Tool

BSides talks featuring Terraform

107 talks mention this tool across 42 BSides chapters.

Infrastructure-as-code tool for automating creation and management of red team infrastructure

Talks featuring Terraform

CyberRange: An Open-source Offensive Security Lab In AWS

Thomas Cappetta

BSides London · 2019

Technical Tooling Talk

Open →2019-06

How to 10X Your Company's Security (Without a Series D)

BSidesSF · 2020

Technical Cloud IAM DevSecOps Threat Modeling Blue Talk

Open →2020-03

Gollum: One Anti-Phish Bot to Rule Them All

BSides Cape Town · 2019

Technical Detection Engineering Threat Intel Tooling Blue Talk

Open →2019-12

Attacking and Defending Infrastructure with Terraform: How we got admin across cloud environments

Mike Ruth Francisco Oca

BSidesSF · 2022

Technical Cloud IAM Talk

Open →2022-07

TL;DR: Applying AI to Security

BSidesSF · 2024

Technical AI Security Detection Engineering Threat Intel Intro Talk

Open →2024-07

Overwatch: A serverless approach to orchestrating your security automation

Sanchay Jaipuriyar

BSidesSF · 2023

Technical DevSecOps Talk

Open →2023-05

Introduction To Red Team Tooling And OpSec

Marwan El-Gendi

BSides London · 2022

Technical Intro Red Talk

Open →2022-01

Offensive Ansible For Red Teams

BSides Belfast · 2020

Technical Active Directory Tooling Red Demo Talk

Open →2020-01

BsidesLV 2024 - Breaking Ground - Wednesday

BSides Las Vegas · 2024

Open →2024-08

RedOps: Automating your Red Team Infrastructure

BSides Charleston · 2018

Technical DevSecOps Tooling Red Talk

Open →2018-11

Automating red team infrastructure using Overlord

Evangelos Nikolaou Vasilis Sikkis

BSides Athens · 2021

Technical Tooling Red

Open →2021-06

Attacking & Defending Supply Chains: How we got Admin in your Cloud, Again

BSidesSF · 2024

Technical Cloud IAM Supply Chain Security Talk

Open →2024-07

How to Kill an AWS Access Key

Benjamin Hering

BSidesSF · 2020

Technical Cloud IAM Blue Talk

Open →2020-03

Learning from AWS Customer Security Breaches

Bsides CT · 2020

Technical Cloud IAM DFIR Intermediary Case Studies and Incidents Analysis Talk

Open →2020-11

Cyber Crash Investigations: Seizing the Opportunity to Learn from Fast Crisis

Julia Wigton David Stokes

BSides Las Vegas · 2023

Research Case Studies and Incidents Analysis Methodology Talk

Open →2023-08

GitOops! All Paths Lead To Clouds

BSides London · 2022

Open →2022-01

BSides Amman 2021 2nd Edition - Talks Day

Aladdin Almubayed Mazin Ahmed Mohammad Al-Shami

BSides Amman · 2021

Open →2021-07

Heavy Machinery and Burly Lumberjacks and Logging! Oh My! - Dan Astor and Evan Perotti

