Tool

BSides talks featuring Splunk

252 talks mention this tool across 70 BSides chapters.

Talks featuring Splunk

BG - ATT&CKing the Status Quo: Improving Threat Intel and Cyber Defense with MITRE ATT&CK - Katie Ni

BSides Las Vegas

Open →2018-09

Syslog-ng: Getting Started, Parsing Messages, Storing In Elasticsearch

BSides Luxembourg · 2019

Technical Intro Workshop

Open →2019-11

MITRE ATT&CK Framework For Threat Hunting - Seth Brunt and Abby Warnes

Seth Brunt Abby Warnes

BSides Bristol · 2019

Open →2019-07

Detection-as-code: Why it works and where to start

BSidesSF · 2022

Technical DevSecOps Talk

Open →2022-07

ThreatPursuit VM

BSides Canberra · 2020

Tooling Malware Analysis Threat Intel Blue Demo Talk

Open →2020-05

Oh, the Places Your Packets Will Go!

BSides SLC · 2025

Open →2025-10

Implementing a Kick-Butt Training Program: BLUE TEAM GO!

BSidesSF · 2019

Career Blue Talk

Open →2019-03

Stop Writing Malware! The Blue Team Has Done It for You

Alberto Rodriguez Erik Hunstad

BSides Augusta · 2022

Technical Advanced Red Talk

Open →2022-10

Detecting Malicious Websites using Machine Learning

Ajit Thyagarajan Andrew Beard

BSides DC · 2016

Research Technical Detection Engineering Network Security Talk

Open →2016-10

Improve Your Network Security With Opensource IDS/IPS

BSides Munich · 2017

Technical Network Security Tooling Talk

Open →2017-04

Security Onions and Honey Pots

BSides SLC · 2015

Open →2015-04

Make Alerts Great Again

BSidesSF · 2017

Technical DevSecOps Talk

Open →2017-03

BG - Network Forensic Analysis in an Encrypted World - William Peteroy & Justin Warner

BSides Las Vegas

Open →2017-08

SIEM Slam: Tricking Modern SIEMs With Fake Logs And Confusing Blue Teams - Özgün Kültekin

Özgün Kültekin

Open →2024-04

CYBERSTALKING by CRIMINALS FOR FUN AND PROFIT

BSides Vancouver

Open →2017-05

B SIDES 26 julio 2019

Open →2019-07

Macy Cronkite Security BSides Boston 2013 - Splunk

Open →2013-06

Threat Hunting by Dhruv Majumdar

BSides Edmonton · 2018

Open →2018-09

Don't Boil the Ocean: Using MITRE ATT&CK to Guide Hunting Activity

BSidesSF · 2019

Technical Blue Talk

Open →2019-03

PowerShell post-exploitation, the Empire has fallen

BSides SATX · 2018

Technical Blue Red Talk

Open →2018-07

Quick And Easy Forensic Timelines Via Sysmon, WEF, And ELK

BSides Munich · 2019

Technical DFIR Detection Engineering Blue Talk

Open →2019-03

Eyeing the Onion

Brad Shoop Chris Rimondi

BSides Augusta · 2013

Technical Detection Engineering Network Security Blue Demo Talk

Open →2013-09

Cyber Crash Investigations: Seizing the Opportunity to Learn from Fast Crisis

Julia Wigton David Stokes

BSides Las Vegas · 2023

Research Case Studies and Incidents Analysis Methodology Talk

Open →2023-08

Scaling Detection And Response Teams: Enabling Efficient Investigations - James Dorgan

Open →2024-02

A Better Way to Get Intelligent About Threats

BSides DC · 2014

Technical Threat Intel Talk

Open →2014-10

January Presentation Security Data Analysis for the masses

Open →2017-01

Red Blue Purple AI

BSides Boulder · 2024

Technical AI Security OSINT Blue Purple Red Keynote

Open →2024-09

Alex Kirk - Incident response and threat hunting using Bro/Zeek data

BSides Augusta · 2019

Technical DFIR Detection Engineering Threat Intel Intermediary Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2019-10

White Collars & Black Hats: Bitcoin, Dark Nets and Insider Trading by Ken Westin

BSides Edmonton · 2018

Open →2018-09

Jak i dlaczego przygotować firmę do wprowadzenia narzędzia SIEM – realne problemy i wyzwania

Krzysztof Hudek

BSides Warsaw · 2016

Open →2016-10

Ryan Hays - Weaponizing Splunk: Using Blue Team Tools for Evil

BSides Knoxville · 2017

Technical Red Demo Talk

Open →2017-06

Bsides 2018 Track 2

BSides Vancouver

Open →2018-03

Team Threat Hunting with AI and Automation

Kenneth Peeples

BSides Charleston · 2024

Technical AI Security Container Security Detection Engineering Threat Intel Talk

Open →2024-11

Prioritising your security work using MITRE ATT&CK

BSides Tallinn · 2022

Technical Detection Engineering Threat Intel Threat Modeling Intermediary Blue Talk

