Tool

BSides talks featuring Sigma rules

50 talks mention this tool across 27 BSides chapters.

Generic and platform-agnostic detection rules that can be implemented across security tools and SIEM platforms

Talks featuring Sigma rules

Command-Line Obfuscation: You Can Run, _and_ You Can Hide

BSides Dublin · 2024

Technical DFIR Detection Engineering Talk

Open →2024-06

Threat Hunting On Linux And Mac With Auditbeat System Module

BSides Luxembourg · 2019

Technical DFIR Detection Engineering Blue Talk

Open →2019-11

Next-Gen Detection: Harnessing LLMs for Sigma Rule Automation

BSidesSF · 2024

Open →2024-07

B SIDES 26 julio 2019

Open →2019-07

Quick And Easy Forensic Timelines Via Sysmon, WEF, And ELK

BSides Munich · 2019

Technical DFIR Detection Engineering Blue Talk

Open →2019-03

Scaling Detection And Response Teams: Enabling Efficient Investigations - James Dorgan

Open →2024-02

Red Blue Purple AI

BSides Boulder · 2024

Technical AI Security OSINT Blue Purple Red Keynote

Open →2024-09

Prioritising your security work using MITRE ATT&CK

BSides Tallinn · 2022

Technical Detection Engineering Threat Intel Threat Modeling Intermediary Blue Talk

Open →2022-10

Netsec is Dead(?): Modern Network Fingerprinting for Real-World Defense

BSidesSF · 2025

Open →2025-06

How to Train Your Detection Dragon

BSidesSF · 2025

Technical Detection Engineering Blue Talk

Open →2025-10

The Process of Detection Engineering1

Technical Intermediary Blue Talk

Open →2023-03

BSides Toronto 2019 Anton Ovrutsky

Open →2019-10

Think You're Stealthy? How to Detect Attacks in AD

Rachit Arora Sai Sathvik Ruppa Aakash Raman

BSides Charm · 2025

Technical Active Directory DFIR Detection Engineering Intermediary Blue Talk

Open →2025-05

Command-Line Obfuscation: You can run, _and_ you can hide

BSides Prishtina

Technical Purple Red Demo Talk

Open →2024-09

BSides PDX 2023 - Using Sigma as a Gateway to Detection Engineering (Micah Babinski)

BSides PDX · 2023

Open →2023-10

PG - The SOC Counter ATT&CK - Mathieu Saulnier

BSides Las Vegas

Open →2019-10

Jonathan Magen - SPNDL: Security Policy Notation and Description Language

BSides Philly · 2020

Technical Methodology Technical Deep-dives Talk

Open →2020-12

The Cybersecurity State of the Union

BSides Philly · 2023

Open →2024-01

From Hours To Minutes: Automating Incident Response Triage With Open-Source Tools

Markus Einarsson

BSides Munich · 2025

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2026-02

From Panic To Protocol: Digital Forensics & Incident Response

Technical DFIR Intro Blue Talk

Open →2024-08

GCP BigQuery as Security Detection Platform

Diana Kramer Norberto García Marín

BSides Las Vegas · 2021

Technical Cloud IAM Detection Engineering Talk

Open →2021-08

A Serverless SIEM: Detecting All Baddies

Chen Cao Daniel Stinson-Diess

BSides Las Vegas · 2021

Technical Cloud IAM Detection Engineering Blue Talk

Open →2021-08

Malware Wars: DarkSide Strikes Back as BlackMatter

Lindsay Kaye James Niven

BSides Charm · 2022

Research Malware Analysis Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2022-07

Where's Wally? Hands-On Thread Hunting In Elasticsearch Using EE-Outliers

BSides Luxembourg · 2019

Technical Demo Talk

Open →2019-11

Detecting Log4J on a Global Scale Using Collaborative Security

Klaus Agnoletti

BSides Las Vegas · 2022

Technical Threat Intel Vulnerability Research Case Studies and Incidents Analysis Empirical Research Talk

Open →2022-09

TryHackingMy Way From Cyber Sales to Cyber SOC

R4ck4tt4ck Michael Rack

BSides London 2025

Career Career & Soft Skills Detection Engineering Intro Blue Talk

Open →2026-03

Sysmon or it Didn't Happen

Gerard Johansen

BSides Charm · 2024

Technical DFIR Detection Engineering Blue Talk

Open →2024-06

What the Log?! So Many Events, So Little Time...

