Home
Talks
CFP Guide
What is BSides?
About
Contact
Light
← All talks
Tool
BSides talks featuring Zeek
86
talks mention this tool across
33
BSides chapters.
Talks featuring Zeek
49:41
Open Source Malware Lab
Robert Simmons
BSides London
· 2016
Technical
DFIR
Detection Engineering
Malware Analysis
Intermediary
Blue
Technical Deep-dives
Talk
Open →
2016-07
51:37
Security Onion: Peeling Back the Layers of Your Network in Minutes
Doug Burks
BSides Augusta
· 2013
Technical
Tooling
DFIR
Detection Engineering
Network Security
Blue
Demo
Talk
Open →
2013-09
35:44
Sweet Security: Deploying a Defensive Raspberry Pi
Travis Smith
BSidesSF
· 2016
Technical
Demo
Open →
2016-04
57:35
Presenting Threat Intelligence Automation Using Jupyter
Robert Simmons
BSides Delaware
· 2017
Talk
Open →
2017-11
35:03
Offensive Anti-Analysis - Holly Williams
Holly Williams
BSides London
Technical
Talk
Open →
2016-07
42:44
Threat Hunting On Linux And Mac With Auditbeat System Module
Aaron Jewitt
BSides Luxembourg
· 2019
Technical
DFIR
Detection Engineering
Blue
Talk
Open →
2019-11
29:09
Implementing a Kick-Butt Training Program: BLUE TEAM GO!
Ryan Chapman
BSidesSF
· 2019
Career
Blue
Talk
Open →
2019-03
32:07
Open Source Approach: The Next Best Thing in Cyber Incidence Management
Chris Ensey
BSides DC
· 2017
Talk
Open →
2017-10
46:48
Detecting Malicious Websites using Machine Learning
Ajit Thyagarajan
Andrew Beard
BSides DC
· 2016
Research
Technical
Detection Engineering
Network Security
Talk
Open →
2016-10
41:04
Hunt Or Be Hunted
Alex Davies
BSides London
· 2017
Technical
Blue
Talk
Open →
2017-06
47:42
Threat Hunting with RockNSM
Bradford Dabbs
BSides KC
· 2018
Technical
Blue
Talk
Open →
2018-06
48:00
Machine Learning Fueled Cyber Threat Hunting
Tim Crothers
BSides Augusta
· 2017
Technical
Talk
Open →
2017-09
45:38
Threat Hunting by Dhruv Majumdar
Dhruv Majumdar
BSides Edmonton
· 2018
Technical
Talk
Open →
2018-09
43:20
Eyeing the Onion
Brad Shoop
Chris Rimondi
BSides Augusta
· 2013
Technical
Detection Engineering
Network Security
Blue
Demo
Talk
Open →
2013-09
19:40
BSides Rochester 2018 - IoT Botnet Detection System using Machine Learning
BSidesROC
Open →
2018-04
1:07:54
January Presentation Security Data Analysis for the masses
BSides Peru
Open →
2017-01
34:05
"SSH, so hot right now. Profiling it with HASSH" - Ben Reardon & Adel Karimi
Ben Reardon
Adel Karimi
BSides Canberra
· 2019
Technical
Detection Engineering
Network Security
Threat Intel
Talk
Open →
2019-05
29:14
Alex Kirk - Incident response and threat hunting using Bro/Zeek data
Alex Kirk
BSides Augusta
· 2019
Technical
DFIR
Detection Engineering
Threat Intel
Intermediary
Blue
Case Studies and Incidents Analysis
Technical Deep-dives
+1
Open →
2019-10
24:46
A Novel SIEM Solution That Doesn't Cost An Arm And A Leg
BSides Lisbon
· 2019
Talk
Open →
2019-12
43:06
Boston BSides - Machine Learning for Incident Detection - Chris McCubbin & David Bianco
BSides Boston
Open →
2016-08
45:49
Post-Quantum Cryptography For 2025
Andy Smith
BSides London
· 2025
Technical
Cryptography
Talk
Open →
2025-02
44:26