Open →2022-10

Security Automation Simplified

BSidesSF · 2019

Technical DevSecOps Intro Talk

Open →2019-03

Weaponizing Splunk: Using Blue Team Tools For Evil - Ryan Hays

Open →2017-05

Determining Normal: Baselining with Security Log and Event Data - Derek Thomas

BSides Las Vegas

Open →2016-08

"OSINT'ing at Scale", Ben Menzies, CSides July 2020

BSides Canberra · 2020

Open →2020-07

Velociraptor: Digging Deeper

BSides Sydney · 2019

Technical DFIR Threat Intel Blue Demo Talk

Open →2019-09

eBPF For Security Monitoring

BSides Leeds · 2019

Technical Detection Engineering Malware Analysis Network Security Demo Talk

Open →2019-01

From Soup To Nuts: Building A Detection-as-Code Pipeline - David French

BSides Dublin · 2024

Technical Detection Engineering Intermediary Blue Talk

Open →2024-06

A Walk Through Logs Hell - Xavier Mertens

BSides Luxembourg · 2019

Open →2019-11

Pwning all the Internet of things for fun and profit

BSides Toronto · 2014

Open →2014-12

BSidesMCR 2019:Getting Splunky With Lateral Movement Attack,Detect&Evade -Ross Bingham&Tom MacDonald

BSides Manchester

Open →2019-09

AI Agents: Augmenting Vulnerability Analysis and Remediation

BSides KC · 2025

Open →2025-06

Beautiful Basics

BSides Vancouver · 2022

Open →2022-07

Scaling Amazon GuardDuty: A Comprehensive Detection Strategy

Avinash Reddy Thumma Amin

BSides Ahmedabad · 2025

Technical Cloud IAM Detection Engineering Threat Intel Talk

Open →2025-05

DFIR — Don't Forget Your Roots!

BSides London · 2022

Open →2022-01

BSidesSF 2020 - Mistakes Made Integrating Security Scanning into CI/CD (Atul G • Moses S)

Atul Gaikwad Moses Schwartz

BSidesSF · 2020

Technical DevSecOps Case Studies and Incidents Analysis Talk

Open →2020-11

Bsides 2018 Track 2

BSides Vancouver

Open →2018-03

BG - SECSMASH: Using Security Products to own the Enterprise - Kevin Dick & Steven Flores

BSides Las Vegas

Open →2017-08

Tracking Malicious Logon: Visualize and Analyze Active Directory Event Logs

Shusei Tomonaga Tomoaki Tani

BSides Las Vegas · 2018

Technical Active Directory DFIR Threat Intel Blue Talk

Open →2018-09

The Terror Of Tracking

BSides Belfast · 2018

Technical Malware Analysis Privacy Social Engineering Intro Case Studies and Incidents Analysis Talk

Open →2018-10

Billy Huang - Taking Back Control of Your SOC with Risk Based Alerting

Open →2022-10

Automation Plumbing - Ashley Holtz & Kyle Maxwell

BSides Las Vegas

Open →2016-08

GF - Detection Engineering Demystified: Building Custom Detections for GitHub Enterprise

BSides Las Vegas

Open →2024-09

How To Attack A SIEM - Daniel Crossley

Daniel Crossley

BSides London · 2025

Technical Blue Red Talk

Open →2025-02

Eric Goldstrom - Interactive Threat Defense: Incident Response, Threat Intel, and Red Team (oh my!)

Open →2019-11

How to Get Started in Cybesecurity - john Stoner

Open →2019-07

How To Win Users And Influence Boards: Tales From A Pro Stalker

BSides Leeds · 2019

Open →2019-01

BSidesCharm 2022 Closing Keynote - Secure the Era - Mick Baccio

Open →2022-07

BSides Toronto 2019 Anton Ovrutsky

Open →2019-10

The Problem With Identity Security & How To Fix It

Open →2024-06

From Kali and a Couple of VMs to NextGen Home Lab - An Approach to Practice and Develop your Skills