BSides Luxembourg · 2019

Open →2019-11

Can LLMs Take Our Jobs? AI-Assisted Detection Research

Maam Khan Darsh Smith Uday Mayapan RC Oric

BSides PDX · 2024

Research Technical AI Security Detection Engineering Threat Intel Blue Empirical Research Technical Deep-dives+1

Open →2024-11

OH-SINT: Merging OSINT Into RE Workflows to Simplify Analysis

Nicholas Carroll

BSides Las Vegas · 2023

Technical Malware Analysis OSINT Reverse Engineering Threat Intel Case Studies and Incidents Analysis Methodology Talk

Open →2023-10

BSidesCharm 2022 - Three Bridges & a Compass: Navigating Risk Landscapes with Intelligence

Open →2022-07

Hunting from APT to *QL Queries: From approach to tool

Eddy Mota Edu Vivi

BSides São Paulo · 2025

Technical Detection Engineering Threat Intel Threat Modeling Blue Demo Talk

Open →2025-06

Escapades in DFIR, An Incident Responder's Reflections

BSides RDU · 2022

Career War Stories DFIR Detection Engineering Threat Intel Blue Purple Talk

Open →2023-03

RAG Against the Machine: Using Retrieval-Augmented Generation & MCP to Fortify Cybersecurity Defense

BSides Las Vegas · 2025

Technical AI Security Detection Engineering GRC Talk

Open →2025-12

Hunting Threats like a Cybersecurity Ninjas

Roberto Martínez

BSides Colombia

Technical Detection Engineering Threat Intel Threat Modeling Blue Talk

Open →2025-04

Essential Logs Pyramid SIEM

BSides PDX · 2023

Technical Detection Engineering Threat Intel Blue Talk

Open →2023-10

Closing the Gap vs Adversaries With Community Resources

BSides NYC · 2023

Technical Detection Engineering Threat Intel Threat Modeling Blue Demo Talk

Open →2023-06

Taking ChatGPT Hunting by Nicholas Carroll

Nicholas Carroll

BSides Tampa · 2026

Technical AI Security Detection Engineering Threat Intel Talk

Open →2026-02

PurpleTeam 101 by Chris Peacock

BSides Tampa · 2023

Open →2023-09

I Make Them Good Processes Go Bad: Deep Dive on LOLbins & GTFObins

BSides Buffalo · 2023

Technical Blue Red Talk

Open →2023-06

Developing a holistic approach to threat hunting: Welcome to the jungle

Richard Rowlandson

BSides Calgary · 2020

Open →2020-12

Sandbox gems for CTI rookies - Ertugrul Kara

BSides Bournemouth

Open →2025-09

Building a sustainable detector development lifecycle

BSides Charleston · 2022

Open →2023-01

RAGnarok: Assisting Threat Hunting with Local LLMs

Jun Miura Cybelle Oliveira

BSides Las Vegas · 2025

Technical AI Security Detection Engineering Threat Intel Blue Demo Talk

Open →2025-12

Pretty Easy Threat Hunting

BSides SATX · 2021

Technical Blue Talk

Open →2021-06

My Cyber Sense Is Tingling! Detection Engineering With Free Tools

BSides SATX · 2025

Open →2025-09

Forensics: We're Not Just Byte-Sized

BSides Basingstoke · 2025

Open →2025-09

ChatGPT for Security Analysts

Technical Detection Engineering Malware Analysis Threat Intel Talk

Open →2024-03

SIGMA: One Rule to Find Them All

BSides Las Vegas · 2025

Technical Detection Engineering Threat Intel Blue Talk

Open →2025-12

Hunting Threats as Security Ninja - Roberto Martinez

Roberto Martinez

BSides Fredericton · 2024

Technical Detection Engineering Malware Analysis Threat Intel Talk

Open →2024-11