Breaking Ground·45 min
Matt Muir
Dissects two cloud malware families that use time stomping and renamed binaries to evade forensics and detection.
malware-analysiscloudlinux+2
Breaking Ground BSidesLV 2022
Las Vegas, USA · August 2022 · 15 talks
Breaking Ground talks from BSides Las Vegas 2022.
1–15 of 15 talks
Breaking Ground·36 min
Amanda Walker
Explains how observability tooling can answer security and privacy questions beyond traditional logs and time-series data.
monitoringthreat-detectionincident-response+2
Breaking Ground·45 min
Eric Kuehn · Mic Whitehorn-Gillam
Shows how a red team hid stolen data inside ordinary web cookies to slip past inspection proxies and DLP controls.
attacknetworkweb+2
Breaking Ground·40 min
Klaus Agnoletti
Shows how a shared, community-fed blocklist helped detect and block Log4j exploitation across the globe.
detectionopen-sourceintelligence+2
Breaking Ground·46 min
Vladimir De Turckheim
Traces how prototype pollution was found and handled in npm, from a bug bounty report to real-world Node.js exploits.
webvulnerabilitiesopen-source+1
Breaking Ground·41 min
Chris Hoff
Argues security should aim beyond resilience toward anti-fragility, using decision frameworks and team design.
riskmanagementteam+2
Breaking Ground·48 min
BG
Presents open-source hardware implant tooling for recording keystrokes and networking many devices together.
hardwaredeviceattack+2
Breaking Ground·37 min
Philippe Proteus
Maps how attackers move between AWS accounts and VPCs via roles, peering and IAM privilege escalation, with detection ideas.
cloudidentityattack+2
Breaking Ground·37 min
Omri Misgav
Shows new ways to bypass Windows driver signing enforcement by tampering with kernel memory, plus defenses against them.
windowskernelexploiting+2
Breaking Ground·38 min
Shreyas Rami · Shaun Jones
Shows how a large company ran a controlled ransomware simulation and what its purple-team exercises revealed about detection gaps.
ransomwaredetectionincident-response+2
Breaking Ground·50 min
Jonathan Leitschuh · Patrick Way
Shows how bulk pull request generation with OpenRewrite and CodeQL can fix Java open source vulnerabilities at scale.
open-sourcevulnerabilitiesautomation+2
Breaking Ground·31 min
Daniel A Donze
Shows how Volatility can carve kernel objects out of Linux's SLUB allocator to recover freed or hidden data.
linuxmemorykernel+2
Breaking Ground·54 min
Covers what goes into building a command-and-control (C2) system.
attackbuildingframework+2
Breaking Ground·32 min
Rock Stevens · Matt Hand
Shows how trusted security appliances can become a point of compromise and how to limit the damage.
defensive-securityriskmachine-learning+2