BSides SATX · 2020

Open →2020-08

SplunkGPT: Fine-tuning GPT-3 for Detection Engineering

Jake Coyne Andrew Gomez

BSides Augusta · 2023

Technical AI Security Detection Engineering Tooling Talk

Open →2023-10

Fundamentals That Time Forgot

BSides SLC · 2015

Technical Detection Engineering Network Security Intro Talk

Open →2015-04

When a Security Architect Writes an Application

BSides Charleston · 2014

Technical Web AppSec Talk

Open →2014-11

Slipping The Net: Qakbot, Emotet And Defense Evasion

BSides Cambridge · 2024

Technical Detection Engineering Malware Analysis Social Engineering Blue Talk

Open →2024-01

BSides PDX 2023 - Using Sigma as a Gateway to Detection Engineering (Micah Babinski)

BSides PDX · 2023

Open →2023-10

Home Labs Without Hardware: Building in the Cloud

BSides Philly · 2020

Open →2020-12

Applying Data Science to Identify Malicious Actors in Enterprise Logs

Balaji Balakrishnan

BSides DC · 2016

Technical Detection Engineering Malware Analysis Threat Intel Blue Talk

Open →2016-10

Detection-as-Code: Scaling SOC Operations

Aaron Wilkinson

Technical Blue Talk

Open →2025-02

PG - The SOC Counter ATT&CK - Mathieu Saulnier

BSides Las Vegas

Open →2019-10

Spotting The Adversary Using The ATT&CK Matrix: A Practical Approach

BSides Bristol · 2019

Technical Detection Engineering Threat Intel Blue Talk

Open →2019-07

MOSE: Using Configuration Management for Evil

BSidesSF · 2020

Technical Red Talk

Open →2020-03

Honeypot Boo Boo: Better Breach Detection With Deception Inception

BSides Dundee · 2022

Technical Blue Talk

Open →2022-08

No Silver Bullet: Multi-Contextual Threat Detection via Machine Learning

Rod Soto Joseph Zadeh

BSides Las Vegas · 2016

Research Technical Detection Engineering Machine Learning Malware Analysis Advanced Blue Case Studies and Incidents Analysis+2

Open →2016-08

SOC Analyst's Arsenal: Essential Tools, Tips & Tricks For Effective Investigations

BSides Munich · 2023

Technical DFIR Detection Engineering Tooling Intermediary Blue Talk

Open →2023-10

Every Contact Leaves A Trace by Ken Westin

Open →2023-07

BSidesCharm 2025 - What’s in the Cloud? - Kai Iyer

Open →2025-05

Bootstrapping Security

Jared Casner Rob Shaw

BSidesSF · 2020

Open →2020-03

A Serverless SIEM: Detecting All Baddies

Chen Cao Daniel Stinson-Diess

BSides Las Vegas · 2021

Technical Cloud IAM Detection Engineering Blue Talk

Open →2021-08

Data Analytics-Based Detection At Scale

Pedro Chaves Jan Pospisil

BSides Lisbon · 2018

Technical Detection Engineering Malware Analysis Blue Talk

Open →2018-12

'Like at do ye'? Perfecting Threat Detection for Next-Gen SOC's! - Aaron Wilkinson

Aaron Wilkinson

BSides Belfast 2025

Technical Detection Engineering Intermediary Blue Talk

Open →2025-12

PG - Intel-Driven Adversary Simulation for A Holistic Approach to Cybersecurity

Carlos Gonçalves

BSides Las Vegas · 2024

Technical Threat Intel Threat Modeling Purple Case Studies and Incidents Analysis Talk

Open →2024-09

Endpoint to Internet: Security Control Validation Using Threat Behavior Emulation

Ken Jenkins Stuart McMurray

BSides DC · 2018

Technical Detection Engineering Threat Intel Blue Red Talk

Open →2018-11

Getting Better with Data - Steph Locke

BSides London · 2016

Open →2016-07

Not BigData, AnyData

BSides Augusta · 2013

Technical DFIR Detection Engineering Threat Intel Intermediary Blue Talk

Open →2013-09

BSidesSLC Live Stream

Open →2024-09

AI Agents: Augmenting Vulnerability Analysis and Remediation

BSides SATX · 2025

Open →2025-09

Securing AI - Seth

Open →2024-01

What did the SIEM See?

BSides DC · 2019

Technical Blue Talk

Open →2019-10

Brandon George - Hunt Like You Mean It

BSides Columbus

Open →2020-08

BSides Vancouver 2015 - Irfahn Khimji & Ken Westin - I am The Insider Threat

BSides Vancouver

Open →2015-04

Bots of the SOC

Michael Kearney

BSides Cheltenham

Technical AI Security Detection Engineering Blue Demo Talk

Open →2024-07

BSides Perth 2023: Sajeeb Lohani & Ben Christian: Achieving Supply Chain Security on a Budget

Sajeeb Lohani Ben Christian

BSides Perth · 2023

Technical Supply Chain Security Purple Talk

Open →2023-08

Shall We Play a Game?