Netsec is Dead(?): Modern Network Fingerprinting for Real-World Defense
Vlad Iliushin
BSidesSF
· 2025
Technical
Talk
Open →
2025-06
24:38
Automating Event Log Production & Testing for SIEM Detection
Alek Rollyson
BSides Augusta
· 2017
Technical
Detection Engineering
Tooling
Blue
Talk
Open →
2017-09
47:54
Network Reliability Monitoring for ICS – Going beyond NSM and SIEM
Jim Gilsinn
BSides DC
· 2015
Technical
Talk
Open →
2015-12
50:24
From Kali and a Couple of VMs to NextGen Home Lab - An Approach to Practice and Develop your Skills
Bashar Shamma
BSides SATX
· 2020
Technical
Talk
Open →
2020-08
25:14
PG - From SOC to CSIRT - Ben Butz
BSides Las Vegas
Open →
2017-08
28:11
Home Labs Without Hardware: Building in the Cloud
Chris Myers
BSides Philly
· 2020
Technical
Talk
Open →
2020-12
48:43
Applying Data Science to Identify Malicious Actors in Enterprise Logs
Balaji Balakrishnan
BSides DC
· 2016
Technical
Detection Engineering
Malware Analysis
Threat Intel
Blue
Talk
Open →
2016-10
42:43
BSidesIowa 2019 Reviewing PCAPS with Security Onion
BSides Iowa
Open →
2019-04
44:59
Tony Lambert - Spotting Lateral Movement with Endpoint Data
Tony Lambert
BSides Augusta
· 2019
Technical
Talk
Open →
2019-10
6:10:59
BSidesSLC Live Stream
BSides SLC
Open →
2024-09
41:17
BSidesAugusta 2014 Mike Reeves - Scaling Security Onion to the Enterprise
Mike Reeves
BSides Augusta
· 2014
Technical
Talk
Open →
2014-09
53:10
VMs All the Way Down: Building an Inexpensive, Advanced Infosec Lab
John Hubbard
BSides Delaware
· 2016
Technical
Tooling
Intermediary
Purple
Talk
Open →
2016-11
58:16
Patrick Perry & TJ Biehle - Encrypted Things - Network Detection and Response in an Encrypted World
Patrick Perry
TJ Biehle
BSides Augusta
· 2019
Technical
Talk
Open →
2019-10
20:02
LOLS: Low-Level Shells — Weaponizing Ethernet for Command Control
Elysee Franchuk
Mohnish Dhage
BSides Las Vegas
Technical
Network Security
Reverse Engineering
Advanced
Red
Talk
Open →
2024-09
54:36
IDS is dead, long live IDS
Eric Arnoth
BSides Delaware
· 2015
Talk
Open →
2015-11
44:07
Build Yourself an Elastic Threat Hunting and Monitoring SIEM
Ronnie Watson
BSides Huntsville
· 2021
Technical
Talk
Open →
2021-02
38:43
Emergency VPN: Analyzing Mobile Network Traffic To Detect Digital Threats
Jan Fajfer
BSides Liverpool
· 2019
Technical
DFIR
Mobile Security
Network Security
Case Studies and Incidents Analysis
Technical Deep-dives
Talk
Open →
2019-07
1:00:24
Model Context Protocol (MCP): The Future of AI-Powered SOC Workflows
James Pope
BSides SLC
· 2026
Technical
AI Security
Detection Engineering
Threat Intel
Blue
Talk
Open →
2026-04
36:28
The Modern Defender's Toolbox: Low-Cost Solutions for High-End Defense
Wes Lambert
BSides Augusta
· 2025
Technical
Blue
Talk
Open →
2025-10
24:35
Press F to MOVEit: A quest to discover how a web shell appeared
Peter Ukhanov
BSides Charlotte
· 2023
Technical
DFIR
Malware Analysis
Web AppSec
Intermediary
Blue
Case Studies and Incidents Analysis
Technical Deep-dives
+1
Open →
2023-09
44:36
Dale Lakes - Home Defense for an IoT Infested World
Dale Lakes
BSides Augusta
· 2019
Talk
Open →
2019-10
24:24
Robust Defense for the Rest of Us