Open →2018-06

Infrastructure as RCE: How to abuse Terraform to elevate access

BSides NYC · 2023

Technical Cloud IAM DevSecOps Vulnerability Research Red Talk

Open →2023-06

Analyzing volatile memory on a Google Kubernetes Engine node

Marcus Hallberg

BSides NYC · 2023

Technical Cloud IAM Container Security DFIR Demo Talk

Open →2023-06

Inside Cloud Attack Paths: End-to-End Adversary Simulation

Mauricio Velazco

BSides NYC · 2025

Technical Cloud IAM Threat Modeling Blue Red Talk

Open →2025-11

Rolling out the C2: Red Team Infrastructure in 2024

BSides Las Vegas · 2024

Technical Cloud IAM DevSecOps Red Demo Talk

Open →2024-09

CI/CD Security: A New Eldorado

Remi Escourrou Xavier Gerondeau Gauthier Sebaux

BSides Las Vegas · 2022

Technical Cloud IAM DevSecOps Supply Chain Security Red Talk

Open →2022-09

Realtime Cyber Alerting with StreamAlert

BSides Wellington · 2017

Technical Blue Demo Talk

Open →2018-02

WhizBangLambdaFix: where AWS Misconfigurations meet Auto-Fix-It Antics

Lily Chau Lakshmanan Murthy

BSidesSF · 2024

Technical Cloud IAM

Open →2024-07

Is Your Approach To Pipeline Security Flawed? Rethinking CI/CD Security

BSides London · 2025

Technical DevSecOps Supply Chain Security Intermediary Talk

Open →2025-02

YARA-as-a-Service (YaaS): Real-Time Serverless Malware Detection

BSides Las Vegas · 2017

Technical Malware Analysis Tooling Blue Demo Talk

Open →2017-08

Fighting Email Phishing with a Custom Cloud IDS

BSidesSF · 2017

Technical Blue Talk

Open →2017-03

How to CTF Infra — Beyond the challenges and flags

Max G Jayesh Singh Chauhan

BSidesSF · 2023

Open →2023-05

Launch Control — Automating a Security Baseline in the Cloud at Scale

David Levitsky Olivia Hillman

BSidesSF · 2023

Technical Cloud IAM Demo Talk

Open →2023-05

Big Data Lake, Big Data Leak by Ben Caller

BSides London · 2022

Open →2022-01

An Overview in Cloud Penetration Testing

BSides Prishtina · 2022

Technical Cloud IAM Vulnerability Research Red Talk

Open →2022-05

Creating A Resilient Red Team Infrastructure Using Terraform

Andrei Grigoras

Technical Red Talk

Open →2023-11

BSides Oslo 2019 - Marit & Bendik - Technical challenges of creating a CTF

Open →2019-06

Home Labs Without Hardware: Building in the Cloud

BSides Philly · 2020

Open →2020-12

Action Anomalies: A Hacker's Guide to Github Actions

BSides Tallinn · 2024

Technical DevSecOps Supply Chain Security Vulnerability Research Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2024-10

BSidesSF 2024 - Temporary Access to the Cloud: A Case Study (Tomas Rabczak)

BSidesSF · 2024

Technical Cloud IAM Case Studies and Incidents Analysis Talk

Open →2024-07

From Packets to Intel: Building your own Network Threat Feed

BSides Joburg · 2025

Technical Cloud IAM Network Security Threat Intel Blue Talk

Open →2025-08

Honeypot Boo Boo: Better Breach Detection With Deception Inception

BSides Dundee · 2022

Technical Blue Talk

Open →2022-08

Hidden In Plain Sight: (Ab)Using Entra's AUs by Katie Knowles

Open →2024-10

Cloudy With a Chance of Purple Rain: Leveraging Stratus Red Team to Secure Your Clouds

Luciano Avendano

BSides PDX · 2022

Technical Cloud IAM Detection Engineering Threat Modeling Purple Demo Talk

Open →2022-10

Purple Teaming Cloud Identity Simulation Labs for Red and Blue teams

BSides Dallas/Fort Worth · 2022

Technical Cloud IAM Detection Engineering Threat Modeling Purple Technical Deep-dives Demo Talk

Open →2022-11

GCP BigQuery as Security Detection Platform

Diana Kramer Norberto García Marín

BSides Las Vegas · 2021

Technical Cloud IAM Detection Engineering Talk

Open →2021-08

What Should and Shouldn't Scare You: Kubernetes and Containers

BSidesSF · 2020

Technical Intro Talk

Open →2020-11

JIT Happens: How Instacart Uses AI to Keep Doors Open and Risks Closed

Dominic Zanardi Matthew Sullivan

BSides Las Vegas

Technical AI Security Cloud IAM Blue Demo

Open →2024-09

Pipeline Pandemonium: How to Hijack the Cloud and Make it Rain Insecurity

BSides Las Vegas · 2024

Technical Cloud IAM DevSecOps Supply Chain Security Red Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2024-09

How to Secure Cloud Machine Identities

Komal Dhull Nathan Brahms

BSidesSF · 2024

Technical Cloud IAM Talk

Open →2024-07

AiIAM: Transforming the Democratized AWS IAM Architecture with LLMs

Anthony Scheller Jorge L Gomez

BSidesSF · 2024

Technical Cloud IAM Talk

Open →2024-07

SMBeagle: SMB Share Hunter

Daniel Oates-Lee

BSides Cheltenham · 2022

Open →2022-07

Broken links — Behind the scenes of Supply Chain breaches

François Proulx

BSides NYC · 2023

Technical Supply Chain Security Case Studies and Incidents Analysis Methodology Talk

Open →2023-06

Threat Modelling as Code: Building Security into Your Git Workflow

Christian Frichot

BSides Perth · 2025

Open →2025-10

Metabadger: Automating IMDS Protection at Scale in AWS

BSidesSF · 2022

Technical Cloud IAM Talk

Open →2022-07

Serverless Security Testing: Challenges and Solutions

Tal Melamed Meir Benayoun

BSides TLV · 2022

Technical Cloud IAM DevSecOps Vulnerability Research Technical Deep-dives Talk

Open →2022-07

Tales from the DevSecOps world: SIEM completely as Code

George Tsigourakos Kyriaki Solomidou John Torakis

BSides Athens · 2022

Technical DevSecOps Talk

Open →2022-06

Oops!!... Did I Reveal Something? Detecting Leaked Secrets in Azure Deployment Templates