J Wolfgang Goerlich

BSidesSF · 2019

Open →2019-03

SIEM Slam: Tricking Modern SIEMs With Fake Logs And Confusing Blue Teams - Özgün Kültekin

Özgün Kültekin

BSides Tirana · 2023

Technical Red Talk

Open →2023-11

Scalability: Not as Easy as it SIEMs - Keith Kraus & grecs

BSides Las Vegas

Open →2016-08

Obfuscation in Plain Sight

Ed Sabijon Jon Chaipis

BSides Charlotte · 2023

Technical Detection Engineering Malware Analysis Purple Talk

Open →2023-09

Compliance As Code With Open Policy Agent - John McCabe

BSides Belfast · 2020

Open →2020-01

Kevin Sistrunk - Automating Security Operations Around the Clock

BSides Knoxville

Technical AI Security Detection Engineering Demo Talk

Open →2025-06

Boston BSides - Breaking Out of the Silo - Julian Defronzo & Justin Pagano

Open →2016-07

Securing Change: Call for Volunteers

BSides Boston · 2013

Open →2013-06

Applied Machine Learning in Cyber Security

Saw Winn Naung Aung Myint Myat

BSides Myanmar · 2023

Open →2023-04

Testing Defensive Controls w/ atomic-operator - Josh Rickard

BSides KC · 2022

Technical DevSecOps Blue Talk

Open →2022-10

Build Yourself an Elastic Threat Hunting and Monitoring SIEM

BSides Huntsville · 2021

Open →2021-02

Collecting Threat Data using Distributed Deception

BSides Augusta · 2022

Technical Malware Analysis Threat Intel Threat Modeling Case Studies and Incidents Analysis Empirical Research Talk

Open →2022-10

Lessons learned in automating the incident Life Cycle

Alexander Sinno Walter Stinkens

BSides Athens · 2022

Technical Demo Talk

Open →2022-06

They Live – World Domination via Human-Mimicking Automation

BSides DC · 2017

Technical Web AppSec Red Talk

Open →2017-10

Introduction to Container Security in Kubernetes

BSides Delaware · 2018

Technical DevSecOps Talk

Open →2018-11

Basic Malware Analysis for Incident Responders by Jared Graff

Technical Intro Talk

Open →2024-05

Xavier Mertens - All Your Logs Are Belong To You!

BSides London · 2014

Open →2014-09

Adversary Emulation for Everyone!

Cristian Di Bartolomeo Todd Brecher

BSides Toronto · 2023

Technical Detection Engineering Threat Intel Threat Modeling Intro Purple Demo Talk

Open →2023-11

Lean Threat Intelligence

Lennart Koopmann

BSides San Diego · 2017

Technical Detection Engineering Threat Intel Talk

Open →2017-01

Screaming About Detection Coverage in ALLCAPS

BSides Philly · 2025

Technical Detection Engineering Threat Modeling Purple Empirical Research Methodology Talk

Open →2026-02

Host-Hunting on a Budget

BSides Augusta · 2019

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2019-10

Broken Arrow 2022: Detangling Digital Domestic Situations

BSides Augusta · 2022

Open →2022-10

Tom Maddock - Splunking AD - BSides San Diego 2017

BSides San Diego

Open →2017-01

Model Context Protocol (MCP): The Future of AI-Powered SOC Workflows

BSides SLC · 2026

Technical AI Security Detection Engineering Threat Intel Blue Talk

Open →2026-04

Delivering Control Assurance Through Purple Teaming

Carlos Rodriguez Ben Finke

BSides Charlotte · 2022

Technical Detection Engineering Threat Modeling Purple Talk

Open →2022-09

What You Most Likely Did Not Know About Sudo - Peter Czanik

BSides Luxembourg · 2019

Open →2019-11

Alex Walston - Threat Hunting in Your Identity Stack

BSides Augusta · 2025

Technical Cloud IAM Blue Talk

Open →2025-10

2024 Security BSides // Mick Baccio

BSides Cayman Islands · 2024

Open →2025-01

Blackbox Containers: Container Security in the Enterprise

BSides Charm · 2023

Technical Container Security DevSecOps Supply Chain Security Intermediary Talk

Open →2023-06

OWASP Won't Save You Here Tale Of A Modern Web App Challenge by Tas Tondang

Open →2024-10

Dale Lakes - Home Defense for an IoT Infested World

BSides Augusta · 2019

Open →2019-10

Big SIEM Energy at Micro-SIEM Cost

BSides Las Vegas

Technical Cloud IAM Detection Engineering Demo Talk

Open →2023-10

Robust Defense for the Rest of Us

BSides Las Vegas · 2017

Technical Detection Engineering Network Security Threat Modeling Blue Talk

Open →2017-08

Transfer Learning: Analyst-Sourcing Behavioral Classification

Ignacio Arnaldo Tim Mather

BSides Las Vegas · 2017

Open →2017-08

Wes Lambert - Endpoint Excavation: Digging Through Host Artifacts with Velociraptor