Russell Mosley
BSides Las Vegas
· 2017
Technical
Detection Engineering
Network Security
Threat Modeling
Blue
Talk
Open →
2017-08
35:16
Mike Reeves - Taking a Distributed Computing Approach to Network Detection with Bro and the cloud
BSides Augusta
Open →
2015-09
30:24
Detecting Network Beaconing With Convolutional Networks And Zeek Logs by Ignacio Arnaldo
Ignacio Arnaldo
BSides Basingstoke
Technical
Detection Engineering
Network Security
Threat Intel
Intermediary
Blue
Technical Deep-dives
Talk
Open →
2024-03
37:51
PATRIOT: Perceiving Advanced Threats by Rogue Internet Of Things
Ajit Thyagarajan
BSides DC
· 2017
Technical
Talk
Open →
2017-10
59:48
DCO and Data Science: Best Friends Forever
BSides Augusta
· 2022
Technical
Blue
Demo
Talk
Open →
2022-10
46:43
Detecting and analyzing fileless malware
Christopher Williams
Evan Wagner
BSides Tampa
· 2021
Technical
Intermediary
Blue
Demo
Open →
2021-04
42:36
Who are the people in your neighborhood? Tracking 'Shady' CIDR blocks
John Smith
BSides Tampa
· 2021
Technical
Talk
Open →
2021-04
30:57
Under the Hood of Ransomware.live: Building an Open-Source Ransomware Observatory
Julien Mousqueton
BSides Bournemouth
· 2025
Research
Technical
Malware Analysis
OSINT
Threat Intel
Intermediary
Case Studies and Incidents Analysis
Empirical Research
+1
Open →
2025-09
53:49
ICS/SCADA Defense
Chris Sistrunk
BSides Augusta
· 2014
Technical
Blue
Talk
Open →
2014-09
20:40
Don't Panic! A Guide to Proactive Security for Small Businesses
Ryan St. Germain
Clarissa Bury
BSides Charm
· 2023
Technical
GRC
Threat Intel
Tooling
Blue
Talk
Open →
2023-05
28:09
Watching Kittens at Play: Dissecting an Iranian Nation State Interactive Intrusion
Ryan Thompson
BSides SATX
· 2022
Technical
Blue
Case Studies and Incidents Analysis
Technical Deep-dives
Talk
Open →
2023-03
47:59
Linux Network Defence Evasion Techniques
Aqeeb Husain
BSides Newcastle
Technical
Malware Analysis
Network Security
Red
Talk
Open →
2023-12
41:25
GT - Seek out new protocols, and boldly go where no one has gone before
BSides Las Vegas
Open →
2024-09
48:22
Breakdown of Network IDS/IPS Choices
BSides Delaware
· 2016
Technical
Talk
Open →
2016-11
25:53
Patrick Perry - Exploit Kits Machine Learning
Patrick Perry
BSides Augusta
· 2016
Technical
Talk
Open →
2016-09
51:54
Wes Lambert - Augmenting the (Security) Onion: Facilitating Enhanced Detection and Response
Wes Lambert
BSides Augusta
Technical
DFIR
Detection Engineering
Threat Intel
Blue
Talk
Open →
2019-10
27:32
PG - Cut the Sh*t: How to Reign in Your IDS - Tony Robinson/da_667
BSides Las Vegas
Open →
2016-12
27:40
Last Line of Defense Reliability Through Inducing Cyber Threat Hunting
Abdul Basit Ajmal
BSides Islamabad
· 2021
Technical
Threat Hunting
Intermediary
Red
Technical Deep-dives
Talk
Open →
2022-05
18:54
I Thought I Saw a HAXOR
Thomas V. Fischer
BSides Amsterdam
· 2017
Technical
DFIR
Detection Engineering
Threat Intel
Blue
Talk
Open →
2017-09
23:26
The NSM Ouroboros: Embracing The Endless Cycle Of Network Security Monitoring
Kim Hendry
BSides Leeds
· 2023
Technical
Talk
Open →
2023-07
22:22