BSides Cape Town · 2023

Technical Cloud IAM DevSecOps Blue Red Talk

Open →2023-12

Everyday AI: Leveraging LLMs for Simple, Effective Security Automation

Matthew Sullivan Dominic Zanardi

BSidesSF · 2025

Technical AI Security Cloud IAM Detection Engineering Talk

Open →2025-10

Securing Cloud Delivery Pipelines — Findings From A Blue/Red Team Security Simulation

BSides London · 2022

Technical Purple Talk

Open →2022-01

Compliance As Code With Open Policy Agent - John McCabe

BSides Belfast · 2020

Open →2020-01

Cyber Deception in GCP with Generative Traps

BSides Charm · 2025

Technical Cloud IAM Detection Engineering Talk

Open →2025-05

IAC (Infrastructure-As-Code) SAST - What's That?

Technical DevSecOps Talk

Open →2022-05

Who Goes There? Actively Detecting Intruders With Cyber Deception Tools

Dwayne Mcdaniel

BSides Boulder · 2024

Open →2024-09

Infrastructure as Code: Managing Environments with Terraform and Ansible

BSides Leeds · 2023

Technical Cloud IAM DevSecOps Talk

Open →2023-07

Rami McCarthy - AWS Security: Easy Wins and Enterprise Scale

BSides Boston · 2020

Technical Cloud IAM Supply Chain Security Talk

Open →2020-11

Rooting out Security Risks Lurking in your CI/CD Pipelines

Vasant Chinnipilli

BSides Berlin · 2021

Technical Container Security DevSecOps Supply Chain Security Talk

Open →2021-09

Cloud Attack: Dissecting Attack Paths with Graph-Mode

BSides Las Vegas · 2024

Technical Cloud IAM Threat Modeling Vulnerability Research Red Talk

Open →2024-09

Cloud IAM Strategy for Multicloud and Hybrid Environments: Risks and Gaps

Cassandra Young Christian Nicholson

BSides Charm · 2024

Technical Cloud IAM Intermediary Talk

Open →2024-06

Domain Takeovers For Fun And Profit

Daniel Oates-Lee

BSides Lancashire · 2023

Technical DNS Security DevSecOps Web AppSec Intermediary Red Demo Talk

Open →2023-04

The Current State of Infrastructure as Code (IaC) from a Security Standpoint

BSides Toronto · 2023

Technical Cloud IAM DevSecOps Talk

Open →2023-11

Big SIEM Energy at Micro-SIEM Cost

BSides Las Vegas

Technical Cloud IAM Detection Engineering Demo Talk

Open →2023-10

Insights on Using a Cloud Telescope to Observe Internet-Wide Botnet Propagation Activity

Fabricio Bortoluzzi

BSides Las Vegas · 2024

Research Cloud IAM Malware Analysis Threat Intel Empirical Research Technical Deep-dives Talk

Open →2024-09

Breaking The Cloud: A Tale Of 3 Breaches

Open →2024-02

Get in the Box: Containerizing Red Team Infrastructure

Dan Astor John Callahan

BSides Philly · 2023

Technical DevSecOps Red Talk

Open →2024-01

Terraform Security: Attacking and Defending Infrastructure as Code

BSides Philly · 2023

Technical Cloud IAM DevSecOps Vulnerability Research Technical Deep-dives Talk

Open →2024-01

Building Real-Time AWS Guardrails: A Serverless, Homegrown Engineering Blueprint

Aleksei Denisov

BSides Seattle 2026

Technical Cloud IAM DevSecOps Intermediary Blue Technical Deep-dives Talk

Open →2026-04

Skills to Build for Your Cloud Security Career

Cassandra Young

BSides Philly · 2023

Career Career & Soft Skills Cloud IAM Intro Talk

Open →2024-01

BSides Sofia 2022: Common security pitfalls in AWS Public cloud for highly regulated industries

BSides Sofia · 2022

Open →2022-04

Sean Weiss: Designing an Effective Security Operations Strategy with a DevSecOps Mindset

Technical DevSecOps Talk

Open →2020-12

From Keyless to Careless: Abusing Misconfigured OIDC Authentication in Cloud Environments

Christophe Tafani-Dereeper

BSides Las Vegas · 2024

Technical CI/CD Security Cloud IAM Vulnerability Research Intermediary Red Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2024-09