BSides Augusta · 2021

Technical Blue Talk

Open →2021-10

I Thought I Saw a |-|4X0.-

BSides Lisbon · 2017

Open →2017-11

Detection Mastery: War Stories From The Hunters Side

Ilya Kolmanovich Felix Kurmisch

BSides Toronto · 2020

Technical Detection Engineering Malware Analysis Threat Intel Blue Talk

Open →2021-11

Stacked and Hacked: Crafting the Ultimate COTS Incident Response Arsenal

BSides Philly · 2023

Technical DFIR Detection Engineering Blue Talk

Open →2024-01

Skills to Build for Your Cloud Security Career

Cassandra Young

BSides Philly · 2023

Career Career & Soft Skills Cloud IAM Intro Talk

Open →2024-01

Red Team Engagements: How to Train Your Blue Team to Hunt Adversaries

Brad Richardson Madhav Bhatt

BSides RDU · 2021

Technical Purple Red Talk

Open →2021-10

What the Log?! So Many Events, So Little Time...

BSides Luxembourg · 2019

Open →2019-11

Purple Teaming 301 – Free Attack Simulation and Control Validation via Atomic Red Team

BSides Charm · 2024

Technical Detection Engineering Threat Modeling Purple Talk

Open →2024-06

PwnSpoof by Daniel Oates-Lee

Daniel Oates-Lee

BSides Dublin · 2022

Open →2022-05

Security at Speed: Securing Code in your DevOps Pipeline

Daniel Byrnside

BSides Charleston · 2019

Technical DevSecOps Talk

Open →2019-11

Logging and Detection for SaaS Applications: GitHub and Snowflake

BSides Denver 2024

Technical DFIR Detection Engineering Threat Intel Intermediary Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2024-09

Lightning Talk 4: Splunk Query Fundamentals

BSides Toronto · 2023

Technical Detection Engineering Intro Talk

Open →2023-11

Nicholas Gobern - Good Behavior is it's own reward

Nicholas Gobern

Open →2023-10

Something's Phishy: See the Hook Before the Bait

BSidesSF · 2025

Technical Detection Engineering Threat Intel Threat Modeling Blue Technical Deep-dives Talk

Open →2025-06

Next Level SOC Automation You Never Thought Of

BSides SLC · 2022

Open →2023-01

Detection & Response at Planet Scale - Travis Lanham

BSides Albuquerque

Open →2024-08

CloudSec Rules Everything Around Me (C.R.E.A.M.)

BSides Las Vegas · 2019

Technical Cloud IAM DFIR Detection Engineering Intro Talk

Open →2019-10

Before the Breach: The Security Essentials

BSides Charlotte · 2025

Technical DFIR Detection Engineering Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2025-05

How To Introduce Proactive Security In Your Team by Wiktor Wielento

Wiktor Wielento

BSides London · 2023

Open →2023-05

Hack in Your Sleep

BSides Huntsville · 2021

Technical Red Talk

Open →2021-02

Writing Custom Splunk Applications

BSides SLC · 2016

Open →2016-05

Fantastic Clear-Text Passwords And Where To Collect Them

BSides Munich · 2025

Technical Active Directory Malware Analysis Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2026-02

BSidesCharm 2022 - Three Bridges & a Compass: Navigating Risk Landscapes with Intelligence

Open →2022-07

White Collars & Black Hats: Bitcoin, Dark Nets and Insider Trading

BSides SLC · 2019

Technical War Stories Case Studies and Incidents Analysis Talk

Open →2019-02

Have Lab, Now What?

Kelsey Seymour Aaron Everson

Open →2024-06

Dispelling the Myth of "Maturity" in Threat Hunting

BSides Buffalo · 2023

Technical Blue Talk

Open →2023-06

Everybody Loves TAXII by Alexander Darby

Alexander Darby

Open →2023-05

Building The ATT&CK Pipeline For Linux - Tim Wadhwa-Brown

Tim Wadhwa-Brown

BSides London · 2025

Research Technical Blue Purple Case Studies and Incidents Analysis Empirical Research Talk

