Breaking Ground·45 min
Matt Muir
Dissects two cloud malware families that use time stomping and renamed binaries to evade forensics and detection.
malware-analysiscloudlinux+2
August 2022 · Las Vegas, USA
BSides Las Vegas
8 sessions · 84 talks
Sessions at this event
Breaking Ground
15 talks
Breaking Ground talks from BSides Las Vegas 2022.
Common Ground
12 talks
Common Ground talks from BSides Las Vegas 2022.
Ground Floor
15 talks
Ground Floor talks from BSides Las Vegas 2022.
Ground Truth
10 talks
Ground Truth talks from BSides Las Vegas 2022.
Hire Ground
6 talks
Hire Ground talks from BSides Las Vegas 2022.
I Am The Cavalry
10 talks
I Am The Cavalry talks from BSides Las Vegas 2022.
PasswordsCon
13 talks
PasswordsCon talks from BSides Las Vegas 2022.
Proving Ground
3 talks
Proving Ground talks from BSides Las Vegas 2022.
All BSidesLV 2022 talks
Filters+
1–24 of 84 talks
Breaking Ground·36 min
Amanda Walker
Explains how observability tooling can answer security and privacy questions beyond traditional logs and time-series data.
monitoringthreat-detectionincident-response+2
Breaking Ground·45 min
Eric Kuehn · Mic Whitehorn-Gillam
Shows how a red team hid stolen data inside ordinary web cookies to slip past inspection proxies and DLP controls.
attacknetworkweb+2
Breaking Ground·40 min
Klaus Agnoletti
Shows how a shared, community-fed blocklist helped detect and block Log4j exploitation across the globe.
detectionopen-sourceintelligence+2
Breaking Ground·46 min
Vladimir De Turckheim
Traces how prototype pollution was found and handled in npm, from a bug bounty report to real-world Node.js exploits.
webvulnerabilitiesopen-source+1
Breaking Ground·41 min
Chris Hoff
Argues security should aim beyond resilience toward anti-fragility, using decision frameworks and team design.
riskmanagementteam+2
Breaking Ground·48 min
BG
Presents open-source hardware implant tooling for recording keystrokes and networking many devices together.
hardwaredeviceattack+2
Breaking Ground·37 min
Philippe Proteus
Maps how attackers move between AWS accounts and VPCs via roles, peering and IAM privilege escalation, with detection ideas.
cloudidentityattack+2
Breaking Ground·37 min
Omri Misgav
Shows new ways to bypass Windows driver signing enforcement by tampering with kernel memory, plus defenses against them.
windowskernelexploiting+2
Breaking Ground·38 min
Shreyas Rami · Shaun Jones
Shows how a large company ran a controlled ransomware simulation and what its purple-team exercises revealed about detection gaps.
ransomwaredetectionincident-response+2
Breaking Ground·50 min
Jonathan Leitschuh · Patrick Way
Shows how bulk pull request generation with OpenRewrite and CodeQL can fix Java open source vulnerabilities at scale.
open-sourcevulnerabilitiesautomation+2
Breaking Ground·31 min
Daniel A Donze
Shows how Volatility can carve kernel objects out of Linux's SLUB allocator to recover freed or hidden data.
linuxmemorykernel+2
Breaking Ground·54 min
Covers what goes into building a command-and-control (C2) system.
attackbuildingframework+2
Breaking Ground·32 min
Rock Stevens · Matt Hand
Shows how trusted security appliances can become a point of compromise and how to limit the damage.
defensive-securityriskmachine-learning+2
Common Ground·46 min
Jack Hatwick
Explores how cognitive biases like survivorship and confirmation bias shape security decisions, hiring, and risk perception.
sociallearningrisk+1
Common Ground·54 min
Alyssa Miller
Shows security leaders how to frame metrics, risk and projects so board members grasp and back their programs.
managementrisklessons-learned
Common Ground·50 min
Shea Nangle · Wendy Knox Everette
Walks through how SOC 2 experience carries over to FedRAMP authorization, with prep tips and the main differences.
compliancecloudframework+2
Common Ground·46 min
Chris Kubecka
Recounts how wiper malware and cyberattacks disrupted borders, aid work and civilian services in Ukraine's early war.
statethreatransomware+2
Common Ground·44 min
Explains the common challenges of software bills of materials (SBOMs) and how to address them.
supply-chainriskopen-source+1
Common Ground·1 hr
Carl Hertz
Shows how a small or medium business can fit security into its everyday IT operations.
managementriskdefensive-security+1
Common Ground·46 min
Robert "TProphet" Walker
Describes living in Point Roberts, a US exclave cut off from the mainland by Canada, covering borders, taxes, housing and connectivity.
privacycommunitydiscussion+1
Common Ground·47 min
Josh Michaels · Lea Snyder
Examines how vague labels like "technical" and "engineer" shape hiring and reviews, and offers ways to get more precise.
interviewmanagementteam+2
Common Ground·47 min
Nimrod Stoler · Nethanel Coppenhagen
Shows how researchers pulled encryption keys and stored credentials out of the Blue Prism RPA platform through chained attacks.
vulnerability-researchreverse-engineeringexploitation+2