Broke but Breached: Secret Scanning at Scale on a Student Budget

Raviteja Ming Chow

BSides Las Vegas · 2025

Research Technical DevSecOps Supply Chain Security Vulnerability Research Intermediary Case Studies and Incidents Analysis Empirical Research+1

Open →2025-12

Building an Auto-Remediation Platform for the Cloud

BSides SLC · 2022

Open →2023-01

Hey, You, Get Out of My Cloud – Real-World Cloud Security

BSides SLC · 2025

Technical Cloud IAM Talk

Open →2025-06

Extensible DevSecOps pipelines with Jenkins, Docker, Terraform, and a kitchen sink full of scanners

Richard Bullington-McGuire

Bsides CT · 2019

Technical DevSecOps Talk

Open →2019-11

Secure(r) Cloud Development

Christo Goosen Toufeeq Ockards

BSides Cape Town · 2017

Technical Cloud IAM Detection Engineering DevSecOps Talk

Open →2017-12

When Cloud Infrastructure Provisioned With Someone in Marketing's Credit Card Is Compromised

BSides Peru · 2023

Technical Cloud IAM DFIR Blue Talk

Open →2023-08

Tuning The Warp Drive with Laforge: New Tool for Building Security Competitions

Alex Levinson Dan Borges

BSides Las Vegas · 2018

Tooling CTF Talk

Open →2018-09

A Log4Shell Practice Exploitation Range in the Cloud

Karl Sickendick

BSides SATX · 2022

Technical Vulnerability Research Red Demo

Open →2023-03

Building Bulletproof AWS Environments with Secure CDK Constructs

BSides PDX · 2024

Open →2024-11

Detectors as Code - Building Better Detectors

BSides Charleston · 2019

Open →2019-11

Git Those Passwords Out Of Your Repos!

BSides Cheltenham · 2023

Technical DevSecOps Supply Chain Security Talk

Open →2023-06

Avoiding Credential Chaos: Authenticating With No Secrets

Chitra Dharmarajan Steve Jarvis

BSides Las Vegas · 2025

Technical Cloud IAM DevSecOps Demo Talk

Open →2025-12

Building Castles in the Cloud: AWS Security and Self-Assessment

Bsides CT · 2019

Technical Cloud IAM Talk

Open →2019-11

I Find Your Lack of Serverless Disturbing! Leveraging the Cloud to Automate the Mun

Michael Butler Bryce Kunz

BSides SLC · 2019

Open →2019-02

Cutting through the Static: Dynamic Credentials for AWS & Terraform Cloud - Adam Mikolajczyk

Open →2023-08

DevSecOps: When It's Not a Buzzword

BSides Calgary · 2022

Technical Container Security Detection Engineering DevSecOps Talk

Open →2022-12

Sajeeb Lohani - Efficient Defence Turbocharging Security Workflows

BSides Perth · 2025

Open →2025-10

Building Your MS Sentinel Attacks: Simulating MITRE ATT&CK Techniques In Azure

Albert Timileyin

Technical Demo Talk

Open →2025-08

Breaking free from the chains of fate: Bypassing AWSCompromisedKeyQuarantineV2 Policy

BSides Albuquerque

Technical Cloud IAM Talk

Open →2024-08

BSidesIowa 2019 "DevSecOps Key Controls for Modern Security Success"

Open →2019-05

Piacere: DevSecOps Automated

Radoslaw Piliszek Pavel

BSides Newcastle · 2021

Technical Cloud IAM DevSecOps Talk

Open →2021-10

IAM Very Confused: A Friendly Guide To Cloud And Modern AuthZ - Tom Cope

BSides Basingstoke · 2025

Technical Cloud IAM Talk

Open →2025-09

Tag, You're Leaked: Surviving the tj-actions Supply Chain Attack

Mark Esler Ashish Kurmi

BSides PDX 2025

Technical DevSecOps Supply Chain Security Case Studies and Incidents Analysis Talk

Open →2025-12

Container Confidential: Secrets Management For Modern Applications

Open →2025-08

Bridging the gap among Cloud Engineers and Incident Responders with Open Source

Open →2024-10

Emulate.Go: Adversary Emulation for CTI Analysts

BSides Toronto · 2020

Technical Detection Engineering Threat Intel Purple Demo

Open →2021-11

Deep dive into cloud DevOps through Infrastructure as Code

BSides SATX · 2020

Technical Cloud IAM DevSecOps Empirical Research Talk

Open →2020-08

Breaking In, Giving Back: My Cyber Security Journey - Tom Coogans

BSides Basingstoke · 2025

Career Community Career & Soft Skills DevSecOps Intro Talk

Open →2025-09

DeceptionOps: Automating Deception Tech - Andrew Waite

BSides Newcastle

Open →2023-12