Open →2025-02

Keeping up with the Jones's and other APT threats

Kenneth Inkster

Technical DFIR Detection Engineering Malware Analysis Threat Intel Blue Talk

Open →2020-12

Broken Arrow: DFIT At Home

BSides Charlotte · 2020

Open →2020-10

How to Develop Cyber Personnel by Alessandro Lovadina & Ryan Irving

Alessandro Lovadina Ryan Irving

BSides Tampa · 2025

Open →2025-07

Everything You Always Wanted to Know About Linux Logging

BSides Tampa · 2021

Technical Blue Talk

Open →2021-04

Hunting from APT to *QL Queries: From approach to tool

Eddy Mota Edu Vivi

BSides São Paulo · 2025

Technical Detection Engineering Threat Intel Threat Modeling Blue Demo Talk

Open →2025-06

It's Not a False Positive, It's Alert Fatigue

Conor Osthoff Rhiannon Dixon

BSides Peru · 2024

Technical Detection Engineering Threat Intel Case Studies and Incidents Analysis Talk

Open →2024-08

Practical Defense

BSides Cincinnati · 2017

Open →2017-05

Building a Security Data Infrastructure

Stephen Mitchell

BSides Buffalo · 2023

Open →2023-06

Don't Panic! A Guide to Proactive Security for Small Businesses

Ryan St. Germain Clarissa Bury

BSides Charm · 2023

Technical GRC Threat Intel Tooling Blue Talk

Open →2023-05

Cryptojacking Servers: The Intersection of poor patch management and ICO's - Chuck McAuley

BSides SATX · 2018

Open →2018-07

A pain in the SaaS: Scalable Detection in the Age of Data Sprawl

Alan Braithwaite

Open →2025-06

Cloud IR: A Rapid Guide For AWS, Azure & GCP

BSides Munich · 2025

Technical Cloud IAM DFIR Detection Engineering Blue Talk

Open →2026-02

Securing Generative AI: Threats, Old and New

BSides Charm · 2024

Technical AI Security Supply Chain Security Threat Modeling Intermediary Talk

Open →2024-06

SOAR In Cyber Security - Arjola Hoxha

Technical Detection Engineering Threat Intel Talk

Open →2023-11

BSides Iowa 2018: "Drug Dealing in IOC’s: a retrospective on threat intel & threat hunting..."

Open →2018-04

The Importance of Identifying Crown Jewels for Honey Tokens

Alexandra Parisi

BSides Peru · 2020

Open →2020-10

Considering Cloud Coverage in SIEM/XDR Design

BSides SLC · 2025

Technical Cloud IAM Detection Engineering Threat Modeling Blue Talk

Open →2025-06

Escapades in DFIR, An Incident Responder's Reflections

BSides RDU · 2022

Career War Stories DFIR Detection Engineering Threat Intel Blue Purple Talk

Open →2023-03

Making Sense of Splunk Enterprise

Jonathan Singer

BSides Greenville · 2020

Open →2020-06

Free Blue-Team TTPs: Stop Shiny Object Syndrome

BSides TLV · 2020

Technical Blue Talk

Open →2020-07

RAG Against the Machine: Using Retrieval-Augmented Generation & MCP to Fortify Cybersecurity Defense

BSides Las Vegas · 2025

Technical AI Security Detection Engineering GRC Talk

Open →2025-12

Hunting Threats like a Cybersecurity Ninjas

Roberto Martínez

BSides Colombia

Technical Detection Engineering Threat Intel Threat Modeling Blue Talk

Open →2025-04

The Insider Threat: Detecting Data Exfiltration via EDR

BSides Budabest · 2022

Technical DFIR Detection Engineering Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2023-06

Blue teaming Incident Response for the Win

Bsides CT · 2019

Technical Blue Talk

Open →2019-11

I Thought I Saw a HAXOR

Thomas V. Fischer

BSides Amsterdam · 2017

Technical DFIR Detection Engineering Threat Intel Blue Talk

Open →2017-09

Essential Logs Pyramid SIEM

BSides PDX · 2023

Technical Detection Engineering Threat Intel Blue Talk

Open →2023-10

DevSecOps: When It's Not a Buzzword

BSides Calgary · 2022

Technical Container Security Detection Engineering DevSecOps Talk

Open →2022-12

The Hole in Your SOC: How a compromise of your SIEM could be a disaster for your organization

BSides Tampa · 2021

Technical Active Directory Cloud IAM Detection Engineering Kerberos Threat Intel Talk

Open →2021-04

0Day to HeroDay: Bringing A Company From Scorched Earth to a Modern Security Organization

Open →2019-07

Cryptojacking Servers: The Intersection of Poor Patch Management, ICOs and Autopwning

