevSecOps Talk

Open →2022-12

Striding Out To Prevent Misconfigurations

Open →2025-08

Building Cyber Resilience in the Face of Cyber Attacks

BSides Edmonton · 2023

Technical DFIR Detection Engineering Talk

Open →2023-11

Automagic your attack simulation - JJ Widener

BSides KC · 2022

Technical Blue Talk

Open →2022-10

Threat Models And Critical Paths In The Cloud Security Age - Marcus Tenorio

BSides Newcastle · 2025

Technical Cloud IAM Container Security Threat Modeling Talk

Open →2025-03

PurpleTeam 101 by Chris Peacock

BSides Tampa · 2023

Open →2023-09

Follow the Rules

Wolfgang Goerlich

BSides Charleston · 2018

Technical Keynote

Open →2018-11

Actioning ATT&CK

BSides Delaware · 2018

Technical Detection Engineering Threat Modeling Purple Technical Deep-dives Talk

Open →2018-11

Building Your MS Sentinel Attacks: Simulating MITRE ATT&CK Techniques In Azure

Albert Timileyin

Technical Demo Talk

Open →2025-08

Building a sustainable detector development lifecycle

BSides Charleston · 2022

Open →2023-01

Copy That: Tracking and clustering ClickFix campaigns

BSides Augusta · 2025

Technical Detection Engineering Malware Analysis Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2025-10

The Fault in Our Metrics: Rethinking How We Measure Detection & Response

BSides Seattle · 2024

Open →2024-10

The Cat and Mouse Game! EDR and XDR

BSides Calgary · 2021

Open →2021-12

You Got A SIEM Now What

BSidesROC · 2023

Technical Detection Engineering Threat Intel Blue Talk

Open →2024-09

RAGnarok: Assisting Threat Hunting with Local LLMs

Jun Miura Cybelle Oliveira

BSides Las Vegas · 2025

Technical AI Security Detection Engineering Threat Intel Blue Demo Talk

Open →2025-12

Pretty Easy Threat Hunting

BSides SATX · 2021

Technical Blue Talk

Open →2021-06

Thinking Outside the SOC: Structured Analytics for the Overloaded Cyber Analyst

Alina Thai Haily Beem

BSides Las Vegas · 2025

Technical DFIR Threat Intel Threat Modeling Talk

Open →2025-12

Incident Response is HARRRRRD… but it doesn't have to be

BSides SATX · 2020

Technical Blue Talk

Open →2020-08

Sharing Open Datasets with the World to Develop Detections from Home | Roberto Rodriguez

Roberto Rodriguez

BSides Delhi 2020

Community Technical DFIR Detection Engineering Threat Modeling Talk

Open →2020-11

ZERO-RULES Alert Contextualizer & Correlator

BSides Las Vegas · 2024

Technical AI Security Detection Engineering Threat Intel Blue Talk

Open →2024-09

IOCs are dead, long live the TTPs!

BSides KC · 2019

Technical Blue Talk

Open →2019-06

From Shadow AI to Secure Agents: The C.H.A.N.G.E. Playbook

Barath Subramaniam

BSides Seattle · 2026

Technical AI Security Talk

Open →2026-03

Christopher Peacock: TTP Pyramid

Christopher Peacock

BSides St. Pete · 2025

Technical Detection Engineering Threat Intel Purple Technical Deep-dives Talk

Open →2026-03

Escaping Big Brother (Or Your Ex): Counter Surveillance For Women's Shelters

Community Technical Blue Talk

Open →2025-08

Threat Modeling, Star Wars Edition

BSides SLC · 2023

Open →2023-06

Fight The Fight – Orchestrating And Automating Your Incident Response

BSides Dublin · 2021

Open →2021-05

Threat modeling 101, or "Why you shouldn't worry about bears on Fiji"

Kurt Alaybeyoglu

BSides Buffalo · 2022

Technical Intro Talk

Open →2022-06

Wrangle Your Defense Using Offensive Tactics

Bsides CT · 2019

Technical Blue Talk

Open →2019-11

The Million Dollar CEO Fraud: Anatomy of a Business Email Compromise

Damien McAndrews

Technical Cloud IAM DFIR Threat Intel Case Studies and Incidents Analysis Talk

Open →2024-03

The Language of Security Why Our Fail To Communicate Makes Security Harder by Augusto Barros

Open →2021-12

2024 Security BSides // Adam Pennington

Adam Pennington

BSides Cayman Islands · 2025

Open →2025-01

If I Were to Michael Bay The Plant, This Is How I Would Do It!