PG - Catching Linux Post-Exploitation with Auditd - Eric Gershman
BSides Las Vegas
Open →
2016-12
42:55
Martin Holste - Beyond Math Practical Security Analytics
Martin Holste
BSides Augusta
· 2016
Talk
Open →
2016-09
33:45
Quick Picks from Bro/Zeek logs
BSides Delaware
· 2018
Technical
Talk
Open →
2018-11
44:23
My Cyber Sense Is Tingling! Detection Engineering With Free Tools
Matthew Gracie
BSides SATX
· 2025
Technical
Talk
Open →
2025-09
43:43
Building a Sawmill: Processing Logs with Security Onion
Matthew Gracie
BSides Peru
· 2024
Technical
DFIR
Detection Engineering
Threat Intel
Blue
Demo
Talk
Open →
2024-08
22:49
GT - Exploration of Novel Visualizations for Information Security Data - Roni Choudhury & Brian Wyli
BSides Las Vegas
Open →
2017-08
40:12
Armadillo: A layered approach to portable security
Josh Rykowski
Sean Eyre
BSides Augusta
· 2018
Technical
Demo
Talk
Open →
2018-11
20:17
Turbo Tactical Exploitation: 22 Tips for Tricky Targets
HD Moore
BSides Las Vegas 2025
Technical
Network Security
OSINT
Vulnerability Research
Red
Talk
Open →
2025-12
22:58
Tom Webb - Incident Response Awakens
Tom Webb
BSides Augusta
· 2016
Talk
Open →
2016-09
28:52
Cyber Zoology: Protecting Your Network from New Breeds of Attacks with a Raspberry Pi
Patrick Kelly
BSides Toronto
· 2018
Technical
Talk
Open →
2018-11
28:35
IDS/IPS Choices: Benefits, Drawbacks, and Configurations
BSides Augusta
· 2016
Technical
Detection Engineering
Network Security
Threat Intel
Blue
Talk
Open →
2016-09
40:25
Catching More Files - Spotting the Adversary with Honey Techniques
Matthew Gracie
BSidesROC
· 2023
Technical
Talk
Open →
2024-09
25:03
Forensics: We're Not Just Byte-Sized
Ben Hodson
BSides Basingstoke
· 2025
Technical
Talk
Open →
2025-09
28:46
PG - Maximizing Bro Detection - John B. Althouse
BSides Las Vegas
Open →
2016-12
50:07
BG - A Better Way to Get Intelligent About Threats - Adam Vincent
BSides Las Vegas
Open →
2016-12
28:04
Setting up an in-line Linux server in Azure for NIDS or packet caps
Ken Netzorg
BSides Delaware
· 2021
Technical
Blue
Talk
Open →
2021-11
34:56
Emulate.Go: Adversary Emulation for CTI Analysts
Haydn Johnson
BSides Toronto
· 2020
Technical
Detection Engineering
Threat Intel
Purple
Demo
Open →
2021-11
37:14
Unity Makes Strength
Xavier Mertens
BSides Athens
· 2017
Talk
Open →
2017-10
45:04
Hunting Defense Against The Dark Arts
Danny Akacki
BSides Philly
· 2017
Technical
Blue
Talk
Open →
2017-08
11:27
Spotlight: Cybera
BSides Calgary
Open →
2021-12
42:40
The Declarative Future
Liam Randall
BSides Charm
Technical
Container Security
Detection Engineering
Web AppSec
Keynote
Open →
2021-05
31:21
Tony Drake Incident Response for the Overwhelmed, Understaffed, and Unprepared
Tony Drake
BSides Boulder
Career
DFIR
Talk
Open →
2021-08
35:31
BSidesCharm -2017 -Arming Small Security Programs: Network Baseline Generation and Alerts with Bropy
BSides Charm
Open →
2021-05
25:39
Current State of Virtualizing Network Monitoring
Ed Sealing
Daniel Lohin
BSides Charm
· 2017
Technical
Detection Engineering
Network Security
Case Studies and Incidents Analysis
Technical Deep-dives
Talk
Open →
2021-05