Bsides CT · 2018

Technical Red Talk

Open →2018-11

Embarking on Your INFOSEC Journey in Military City USA

Alex Kaden Higgins

BSides SATX · 2024

Career Career & Soft Skills Intro Talk

Open →2024-06

Compliance meets SIEM automation

BSides Newcastle · 2020

Technical Active Directory Detection Engineering GRC Talk

Open →2020-11

PG - Building A Teaching / Improvement Focused SOC - Andrew Gish-Johnson

BSides Las Vegas

Open →2018-09

Taking ChatGPT Hunting by Nicholas Carroll

Nicholas Carroll

BSides Tampa · 2026

Technical AI Security Detection Engineering Threat Intel Talk

Open →2026-02

Detecting the Elusive: Active Directory Threat Hunting

BSides Charm · 2017

Technical Active Directory Detection Engineering Kerberos Blue Technical Deep-dives Talk

Open →2021-05

Threats Versus Capabilities: Building Better Detect and Respond Capabilities

BSides Dublin · 2022

Technical Detection Engineering Threat Intel Blue Talk

Open →2022-05

PG - Catching Linux Post-Exploitation with Auditd - Eric Gershman

BSides Las Vegas

Open →2016-12

Making Security Smarter through Decentralization

Nathaniel Quist

BSides Boulder · 2024

Open →2024-09

Vintage Internet Noise

BSides SLC · 2024

Open →2024-09

Tipping the Scales Back In Our Favor

BSides DC · 2016

Technical Supply Chain Security Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2016-11

Detecting the Insider Threat: It's Not Magic

BSides SATX · 2021

Technical DFIR Threat Intel Talk

Open →2021-06

Automation in the SOC - Everyone is ready, everyone can afford it

Open →2020-12

Trust Unearned? Evaluating Certificate Authority Trustworthiness

David J. Bianco

BSides Augusta · 2023

Research Cryptography Threat Intel Case Studies and Incidents Analysis Empirical Research Talk

Open →2023-10

RAGnarok: Assisting Threat Hunting with Local LLMs

Jun Miura Cybelle Oliveira

BSides Las Vegas · 2025

Technical AI Security Detection Engineering Threat Intel Blue Demo Talk

Open →2025-12

BSidesBoulder 2023 - Ryan Thompson - Ecosystem of Insights Building Operation Dashboards That Enable

BSides Boulder · 2023

Technical Detection Engineering Tooling Talk

Open →2024-02

Weaponizing Splunk: Using Blue Teams for Evil

BSides Charm · 2017

Technical Red Talk

Open →2021-05

The Security Hitchhiker's Guide to API Security

Timothy De Block

BSides Augusta · 2023

Technical Web AppSec Talk

Open →2023-10

Incident Response is HARRRRRD… but it doesn't have to be

BSides SATX · 2020

Technical Blue Talk

Open →2020-08

So you wanna build a Security Lab

BSides KC · 2018

Technical Tooling Talk

Open →2018-06

My Cyber Sense Is Tingling! Detection Engineering With Free Tools

BSides SATX · 2025

Open →2025-09

Incident Response Fails – What we see with our clients

BSides SATX · 2021

Technical Blue Talk

Open →2021-06

BSides Iowa 2018: "Immutable Architecture and Ruthless Automation"

Open →2018-04

From Aspire to Hire: Navigating Your First Cyber Job

BSides Charm · 2024

Career CTF Career & Soft Skills Intro Talk

Open →2024-06

GT - Exploration of Novel Visualizations for Information Security Data - Roni Choudhury & Brian Wyli

BSides Las Vegas

Open →2017-08

Employee Hijacking: Building a Hacktober Awareness Program

Ryan B Ninad B Dylan H

BSidesSF · 2016

Open →2016-04

Building My Ultimate Home Detection Lab - Oliver Creed

BSides Lancashire

Open →2024-06

Red Teaming your Risk Management Framework

Keith Pachulski

BSides Philly · 2017

Policy Technical Red Talk

Open →2017-08

The Ransomware Threat: Tracking the Digital Footprints

Kevin Bottomley

BSidesSF · 2016

Technical Detection Engineering Malware Analysis Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2016-04

Armadillo: A layered approach to portable security

Josh Rykowski Sean Eyre

BSides Augusta · 2018

Technical Demo Talk

Open →2018-11

Log Management and Log Aggregation

BSides KC · 2017

Open →2017-07

ZERO-RULES Alert Contextualizer & Correlator

BSides Las Vegas · 2024

Technical AI Security Detection Engineering Threat Intel Blue Talk

Open →2024-09

IOCs are dead, long live the TTPs!