BSides Columbus · 2020

Technical Threat Modeling Vulnerability Research Intermediary Talk

Open →2020-08

Agentic AI Malware: Why the Cybersecurity Battle Isn’t Over

BSides Las Vegas · 2025

Technical AI Security Malware Analysis Advanced Red Talk

Open →2025-12

Technical IoT Vulnerability Research Demo

Open →2022-12

LLMs Suck at Cyber Intel—Unless You Hack Them Right

BSides TLV 2026

Technical AI Security OSINT Threat Intel Talk

Open →2026-03

Red and Blue Teaming and the Powers Gained! Adversarial Emulation: Jason Maynard

BSides Edmonton 2023

Technical Blue Red Demo Talk

Open →2023-10

Detections and Dragons: Creating Logic that Scales -Rachel Schwalk & Mak Foss

Rachel Schwalk Mak Foss

Technical Intermediary Blue Talk

Open →2025-06

BSidesROC · 2024

Open →2025-03

Emulate.Go: Adversary Emulation for CTI Analysts

BSides Toronto · 2020

Technical Detection Engineering Threat Intel Purple Demo

Open →2021-11

Intelligence-Driven Response to UNC5174 by Alessandra Rizzo

Alessandra Rizzo

BSides Edmonton · 2025

Technical Blue Case Studies and Incidents Analysis Talk

Open →2025-10

Cloud... Just Someone Else's Computer

Anastasios Pingios

BSides Cyprus · 2021

Technical Cloud IAM Talk

Open →2022-06

Red Team Engagements: How To Train Your Blue Team to Hunt

Madhav Bhatt Brad Richardson

BSides Charlotte · 2021

Technical Purple Talk

Open →2021-09

SOC Like a Genius: Cognitive Agents Delivering Wisdom at Scale

Oudy Even Haim Sarah Young

BSides Las Vegas · 2025

Technical AI Security Detection Engineering Threat Intel Blue Demo Talk

Open →2025-12

Illuminate the Grid: Building Telemetry Through Purple Teaming

BSides Charlotte · 2026

Technical Detection Engineering Threat Intel Threat Modeling Purple Case Studies and Incidents Analysis Methodology Talk

Open →2026-04

BSidesYXE 2024 - Jason Maynard - Red and Blue Teaming and the Powers Gained! Adversarial Emulation.

BSides Saskatoon

Open →2024-09

BSidesCharm - 2018 - Adam Mathis - Using Atomic Red Team to Test Endpoint Solutions

Open →2021-05

What the DLL is happening? A practical approach to identifying SOH.

BSides Dallas/Fort Worth

Open →2020-11

Ransomware As Canary For Societal Disruption

BSides Las Vegas 2025

Policy Technical Critical Infrastructure Security Malware Analysis Threat Intel Intermediary Blue Case Studies and Incidents Analysis+1

Open →2025-12

Everybody's At It But Why Aren't We? - Raj Samani

BSides Newcastle

Open →2023-12

Technical Deep-Dive: Red Canary

Open →2021-12

Hunting Defense Against The Dark Arts

BSides Philly · 2017

Technical Blue Talk

Open →2017-08

Evolution of Threat Intel & Modern APT Threat Landscape

BSides Newcastle · 2021

Technical Malware Analysis Reverse Engineering Threat Intel Demo Talk

Open →2021-10

Rockie Brockway, Rick Yocum - Att&ck Path Effectiveness

BSides FloodCity

Open →2019-05

BSides Calgary · 2026

Technical Detection Engineering Threat Modeling Demo Talk

Open →2024-03

Six Hundred Degrees of IAM Admin: Battles with a Cloud Conscious Adversary

BSides Seattle 2026

Technical Cloud IAM Detection Engineering Intermediary Blue Talk

Open →2026-04

Provisioned Privilege: Agentic AI as Designed Lateral Movement

Dr. Pravallika Devineni Doug Garbarino

BSides Charlotte · 2026

Technical AI Security Cloud IAM Threat Modeling Technical Deep-dives Talk

Open →2026-04

BSidesCharm - 2019 - David Hunt - Automated Adversary Emulation

Open →2021-05

BSidesCharm - 2018 - Devon Kerr - Quantify your hunt: not your parents’ red teaming

Open →2021-05

Defensible Secure Architecture

Oxana Sannikova

BSides St. John's

Technical Detection Engineering Threat Intel Threat Modeling Blue Talk

Open →2025-05

It's Malware Time: A Bar Crawl from Skunked Homebrew to Rotten Apples

Erika Noerenberg

BSides Charm · 2019

Technical Detection Engineering Malware Analysis Reverse Engineering Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2021-05

Atomic Red Team: Testing Your Security Posture

BSides Boise · 2020

Technical Detection Engineering Threat Modeling Vulnerability Research Talk

Open →2020-02

Streamlining Threat Hunting in Cloud Environments with Jupyter: Chi Phong Huynh and Kai Iyer

Chi Phong Huynh Kai Iyer

BSides Edmonton · 2024

Technical Cloud IAM Talk

Open →2025-10

MITRE Attack Flow: Laying Foundations for Predictive Intelligence

BSides Edmonton · 2024

Research Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2025-10