BSides KC · 2019

Technical Blue Talk

Open →2019-06

Leveraging Automation for Threat Intelligence at Scale

BSides Asheville · 2018

Technical Threat Intel Talk

Open →2019-03

Cyber Zoology: Protecting Your Network from New Breeds of Attacks with a Raspberry Pi

BSides Toronto · 2018

Open →2018-11

Securing the Distributed Workforce

William Bengtson

BSidesSF · 2016

Open →2016-04

Technical Detection Engineering Malware Analysis Threat Intel Blue Talk

Open →2024-03

Risk-Based Response With SOAR

BSides Newcastle · 2025

Technical Detection Engineering Talk

Open →2024-01

LT - Evil Empire: SIEM FTW - EggDropx & CheezMan

BSides Las Vegas

Open →2017-01

Yeet the Leet with Osquery

Sebastiaan Provost

BSides Newcastle · 2021

Technical Detection Engineering Malware Analysis Threat Intel Talk

Open →2021-10

Forensics: We're Not Just Byte-Sized

BSides Basingstoke · 2025

Open →2025-09

Don't Be a HIPAACrite

BSides Denver · 2020

Technical Privacy Social Engineering Threat Modeling Purple Talk

Open →2020-10

Emulate.Go: Adversary Emulation for CTI Analysts

BSides Toronto · 2020

Technical Detection Engineering Threat Intel Purple Demo

Open →2021-11

Lessons Learned from Building & Running MHN, a Crowd-sourced Honeynet

BSidesSF · 2015

Research Case Studies and Incidents Analysis Empirical Research Talk

Open →2023-12

Career Village: Hacked My Way Here: Real Stories into Security

Jason Lee May Azcarraga Jiphun Satapathy Grady Lancaster Ryen Macababbad

BSides Seattle · 2026

Career Career & Soft Skills Panel

Open →2026-03

Detections and Evasions for Configuration Manager Attack Paths

BSides SATX · 2025

Open →2025-09

Breaking BOTS: Cheat Blue Team CTFs by building AI agents that investigate

Leo Meyerov Alex Maurice Alex Warren Tanoy Synindra Thomas Cook

BSides Seattle 2026

Technical AI Security CTF Intermediary Blue Technical Deep-dives Talk

Open →2026-03

Red Teaming AI Systems for Security Validations

BSides Seattle · 2026

Technical AI Security Threat Modeling Vulnerability Research Red Case Studies and Incidents Analysis Methodology Talk

Open →2026-03

What I Learned Mentoring 130+ Cybersecurity Students into Tech

Bonifacio Capuyan

BSides SATX · 2025

Career Career & Soft Skills Intro Talk

Open →2025-09

Unity Makes Strength

BSides Athens · 2017

Open →2017-10

Celebrating The Life Of Duncan McAlynn - Ben Docherty and Sam Humphries

Ben Docherty Sam Humphries

BSides Newcastle · 2024

Open →2024-01

Cleaning the Apple Orchard: Using Venator to Detect macOS Compromise

BSides Charm · 2019

Technical DFIR Malware Analysis Threat Intel Intermediary Blue Case Studies and Incidents Analysis Technical Deep-dives+2

Open →2021-05

Malware Persistence in Windows

BSides Calgary · 2022

Technical Malware Analysis Talk

Open →2022-12

Approaching Parity: Considerations for Adapting Enterprise Monitoring to IaaS

BSides RDU · 2018

Technical Cloud IAM Intermediary Blue Talk

Open →2018-10

BSidesCharm -2017 -Arming Small Security Programs: Network Baseline Generation and Alerts with Bropy

Open →2021-05

What Did the SIEM Say?

Shawn Thomas JR Presmy

BSides Charm · 2019

Technical Detection Engineering Threat Intel Blue Talk

Open →2021-05

BSidesCharm - 2019 - David Hunt - Automated Adversary Emulation

Open →2021-05

Quantifying Breach Impact Mitigation by ZTA

Alexey Malashev

BSides SATX · 2025

Open →2025-09

Open →2022-12

The Politics of Intelligence

BSides NYC · 2018

Open →2023-04

BSidesCharm - 2018 - Devon Kerr - Quantify your hunt: not your parents’ red teaming

Open →2021-05

Defensible Secure Architecture

Oxana Sannikova

BSides St. John's

Technical Detection Engineering Threat Intel Threat Modeling Blue Talk

Open →2025-05

Effective Monitoring for Operational Security

Russell Mosley Ryan St. Germain

Technical Detection Engineering Threat Intel Blue Talk

Open →2021-05

Ivan Marchany: How to Build a Cyber Home Lab

BSides St. Pete · 2025

Career Detection Engineering Threat Intel Vulnerability Research Intro Talk

Open →2026-03

Streamlining Threat Hunting in Cloud Environments with Jupyter: Chi Phong Huynh and Kai Iyer

Chi Phong Huynh Kai Iyer

BSides Edmonton · 2024

Technical Cloud IAM Talk

Open →2025-10